Privacy Policy

Your privacy is important to us. This policy explains how we collect, use, and protect your personal data.

Last updated: January 2026 | Compliant with the Kenya Data Protection Act 2019

Introduction

ArdhiHome ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our platform.

This policy is designed to comply with the Kenya Data Protection Act, 2019 and the regulations issued thereunder by the Office of the Data Protection Commissioner (ODPC).

By using ArdhiHome, you consent to the data practices described in this policy. If you do not agree with our policies and practices, please do not use our services.

1. Data Controller

ArdhiHome acts as the Data Controller for personal data collected through our platform. Our contact details are:

ArdhiHome

Headquarters: United States

Kenya Operations: Nairobi, Kenya

Email: [email protected]

Data Protection Officer: [email protected]

2. Information We Collect

2.1 Personal Information You Provide

  • Account Information: Name, email address, phone number, password
  • Realtor Information: EARB/ERA registration number, license certificates, company details
  • Identity Verification: National ID or passport (for realtors)
  • Profile Information: Profile photo, company name, website
  • Property Listings: Property details, images, location data, pricing
  • Communications: Messages sent through our contact forms

2.2 Information Collected Automatically

  • Device Information: IP address, browser type, operating system
  • Usage Data: Pages visited, features used, search queries
  • Location Data: Approximate location based on IP address
  • Cookies: Session cookies for authentication and preferences

2.3 Information from Third Parties

  • Authentication Providers: If you sign in using third-party services
  • Public Records: EARB registration verification
3. Legal Basis for Processing

Under the Kenya Data Protection Act 2019, we process your personal data based on the following legal grounds:

  • Consent: You have given clear consent for us to process your personal data for specific purposes
  • Contract: Processing is necessary for the performance of a contract with you (e.g., providing platform services)
  • Legal Obligation: Processing is necessary to comply with Kenyan law
  • Legitimate Interests: Processing is necessary for our legitimate business interests, provided these do not override your rights
4. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our platform services
  • Process and manage your account registration
  • Verify realtor credentials and EARB registration
  • Facilitate property listings and searches
  • Enable communication between users and realtors
  • Process commission payments and transactions
  • Send service-related notifications and updates
  • Respond to your inquiries and support requests
  • Detect, prevent, and address fraud and security issues
  • Comply with legal obligations under Kenyan law
  • Analyze usage patterns to improve user experience
5. Data Sharing and Disclosure

We may share your personal data with:

5.1 Other Users

Your public profile information and property listings are visible to other platform users. Realtors' contact information is shared with users who express interest in their listings.

5.2 Service Providers

We engage third-party companies to perform services on our behalf, including:

  • Cloud hosting and data storage providers
  • Payment processing services
  • Analytics and monitoring services
  • Email and communication services

5.3 Legal Requirements

We may disclose your information when required by law, court order, or government request, or to protect our rights, property, or safety.

5.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity.

Important:

We do not sell your personal data to third parties for marketing purposes.

6. International Data Transfers

As ArdhiHome is headquartered in the United States with operations in Kenya, your personal data may be transferred to and processed in countries outside Kenya.

In accordance with the Kenya Data Protection Act 2019, we ensure that any international transfer of personal data is subject to appropriate safeguards, including:

  • Standard contractual clauses approved by the ODPC
  • Transfers to countries with adequate data protection laws
  • Binding corporate rules for intra-group transfers
7. Data Retention

We retain your personal data for as long as necessary to:

  • Provide our services to you
  • Comply with legal obligations (e.g., tax and accounting requirements)
  • Resolve disputes and enforce our agreements

Specific retention periods:

  • Account data: Retained while your account is active, plus 7 years after deletion
  • Transaction records: 7 years (as required by Kenyan tax law)
  • Communication logs: 3 years
  • Analytics data: 2 years (anonymized thereafter)
8. Your Rights Under the Kenya Data Protection Act

Under the Kenya Data Protection Act 2019, you have the following rights:

  • Right of Access: Request a copy of your personal data we hold
  • Right to Rectification: Request correction of inaccurate or incomplete data
  • Right to Erasure: Request deletion of your personal data (subject to legal retention requirements)
  • Right to Restrict Processing: Request limitation of how we use your data
  • Right to Data Portability: Receive your data in a structured, machine-readable format
  • Right to Object: Object to processing based on legitimate interests or for direct marketing
  • Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) Kenya.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

  • Encryption of data in transit (TLS/SSL) and at rest
  • Secure authentication mechanisms
  • Regular security assessments and penetration testing
  • Access controls limiting data access to authorized personnel
  • Employee training on data protection practices
  • Incident response procedures for data breaches

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the ODPC within 72 hours as required by law.

10. Cookies and Tracking Technologies

We use cookies and similar technologies to:

  • Essential Cookies: Enable core functionality like authentication and security
  • Preference Cookies: Remember your settings and preferences
  • Analytics Cookies: Understand how users interact with our platform

You can control cookies through your browser settings. However, disabling essential cookies may affect platform functionality.

11. Children's Privacy

ArdhiHome is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete that information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our platform and updating the "Last updated" date.

We encourage you to review this policy periodically to stay informed about how we protect your information.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

ArdhiHome Privacy Team

Email: [email protected]

Data Protection Officer: [email protected]

General Support: [email protected]

For complaints regarding data protection, you may also contact the Office of the Data Protection Commissioner (ODPC) Kenya at [email protected].

By using ArdhiHome, you acknowledge that you have read and understood this Privacy Policy.