Privacy Policy

1. Introduction

NyumbaFind ("we", "us", or "our") is committed to protecting your privacy in accordance with the Data Protection Act, 2019 of Kenya and its subsidiary regulations. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use our platform.

By using NyumbaFind, you consent to the data practices described in this policy. If you do not agree with this policy, please do not access or use the Platform.

2. Data Controller

NyumbaFind is the data controller responsible for your personal data. For any data protection inquiries or to exercise your rights, contact our Data Protection Officer at:

Email: divokorino284@gmail.com
Address: Nairobi, Kenya

3. Data We Collect

3.1 Information You Provide

• Account Information: Name, email address, and password (hashed).
• Profile Information: Phone number, profile photo, notification preferences.
• Listing Information: Property details, photos, location, and contact information you provide as a landlord.
• Communications: Messages sent through the Platform between users.
• Payment Information: M-Pesa phone number for premium feature purchases.

3.2 Information Collected Automatically

• Device Information: IP address, browser type, operating system, device identifiers.
• Usage Data: Pages visited, time spent on pages, features used, search queries.
• Location Data: General location based on IP address (with your consent).
• Cookies: See Section 8 for details on our cookie usage.

4. Legal Basis for Processing

Under the Data Protection Act, 2019, we process your data based on:

• Consent: You have given clear consent for specific purposes (e.g., marketing communications).
• Contract: Processing is necessary for the performance of our Terms of Service.
• Legitimate Interests: For platform security, fraud prevention, and service improvement.
• Legal Obligation: To comply with applicable Kenyan laws and regulations.

5. How We Use Your Data

We use your personal data for the following purposes:

• To create and manage your account.
• To display listings and facilitate connections between landlords and tenants.
• To send transactional notifications (messages, listing updates).
• To process payments for premium features via M-Pesa.
• To improve platform functionality and user experience.
• To detect and prevent fraud, abuse, and security incidents.
• To comply with legal obligations.

6. Data Sharing & Third Parties

We do not sell your personal data. We may share data with:

• Other Users: Landlords see tenant contact information when tenants inquire about listings; tenants see landlord contact information on listings.
• Service Providers: Supabase (database hosting), Safaricom (M-Pesa payments), and email delivery services, all bound by data processing agreements.
• Legal Requirements: When required by law, court order, or government authority.
• Business Transfers: In connection with a merger, acquisition, or sale of assets.

7. Data Storage & Security

• Your data is stored on secure servers provided by Supabase, hosted in compliance with industry standards.
• We implement appropriate technical and organizational measures to protect your data, including encryption in transit and at rest.
• Passwords are hashed and never stored in plain text.
• We retain personal data only as long as necessary to fulfill the purposes for which it was collected.
• Account data is retained for up to 2 years after account deletion, after which it is permanently removed.

8. Cookies

We use cookies and similar technologies for:

• Essential Cookies: Required for authentication and session management.
• Functional Cookies: Remember your preferences and settings.
• Analytics Cookies: Help us understand how users interact with the Platform.

You can control cookies through your browser settings. Disabling essential cookies may prevent you from using certain features of the Platform.

9. Your Data Protection Rights

Under the Data Protection Act, 2019, you have the right to:

• Access: Request a copy of your personal data we hold.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your personal data ("right to be forgotten").
• Restriction: Request limitation of how we use your data.
• Portability: Request transfer of your data to another service.
• Objection: Object to processing based on legitimate interests.
• Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at divokorino284@gmail.com. We will respond within 30 days as required by law.

10. Data Transfers

Your data may be transferred to and processed in countries outside Kenya. Where this occurs, we ensure appropriate safeguards are in place, including standard contractual clauses approved by the Office of the Data Protection Commissioner (ODPC) of Kenya.

11. Children's Privacy

NyumbaFind is not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the Platform at least 14 days before taking effect. The "Last updated" date at the top reflects the most recent revision.

13. Contact Us

For privacy-related questions or requests, please contact us:

Email: divokorino284@gmail.com
Address: Nairobi, Kenya