Paying a supplier abroad means handing over documents about yourself and your business — registration papers, identity documents, sometimes bank statements. Most guidance explains why they are asked for and stops there. The more useful question, and the one you are entitled to ask of anyone holding them, is what happens to those documents afterwards.
- Documents collected for verification are retained, not discarded after the check.
- Retention is a legal obligation, which is why deletion on request is not automatic.
- In Kenya, personal data in those documents falls under the Data Protection Act 2019.
- You can ask who holds your data, why, and for how long.
- Send documents through the channel you were asked to use, never over open chat.
Why they are kept rather than checked and deleted
It is reasonable to assume a document is looked at, approved and then thrown away. That is not how regulated verification works. The obligation is not only to check, but to be able to demonstrate later that the check was done and on what basis.
That means the record has to survive the transaction, often for years after the relationship ends. A firm that deleted its verification files on request would be unable to answer the very question the files exist to answer.
The three questions worth asking anyone
Whether you are dealing with a bank, a payment provider or an agent, the same 3 questions establish how seriously your information is being handled.
| Ask | What a good answer sounds like |
|---|---|
| Who holds this, and where? | A named entity and a stated location, not a vague reference to systems |
| Why is it being kept? | A specific obligation, not a general statement about compliance |
| For how long? | A defined period with a start point, not indefinitely |
An organisation that cannot answer these about its own records is unlikely to be handling them carefully, and that is a useful signal well before any money moves.
How to send documents safely
The larger practical risk is rarely the eventual storage. It is the journey: identity documents pasted into chat apps, forwarded through several inboxes, and sitting in the photo roll of a phone that later changes hands.
- 1Use the upload channel you were directed to rather than a messaging app.
- 2Send only the document that was asked for, not an entire folder.
- 3Redact what is genuinely irrelevant to the request where you can.
- 4Do not forward the same file on to a supplier who has no reason to hold it.
- 5Clear the copies from your own devices once the upload is confirmed.
What you can ask for afterwards
Kenyan personal data is governed by the Data Protection Act 2019, which gives individuals rights over data held about them and places duties on those holding it. Businesses operating across East Africa may also be dealing with equivalent regimes in other jurisdictions.
- You can ask what personal data is held about you and why.
- You can ask for inaccurate information to be corrected.
- You can ask how long it will be held and on what basis.
- Deletion is not absolute where a retention obligation applies.
The practical point is simpler than the law: the same documents that let a payment through are documents you should know the whereabouts of. Asking once, at the start of a relationship, is easier than asking later for a reason.
Frequently asked questions
Can I ask for my documents to be deleted after a payment?
You can ask, and where a retention obligation applies the answer will usually be that they must be kept for a defined period. A clear explanation of that period is what to expect.
Why am I asked for the same documents again later?
Registrations and identity documents expire, and records have to reflect the current position rather than the position when you first signed up. Periodic refreshes are routine.
Is it safe to send identity documents over WhatsApp?
It is the most common way they are exposed. Use whatever secure upload you were given, and if you were not given one, ask for one before sending anything.
SilkBridge helps importers in Kenya, Uganda and Tanzania pay Chinese suppliers in RMB — documented, reviewed in Nairobi, and tracked to payout.
Keep reading
Ready to pay your supplier?
See the day's rate and start a documented, tracked request — no account needed.
Start a payment request