Privacy Policy

Last Updated: November 29, 2025

This Privacy Policy describes how we collect, use, and protect your personal information in accordance with the Data Protection Act, 2019 (Kenya) and other applicable laws.

1. Information We Collect

1.1 Personal Information

We may collect the following personal information:

Full name and contact details (phone number, email address, postal address)
National identification number or passport number (for verification purposes)
Financial information (for property transactions and credit checks)
Employment and income information (for property qualification)
Property preferences and search history
Communication records and correspondence

1.2 Automatically Collected Information

IP address and browser information
Device information and operating system
Pages visited and time spent on our website
Cookies and similar tracking technologies

2. How We Use Your Information

We use your personal information for the following purposes:

To provide real estate agency services and property listings
To process property inquiries, viewings, and transactions
To verify your identity and conduct due diligence as required by law
To communicate with you about properties and services
To comply with legal obligations under Kenyan law
To improve our website and services
To send marketing communications (with your consent)

3. Legal Basis for Processing

Under the Data Protection Act, 2019, we process your personal data based on:

Your consent
Performance of a contract with you
Compliance with legal obligations
Our legitimate business interests
Protection of your vital interests

We may share your personal information with:

Property owners and landlords (for property transactions)
Financial institutions (for mortgage processing)
Legal advisors and conveyancers
Government authorities (as required by law)
Service providers (under strict confidentiality agreements)

We do not sell your personal information to third parties.

5. Data Retention

We retain your personal information for:

Active clients: Duration of business relationship plus 7 years
Prospective clients: 2 years from last contact
Transaction records: 7 years as required by Kenyan law
Marketing consent: Until you withdraw consent

6. Your Rights

Under the Data Protection Act, 2019, you have the right to:

Access your personal information
Correct inaccurate or incomplete data
Request deletion of your data (subject to legal requirements)
Object to processing of your data
Withdraw consent at any time
Lodge a complaint with the Office of the Data Protection Commissioner

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

Encryption of sensitive data
Secure servers and firewalls
Access controls and authentication
Regular security audits
Staff training on data protection

8. International Data Transfers

Your personal information is primarily stored and processed in Kenya. If we transfer data outside Kenya, we ensure adequate safeguards are in place as required by the Data Protection Act, 2019.

9. Cookies Policy

Our website uses cookies to:

Enable website functionality
Analyze website traffic and usage
Remember your preferences
Provide personalized content

You can control cookies through your browser settings.

10. Children’s Privacy

Our services are not directed to persons under 18 years of age. We do not knowingly collect personal information from minors.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website with a new “Last Updated” date.

12. Contact Information

For questions about this Privacy Policy or to exercise your rights, please contact:

Data Protection Officer Email: privacy@todo Phone: +254 XXX XXX XXX Address: [Your Business Address], Kenya

Office of the Data Protection Commissioner Website: www.odpc.go.ke Email: info@odpc.go.ke Phone: +254 20 2664000