Privacy Policy

Last Updated: April 26, 2025

KenyaEstates ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains our practices regarding the collection, use, disclosure, and protection of personal data when you use the KenyaEstates Platform (the "Service"), in compliance with the Kenyan Data Protection Act, 2019 (DPA) and other relevant regulations.

1. Scope

This Policy applies to personal data processed by KenyaEstates through the Service.

2. Information We Collect

We collect personal data you provide directly, data collected automatically, and potentially data from third parties:

  • Data You Provide: Name, email, phone number, account credentials, profile information (bio, license number for agents), property details and images you upload, messages sent via the platform, payment information (if applicable).
  • Data Collected Automatically: IP address, browser type, device information, operating system, usage patterns (pages visited, features used, time spent), cookies and similar tracking technologies (see our Cookie Policy).
  • Data From Third Parties: [If applicable, e.g., verification services, social media logins - specify sources and types of data].

3. How We Use Your Information

We process your personal data for the following purposes:

  • To provide, operate, maintain, and improve the Service.
  • To create and manage your account and facilitate user interactions.
  • To personalize your experience (e.g., showing relevant listings).
  • To process transactions (if applicable).
  • To communicate with you (service notifications, support, marketing communications with your consent).
  • To analyze usage and trends to improve the Service.
  • To ensure security, prevent fraud, and enforce our Terms of Service.
  • To comply with legal and regulatory obligations.

We rely on the following legal bases for processing your personal data:

  • Consent: Where you have given explicit consent (e.g., for marketing emails).
  • Contractual Necessity: To perform our contract with you (e.g., providing the core services when you register).
  • Legal Obligation: To comply with applicable laws (e.g., data requests from authorities).
  • Legitimate Interests: For purposes like improving our service, security, and fraud prevention, provided these interests are not overridden by your rights and interests.

5. Sharing and Disclosure of Information

We may share your personal data with:

  • Other Users: As necessary for the Service's functionality (e.g., connecting seekers with agents/owners, displaying agent profiles). Your contact details may be shared when you initiate contact (e.g., send an inquiry).
  • Service Providers: Third parties who perform services on our behalf (e.g., hosting providers like Vercel, database providers like Supabase, analytics providers like Google Analytics, AI service providers like Google AI, email delivery services). These providers are contractually obligated to protect your data.
  • Legal Requirements: If required by law, subpoena, or other legal process, or if we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.
  • Business Transfers: In connection with a merger, acquisition, financing, or sale of assets, your data may be transferred as part of the transaction.

We do not sell your personal data.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. However, no method of transmission over the Internet or electronic storage is 100% secure.

7. Data Retention

We retain personal data for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements, or as long as your account is active. We will then securely delete or anonymize your data.

8. Your Data Protection Rights

Under the Kenyan Data Protection Act, 2019, you have rights including:

  • The right to be informed about the processing of your personal data.
  • The right to access your personal data.
  • The right to object to the processing of your personal data.
  • The right to rectification of inaccurate personal data.
  • The right to erasure of your personal data.
  • The right to data portability.
  • The right not to be subject to automated decision-making.

To exercise these rights, please contact us using the details below. We may need to verify your identity before processing your request. You also have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) Kenya.

9. International Data Transfers (If Applicable)

[If you use service providers outside Kenya (e.g., Supabase, Google Cloud), explain that data may be transferred outside Kenya and describe the safeguards in place, e.g., adequacy decisions, standard contractual clauses, user consent].

Example: Your information may be transferred to — and maintained on — computers located outside of Kenya where the data protection laws may differ. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and that adequate data protection safeguards are in place.

10. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal data from children under 18. If we become aware that we have collected personal data from a child under 18, we will take steps to delete such information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

Email: privacy@kenyaestates.co.ke

[Include Physical Address if desired]

Data Protection Officer (if applicable): [Data Protection Officer Contact Details, if applicable]