Archstone Kenya ("we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

This Policy complies with the Kenya Data Protection Act, 2019 and applies to all users of our Platform.

2.1 Information You Provide

We collect information you voluntarily provide:

• Account Information: Name, email, phone number, password
• Profile Information: Photo, preferences, saved searches
• Communication Data: Messages, inquiries, viewing requests
• Transaction Information: Payment details, booking information
• Feedback: Reviews, ratings, surveys responses

2.2 Information Collected Automatically

2.3 Information from Third Parties

We may receive information from:

• Social media platforms (if you connect accounts)
• Payment processors
• Analytics providers
• Marketing partners

We use your personal data for the following purposes:

3.1 Legal Basis for Processing

We process your data based on:

• Consent: You have given permission
• Contract: Necessary to provide services
• Legal Obligation: Required by law
• Legitimate Interest: For business operations and improvements

We may share your information with:

4.1 Service Providers

• Cloud hosting services
• Payment processors
• Email service providers
• Analytics platforms (Google Analytics)
• Customer support tools

4.2 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4.3 Legal Requirements

We may disclose your information when required by law or to:

• Comply with legal processes
• Respond to government requests
• Protect our rights and property
• Prevent fraud or security threats
• Protect user safety

4.4 With Your Consent

We may share information with third parties when you explicitly consent to such sharing.

We use cookies and similar tracking technologies to enhance your experience:

5.1 Types of Cookies We Use

Cookie Type	Purpose	Duration
Necessary	Essential for Platform operation (authentication, security)	Session/Persistent
Functionality	Remember your preferences and settings	Persistent
Analytics	Understand usage patterns and improve services	Persistent
Marketing	Deliver personalized ads and measure campaign effectiveness	Persistent

5.2 Managing Cookies

You can control cookies through:

• Our cookie consent banner
• Browser settings (clear or block cookies)
• Cookie preference center
• Opt-out tools provided by advertising networks

Note: Disabling cookies may affect Platform functionality.

We implement robust security measures to protect your data:

Under the Kenya Data Protection Act, you have the following rights:

7.1 How to Exercise Your Rights

To exercise any of these rights, contact us at privacy@archstonekenya.com. We will respond within 30 days.

7.2 Right to Complain

If you believe we have mishandled your data, you have the right to lodge a complaint with:

• Office of the Data Protection Commissioner
• Email: info@odpc.go.ke
• Website: www.odpc.go.ke

We retain your personal data for as long as necessary to:

• Provide you with services
• Comply with legal obligations
• Resolve disputes
• Enforce our agreements

8.1 Retention Periods

Data Type	Retention Period
Account Information	Duration of account + 2 years
Transaction Records	7 years (legal requirement)
Marketing Data	Until consent withdrawn + 1 year
Analytics Data	26 months (Google Analytics default)
Support Communications	3 years

After retention periods expire, we securely delete or anonymize your data.

Our Platform is not intended for children under 18 years of age. We do not knowingly collect personal information from children.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. We will promptly delete such information from our systems.

Your data may be transferred to and processed in countries other than Kenya. When we transfer data internationally, we ensure:

• Adequate level of protection as required by law
• Appropriate safeguards are in place
• Standard contractual clauses with service providers
• Compliance with data protection regulations

By using our Platform, you consent to the transfer of your data as described in this Policy.

Our Platform may contain links to third-party websites and services. Please note:

• We are not responsible for third-party privacy practices
• Third-party sites have their own privacy policies
• We encourage you to review their policies before sharing information
• We do not endorse or control third-party content

11.1 Social Media Features

Our Platform includes social media features (e.g., Facebook Like button). These features may collect your IP address and set cookies. Your interactions are governed by the privacy policies of the respective social media companies.

We may update this Privacy Policy from time to time. When we make changes:

• We will update the "Last Updated" date
• Material changes will be notified via email or Platform notification
• Continued use after changes constitutes acceptance
• We encourage periodic review of this Policy

For questions, concerns, or requests regarding this Privacy Policy or your personal data:

We aim to respond to all privacy requests within 30 days.