PRIVACY POLICY

1. Data We Collect

When you use Nyumbani BNBS, we may collect the following categories of personal data:

• Identity data: name, email address, phone number, and ID documents (hosts only).
• Account data: login credentials and account preferences.
• Booking data: dates, property details, and transaction history.
• Communications: messages sent through the platform between guests and hosts.
• Technical data: IP address, browser type, device information, and usage logs.

2. How We Use Your Data

• To create and manage your account on the platform.
• To process bookings, payments, and refunds.
• To facilitate communication between guests and hosts.
• To send booking confirmations, reminders, and service updates.
• To detect and prevent fraud, abuse, or violations of our terms.
• To improve our platform through anonymised analytics.

3. Data Sharing

We do not sell your personal data. We may share it only in the following circumstances:

• With hosts or guests as necessary to complete a booking.
• With payment processors to handle transactions securely.
• With service providers who operate the platform on our behalf, under strict confidentiality agreements.
• With law enforcement or regulatory authorities where required by Kenyan law.

4. Data Retention

We retain your personal data for as long as your account is active or as required to fulfil the purposes described in this policy. Booking records are retained for a minimum of five years for financial and legal compliance. You may request deletion of your account and associated data at any time — see Section 6 for your rights.

5. Cookies

Nyumbani BNBS uses cookies and similar technologies to keep you logged in, remember your preferences, and understand how the platform is used. You can control cookie preferences through your browser settings. Disabling cookies may affect platform functionality.

6. Your Rights

Under the Kenya Data Protection Act 2019, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your personal data.
• Object to or restrict how we process your data.
• Withdraw consent where processing is based on consent.

To exercise any of these rights, contact us at privacy@nyumbanibnbs.com.

7. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. However, no internet transmission is completely secure and we cannot guarantee absolute security.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Where changes are material, we will notify registered users by email.