Last Updated: January 2026
Introduction
BuyKenya is a Nairobi-based real estate agency and advisory firm established in 2018, serving clients across Kenya—including local buyers and sellers, as well as members of the diaspora. We understand that your personal information is entrusted to us with care, and we are committed to handling it responsibly, transparently, and in full compliance with Kenya’s Data Protection Act, 2019.
BuyKenya is a Nairobi-based real estate agency and advisory firm established in 2018, serving clients across Kenya—including local buyers and sellers, as well as members of the diaspora. We understand that your personal information is entrusted to us with care, and we are committed to handling it responsibly, transparently, and in full compliance with Kenya’s Data Protection Act, 2019.
This Privacy Policy explains how we collect, use, store, and protect your personal data when you engage with our services—whether through our website, email, phone calls, in-person meetings, or other interactions. It applies to all individuals who provide us with information in connection with property transactions, inquiries, or general communication.
By using our services or submitting your details, you acknowledge this policy and consent to the practices described herein, where required by law.
Scope of Services
Our services include property sales, buyer representation, investment consulting, legal due diligence support, and diaspora assistance across Kenya—from Nairobi neighbourhoods like Karen, Runda, and Westlands to coastal areas such as Mombasa and Malindi, as well as inland regions including Naivasha, Nakuru, and Ruiru. Data collection occurs only in direct relation to these services.
Our services include property sales, buyer representation, investment consulting, legal due diligence support, and diaspora assistance across Kenya—from Nairobi neighbourhoods like Karen, Runda, and Westlands to coastal areas such as Mombasa and Malindi, as well as inland regions including Naivasha, Nakuru, and Ruiru. Data collection occurs only in direct relation to these services.
Information We Collect
We collect only the personal information necessary to serve you effectively and comply with legal obligations. This includes:
We collect only the personal information necessary to serve you effectively and comply with legal obligations. This includes:
- Personal identification: Name, national ID or passport number, contact details (phone, email, address), and proof of residence.
- Transactional data: Property preferences, budget range, financial documentation (e.g., bank statements for pre-approval verification), and correspondence related to specific listings.
- Technical data: When you visit our website (www.buykenya.com), we may collect IP address, browser type, device information, and usage patterns via cookies—solely to improve site functionality and user experience.
- Diaspora-specific information: For clients based outside Kenya, we may record time zone, preferred language, and country of residence to facilitate timely and relevant communication.
Information is collected through website forms, email exchanges, telephone conversations, in-person consultations, and third-party referrals—with your knowledge and, where required, explicit consent.
How We Use Your Information
Your data is processed only for legitimate purposes directly tied to our services:
Your data is processed only for legitimate purposes directly tied to our services:
- To respond to property inquiries and share verified listings aligned with your criteria.
- To coordinate with licensed advocates, registered valuers, and county authorities during due diligence and conveyancing.
- To facilitate secure communication, including virtual viewings, document sharing, and transaction updates.
- To comply with statutory obligations under Kenyan law, including anti-money laundering checks and land transaction reporting.
- For marketing communications only if you have opted in—and you may withdraw consent at any time.
We do not use your data for automated decision-making or profiling that could produce legal or significant effects. All processing is grounded in either your consent, contractual necessity, legal obligation, or our legitimate interest in providing professional real estate services—balanced against your privacy rights.
Legal Basis for Processing
Under the Data Protection Act, 2019, we process personal data on one or more of the following lawful bases:
Under the Data Protection Act, 2019, we process personal data on one or more of the following lawful bases:
- Consent: Where you explicitly agree (e.g., subscribing to property alerts).
- Contractual necessity: To fulfil our agreement with you (e.g., managing a sale or purchase).
- Legal obligation: To meet requirements under Kenyan land, tax, or anti-fraud laws.
- Legitimate interest: In limited cases, such as preventing fraud or improving client service—provided your rights and freedoms are not overridden.
You have the right to request clarification on which basis applies to any specific use of your data.
Cookies and Tracking Technologies
Our website uses essential cookies to ensure core functionality (e.g., form submissions) and optional analytical cookies to understand traffic patterns. We do not use third-party advertising trackers.
Our website uses essential cookies to ensure core functionality (e.g., form submissions) and optional analytical cookies to understand traffic patterns. We do not use third-party advertising trackers.
Upon your first visit, a clear banner will explain our cookie use and allow you to accept or manage preferences. You may disable non-essential cookies via your browser settings at any time—though this may affect certain website features.
Sharing of Information
We do not sell, rent, or trade your personal data. However, we may share it with trusted third parties strictly for the purpose of delivering our services, including:
We do not sell, rent, or trade your personal data. However, we may share it with trusted third parties strictly for the purpose of delivering our services, including:
- Licensed advocates for title verification and conveyancing.
- Registered valuers when property appraisal is required.
- Secure payment processors for deposit handling (funds are held in advocate-managed client accounts, not ours).
- Internal team members who need access to assist you—bound by confidentiality obligations.
All partners are vetted for data protection compliance and operate under written agreements that restrict use to agreed purposes only. International transfers (e.g., to diaspora clients’ countries) occur only when necessary and with appropriate safeguards, such as standard contractual clauses approved under Kenyan law.
Data Storage and Security
Your information is stored securely using industry-appropriate technical and organisational measures, including encrypted digital systems, restricted access controls, and regular staff training on data handling.
Your information is stored securely using industry-appropriate technical and organisational measures, including encrypted digital systems, restricted access controls, and regular staff training on data handling.
Physical documents are kept in locked offices at our Westlands, Nairobi location. Digital records are hosted on secure servers within Kenya, with backups protected against loss or unauthorised access.
We retain personal data only as long as necessary:
- For active clients: throughout the transaction and for up to six years post-completion, as required by Kenyan tax and property regulations.
- For marketing contacts: until you withdraw consent.
- For general inquiries: up to two years, unless further engagement occurs.
After retention periods expire, data is securely deleted or anonymised.
Your Rights
Under the Data Protection Act, 2019, you have the right to:
Under the Data Protection Act, 2019, you have the right to:
- Request access to the personal data we hold about you.
- Correct inaccurate or incomplete information.
- Request deletion of your data, subject to legal or contractual retention requirements.
- Withdraw consent for marketing or other consensual processing at any time.
- Object to processing based on legitimate interest.
- Lodge a complaint with the Office of the Data Protection Commissioner (ODPC) in Kenya if you believe your rights have been violated.
To exercise any of these rights, contact us using the details below. We will respond within 30 days, or longer if complexity requires (with notice).
Minors
Our services are not intended for persons under 18 years of age. We do not knowingly collect personal data from minors. If we become aware that such information has been provided, we will take steps to delete it promptly.
Our services are not intended for persons under 18 years of age. We do not knowingly collect personal data from minors. If we become aware that such information has been provided, we will take steps to delete it promptly.
Changes to This Policy
We may update this Privacy Policy to reflect changes in law, services, or operational practices. The revised version will be published on www.buykenya.com with an updated “Last updated” date. We encourage you to review this page periodically.
We may update this Privacy Policy to reflect changes in law, services, or operational practices. The revised version will be published on www.buykenya.com with an updated “Last updated” date. We encourage you to review this page periodically.
Continued use of our services after changes constitutes acceptance of the updated terms.
Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact our Data Protection Officer:
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact our Data Protection Officer: