Legal

Privacy Policy

Effective Date / Last Updated: July 2026

This Policy explains how NaiHaven collects, uses, and protects your personal data in line with the Data Protection Act, 2019 of Kenya.

1. Introduction

NaiHaven (“we,” “us,” or “our”) is committed to protecting the privacy and personal data of our guests, property owners, website visitors, and business partners. This Privacy Policy explains how we collect, use, disclose, and safeguard personal data in connection with our website, our property management services, and our short-stay accommodation offerings.

This Policy is prepared in accordance with the Data Protection Act, 2019 of Kenya (“the Act”) and its accompanying regulations, as administered by the Office of the Data Protection Commissioner (ODPC). By using our website or engaging our services, you acknowledge that you have read and understood this Policy.

2. Information We Collect

We may collect the following categories of personal data, depending on how you interact with us:

  • Identity and contact information, such as your full name, email address, phone number, and postal or physical address.
  • Booking and guest information, including check-in and check-out dates, property preferences, number of occupants, and special requests.
  • Property owner information, including property details, ownership documentation, and banking details necessary for payouts.
  • Payment information, including billing details processed through our payment partners. We do not store full card numbers on our own servers.
  • Communications, including correspondence you send us via email, our contact forms, WhatsApp, or telephone.
  • Technical information, such as IP address, browser type, device information, and website usage data collected through cookies and similar technologies.

3. How We Use Your Information

We process personal data for the following purposes:

  • To create and manage bookings, reservations, and guest stays.
  • To manage properties on behalf of owners, including guest communication, cleaning coordination, and maintenance.
  • To process payments and disburse owner earnings.
  • To respond to enquiries, provide customer support, and communicate important updates about your booking or property.
  • To improve our website, services, and guest experience.
  • To comply with legal, tax, and regulatory obligations in Kenya.
  • To send marketing communications where you have consented to receive them, and which you may opt out of at any time.

4. Legal Basis for Processing

In accordance with the Act, we process personal data on one or more of the following legal bases: your consent, the necessity of processing to perform a contract with you (such as a booking or management agreement), compliance with a legal obligation, and our legitimate interests in operating and improving our business, provided such interests do not override your fundamental rights and freedoms.

5. Data Sharing and Disclosure

We do not sell personal data. We may share personal data with the following categories of recipients, only to the extent necessary:

  • Property owners, where necessary to facilitate a guest’s stay at their property.
  • Service providers, including cleaning teams, maintenance contractors, and payment processors, who act on our instructions and are bound by confidentiality obligations.
  • Booking platforms such as Airbnb and Booking.com, where a reservation is made or managed through those platforms.
  • Regulatory and government authorities, where required by Kenyan law, including the Kenya Revenue Authority and relevant county government offices.
  • Professional advisors, such as legal or financial consultants, where necessary for our legitimate business operations.

6. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These measures include restricted access controls, secure data storage, and regular review of our data handling practices. While we take reasonable steps to protect your data, no method of electronic transmission or storage is entirely secure, and we cannot guarantee absolute security.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes outlined in this Policy, including to satisfy any legal, accounting, or reporting requirements under Kenyan law. Booking and financial records are typically retained for the period required by applicable tax and business regulations, after which the data is securely deleted or anonymised.

8. Your Rights Under the Data Protection Act

As a data subject under the Act, you have the right to:

  • Be informed of the use to which your personal data is to be put.
  • Access your personal data held by us.
  • Request correction of inaccurate or outdated personal data.
  • Request deletion of your personal data, subject to applicable legal exceptions.
  • Object to or restrict the processing of your personal data.
  • Withdraw consent at any time, where processing is based on consent.
  • Lodge a complaint with the Office of the Data Protection Commissioner (ODPC) if you believe your data protection rights have been infringed.

To exercise any of these rights, please contact us using the details in Section 12 below. We will respond within the timelines prescribed by the Act.

9. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance browsing experience, understand website usage, and support essential site functionality. You can control or disable cookies through your browser settings; please note that disabling certain cookies may affect the functionality of our website.

10. Children's Privacy

Our services are not directed at children, and we do not knowingly collect personal data from individuals under the age of 18 without the consent of a parent or guardian. If we become aware that we have inadvertently collected personal data from a child without appropriate consent, we will take steps to delete such data.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable law. The “Last Updated” date at the top of this page indicates when this Policy was last revised. We encourage you to review this Policy periodically.

12. Contact Us

If you have questions about this Privacy Policy, wish to exercise your data protection rights, or have concerns about how your personal data is handled, please contact us:

NaiHaven Properties Ltd
Nairobi, Kenya
Email: hello@naihaven.com
Phone: +254 794 727 720