Privacy notice

1. Information this platform handles

Depending on how you use the service, information may include your name, phone number, email, account type, password hash, property listing details, submitted photos, enquiries, payment references, availability and moderation history. Property partners may submit identity-document images and evidence needed for account and property checks.

2. Why it is used

Information is used to create and protect accounts, review partners and properties, publish listings, reconcile listing fees, send enquiries to the relevant property partner, respond to reports, prevent abuse, maintain backups and understand site usage.

3. Location sharing is optional

The site does not silently request device GPS location. If you choose “Use my location” or “Share my approximate location”, your browser will ask for permission. Coordinates stored for visitor analytics are rounded to three decimal places, which is approximate neighbourhood-level information rather than an exact movement history. Authorized administrators can see the approximate area and the fact that location sharing was enabled. If you only use the directions button, your location is used to open a route in your maps application and is not submitted to the visitor analytics endpoint by that action.

4. What other users can see

If you send a property enquiry, the name and phone number you provide may be linked to that browser record so repeat enquiries and repeat visitor counts can be interpreted more accurately. An anonymous browser is not assigned a real identity unless you provide one or sign in.

Public visitors can see approved listing information and a partner's public display name and verification status. Identity-document images are not published on public pages. When you send an interest enquiry, the contact information you provide is shared with the partner responsible for that listing so they can respond.

5. Security, storage and backups

Passwords are stored as hashes. Identity files are stored separately from public listing images and can be opened only through an authenticated administrator route. The operator must protect hosting credentials, persistent storage, exports and off-site backups. No internet-connected service can promise absolute security; do not send additional sensitive information in free-text messages.

6. Retention and your requests

The operator should keep personal information only as long as justified for the stated purpose, legal obligations, payment reconciliation, disputes and security. You may contact the operator to request access, correction or deletion where applicable, or to raise a privacy complaint. Certain records may need to be retained to resolve disputes or meet legal obligations.

Privacy contact: The operator must add a privacy contact in Site & Fees before public launch.

7. Before public launch

The operator must tailor this notice to the actual business, complete any required registration or impact assessment, set a documented retention and deletion schedule, choose appropriate lawful bases, finalize processor agreements and ensure the workflow complies with applicable Kenyan data-protection rules.