Privacy Policy

Introduction

Welcome to BNB Kenya. We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you as to how we look after your personal data when you visit our website (regardless of where you visit it from) and tell you about your privacy rights and how the law protects you.

This policy is issued in compliance with the Data Protection Act, 2019 (Laws of Kenya).

2. Information We Collect

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

• Identity Data: Includes first name, last name, username or similar identifier, and National ID/Passport number (for Host verification).
• Contact Data: Includes email address and telephone numbers (including M-Pesa registered numbers).
• Technical Data: Includes internet protocol (IP) address, login data, browser type, and approximate location data (City/Country) derived from your IP.
• Geographic Data: When you use our "Locate Me" feature or search for properties, we collect GPS coordinates (Latitude/Longitude) to provide accurate mapping services.
• Property Data: Photos, descriptions, and addresses provided by Hosts for listing purposes.

4. Sharing and Disclosure

We may share your data with the following third parties for the purposes set out in this policy:

• Hosts/Guests: To facilitate successful bookings and property access.
• Service Providers: Including Supabase (Database/Auth), Cloudinary (Image Hosting), and Google Maps (Mapping services).
• Payment Processors: To facilitate M-Pesa and card transactions.
• Legal Authorities: When required by Kenyan law or the Tourism Regulatory Authority (TRA).

5. Data Storage and Security

Your data is stored securely using industry-standard encryption. We use Supabase for data management and Cloudinary for media storage. While we strive to protect your data, no method of transmission over the internet is 100% secure.

Data may be processed outside of Kenya by our cloud service providers, but we ensure all providers adhere to standard contractual clauses that guarantee a high level of data protection.

6. Your Rights

Under the Kenya Data Protection Act (2019), you have the following rights:

• Right to Access: You can request a copy of the data we hold about you.
• Right to Rectification: You can ask us to correct inaccurate data.
• Right to Erasure: You can ask us to delete your data (the "Right to be Forgotten").
• Right to Object: You can object to the processing of your data for marketing purposes.