Last updated: March 2026

1. Introduction

Welcome to KejaHub – Kenya's premier property marketplace. We are committed to protecting your privacy and ensuring transparent data practices. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services, in compliance with the Kenya Data Protection Act (2019).

2. Data Controller

KejaHub Ltd (Registration pending) is the Data Controller for personal information collected through our platform.
Contact: support@kejahub.co.ke

3. Information We Collect

We collect information about you in several ways:

  • Personal Data You Provide: Name, email address, phone number, national ID (for verification), payment information, and property details when you register, list properties, or engage with our services.
  • Account Information: Profile information, preferences, communication history, and transaction records.
  • Technical Data: IP address, browser type, operating system, device information, access times, and pages visited.
  • Location Data: Property locations and neighborhood preferences (collected only with your permission).
  • Communication Data: Messages, inquiries, and support communications.

4. Legal Basis for Processing

We process your personal data based on:

  • Your explicit consent
  • Contractual necessity (to provide services)
  • Legal obligations (Kenya Data Protection Act, tax laws)
  • Legitimate business interests (platform security, fraud prevention)

5. How We Use Your Information

We use collected information to:

  • Create and manage your account
  • Process payments and transactions securely
  • Verify user identity and prevent fraud
  • Send notifications about listings, messages, and platform updates
  • Improve our platform and AI algorithms
  • Comply with Kenyan law and regulatory requirements
  • Respond to user inquiries and provide customer support
  • Conduct market research and analytics

6. Data Sharing & Third Parties

We may share your information with:

  • Payment Processors: Stripe and other payment gateways (PCI-DSS compliant)
  • AI Services: OpenAI, Google Gemini (for property descriptions and search enhancement)
  • Cloud Providers: For secure data storage and backup
  • Legal Authorities: When required by Kenyan law or court order
  • Service Providers: Email, SMS, and communication service providers

We do NOT sell personal data to third parties.

7. Data Retention

Personal data is retained for as long as your account is active. After account closure, data is retained for:

  • 7 years for transaction records (tax and legal compliance)
  • 2 years for communication logs
  • 30 days for technical logs (then anonymized)

8. Data Security

KejaHub employs industry-standard security measures:

  • End-to-end encryption for sensitive data
  • Secure SSL/TLS protocols
  • Regular security audits and penetration testing
  • Multi-factor authentication (MFA) for sensitive accounts
  • Zero-Trust security architecture

Disclaimer: While we implement robust security, no online system is 100% secure. Users assume risk of unauthorized access despite our precautions.

9. Your Data Rights

Under the Kenya Data Protection Act, you have the right to:

  • Access: Request a copy of your personal data
  • Correction: Correct inaccurate information
  • Erasure: Request deletion of your data (subject to legal hold periods)
  • Restrict Processing: Limit how your data is used
  • Data Portability: Receive your data in a structured format
  • Withdraw Consent: Opt-out of non-essential data processing

To exercise these rights, email privacy@kejahub.co.ke

10. Cookies & Tracking

KejaHub uses cookies for:

  • Session management and authentication
  • User preferences and site functionality
  • Analytics (Google Analytics for site improvement)

You can disable cookies in your browser settings, but some features may not work properly.

11. Third-Party Links

KejaHub is not responsible for privacy practices of external websites linked from our platform. Please review their privacy policies before sharing information.

12. Children's Privacy

KejaHub does not knowingly collect data from users under 18 years old. If we discover such information, we will delete it immediately. Parents/guardians suspecting unauthorized collection should contact us.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Significant changes will be notified via email or banner on our website. Continued use of KejaHub constitutes acceptance of updated terms.

14. Contact Us

For privacy-related inquiries or concerns:

Email: privacy@kejahub.co.ke
Support: support@kejahub.co.ke
Website: www.kejahub.co.ke

15. Complaint to Data Commissioner

If you believe your data rights have been violated, you may lodge a complaint with the Office of the Data Protection Commissioner (ODPC) in Kenya.