Privacy Policy

Last updated: February 11, 2026

1. Introduction

KiroKeja ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our rental property platform at kirokeja.com.

This policy is compliant with the Kenya Data Protection Act, 2019 and is administered in accordance with the guidelines set by the Office of the Data Protection Commissioner (ODPC) of Kenya.

2. Information We Collect

2.1 Personal Information

We may collect the following personal information:

• Full name
• Email address
• Phone number
• National ID or Passport number (for verification purposes)
• Physical address
• Profile photographs
• Payment information (processed through secure third-party providers)

2.2 Property Information

For landlords, we collect:

• Property details and descriptions
• Property photographs and videos
• Property location and address
• Rental pricing information
• Amenities and features

2.3 Automatically Collected Information

• IP address and device information
• Browser type and version
• Pages visited and time spent on our platform
• Referring website addresses
• Location data (with your consent)

3. How We Use Your Information

We use the collected information for:

• Creating and managing your account
• Facilitating communication between landlords and tenants
• Processing property listings and inquiries
• Verifying user identities to prevent fraud
• Sending service-related notifications and updates
• Improving our platform and user experience
• Complying with legal obligations under Kenyan law
• Responding to legal requests from Kenyan authorities

4. Legal Basis for Processing

Under the Kenya Data Protection Act, 2019, we process your personal data based on:

• Consent: Where you have given clear consent for us to process your personal data
• Contract: Processing necessary for the performance of a contract with you
• Legal obligation: Processing necessary for compliance with Kenyan law
• Legitimate interests: Processing necessary for our legitimate business interests

5. Information Sharing and Disclosure

We may share your information with:

• Other users as necessary to facilitate rental transactions (e.g., sharing tenant contact info with landlords upon inquiry)
• Service providers who assist in operating our platform (payment processors, hosting services, etc.)
• Legal authorities when required by Kenyan law or to protect our rights
• Professional advisors including lawyers, auditors, and insurers

We do not sell your personal information to third parties.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• SSL/TLS encryption for data transmission
• Secure password hashing
• Regular security assessments
• Access controls and authentication measures
• Secure data storage with regular backups

7. Your Rights Under Kenyan Law

Under the Kenya Data Protection Act, 2019, you have the right to:

• Access: Request a copy of your personal data we hold
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your personal data in certain circumstances
• Restriction: Request limitation of processing of your data
• Data portability: Receive your data in a structured, commonly used format
• Object: Object to processing based on legitimate interests
• Withdraw consent: Withdraw previously given consent at any time

To exercise these rights, contact us at privacy@kirokeja.com

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by Kenyan law. When data is no longer needed, it will be securely deleted or anonymized. Account data is typically retained for 7 years after account closure to comply with Kenyan tax and business regulations.

9. Cross-Border Data Transfers

Your data may be processed outside Kenya by our service providers. In such cases, we ensure appropriate safeguards are in place as required by Section 48 of the Kenya Data Protection Act, 2019, including ensuring the receiving country has adequate data protection laws or implementing standard contractual clauses.

10. Cookies and Tracking

We use cookies and similar technologies to:

• Keep you signed in
• Remember your preferences
• Understand how you use our platform
• Improve our services

You can manage cookie preferences through your browser settings.

11. Children's Privacy

Our platform is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete such information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

13. Contact Us

For any questions about this Privacy Policy or to exercise your data protection rights, please contact us:

KiroKeja
Email: privacy@kirokeja.com
Address: Nairobi, Kenya

You also have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) of Kenya at www.odpc.go.ke.