Privacy Policy

BUY KENYA PRIVACY POLICY
Effective Date: April 5, 2025

Operated by: HOMEION OWNERSHIP PARTNERS LTD
Trading as: BUY KENYA
Website: www.buykenya.com
Email: [email protected] | Phone: +254 758 212858
Registered in Kenya under Company No: PVT***********
Physical Address: Nairobi, Kenya


1. Introduction

At BUY KENYA, your privacy is not just a policy it’s a promise. As Kenya’s leading luxury real estate platform, we handle sensitive personal and financial information with the highest level of care, professionalism, and legal compliance.

This Privacy Policy explains how BUY KENYA (a brand of HOMEION OWNERSHIP PARTNERS LTD) collects, uses, stores, protects, and shares your personal data when you:

  • Visit our website (www.buykenya.com )
  • Inquire about properties or services
  • Engage us to buy land, homes, or investment assets
  • Subscribe to newsletters or alerts
  • Use our diaspora support, off-plan, or relocation services

We are fully compliant with Kenyan data protection laws, including the Data Protection Act, 2019, the Constitution of Kenya (Article 31), and guidelines from the Office of the Data Protection Commissioner (ODPC).

By accessing our services, you consent to the practices described in this policy.


2. Information We Collect

To deliver seamless, secure, and personalized real estate solutions, we collect the following categories of personal information:

A. Personal Identification Data

  • Full name
  • National ID number or Passport details (for verification)
  • Date of birth
  • Gender
  • Citizenship and residency status

B. Contact Information

  • Phone numbers (mobile & landline)
  • Email addresses
  • Physical address (in Kenya or abroad)
  • Preferred method of communication

C. Property & Transaction Preferences

  • Budget range
  • Desired location (e.g., Nairobi, Diani, Ruiru)
  • Property type (land, apartment, villa, off-plan)
  • Investment goals (residential, rental income, legacy building)

D. Financial & Verification Documents

  • Proof of funds or income (for high-value purchases)
  • Bank account details (for diaspora clients using escrow or direct payments)
  • Tax PIN (from KRA)
  • KYC documents (utility bills, bank statements for address verification)

E. Legal & Title-Related Data

  • Existing title deed numbers (for transfers or due diligence)
  • Power of attorney (if acting on behalf of another)
  • Developer agreements or booking forms

F. Technical & Online Behavior

  • IP address, device type, browser, and operating system
  • Pages viewed, time spent, click patterns on our website
  • Referral sources (e.g., Google, Facebook, direct visit)
  • Cookies and tracking technologies (see Section 6)

G. Communication Records

  • Call logs, email correspondence, WhatsApp messages
  • Recorded consultations (only with prior notice and consent)
  • Notes from agent-client meetings (virtual or in-person)

3. How We Use Your Information

Your data enables us to provide world-class service while ensuring security and compliance. We use it for:

✅ Assisting you in finding, viewing, and purchasing property across Kenya
✅ Conducting legal due diligence and land verification at the Ministry of Lands
✅ Facilitating off-plan investments with trusted developers
✅ Providing diaspora real estate services, including remote viewings and title transfer
✅ Verifying identity to prevent fraud and money laundering
✅ Processing secure payments via licensed financial channels
✅ Sending property alerts, market insights, and exclusive listings (only if subscribed)
✅ Improving our website, customer experience, and service delivery
✅ Complying with tax, land registration, and anti-fraud regulations

We do not sell, rent, lease, or monetize your personal data to third parties for advertising or marketing purposes.


4. Legal Basis for Processing Personal Data

Under the Data Protection Act, 2019, we process your information only when justified by one or more lawful grounds:

  • Consent: You’ve explicitly agreed (e.g., newsletter signup, form submission).
  • Contract Performance: To fulfill a service you’ve requested (e.g., buyer representation).
  • Legal Obligation: Required by Kenyan law (e.g., land transactions, tax reporting).
  • Legitimate Interest: For fraud prevention, service optimization, and secure operations — provided it does not override your fundamental rights.

You may withdraw consent at any time by emailing [email protected] .


5. Who We Share Your Data With

We only disclose your personal information when necessary and under strict confidentiality safeguards:

🔐 Internal Teams

  • Licensed real estate advisors
  • Legal and conveyancing department
  • Investment consultants
  • Customer success and diaspora support officers

🤝 Trusted Third Parties

  • Registered advocates/lawyers handling land transfers
  • Licensed surveyors and valuation experts
  • Reputable developers (for off-plan bookings)
  • Escrow and payment processors (e.g., banks, fintech partners)
  • Marketing agencies (only non-sensitive, anonymized data for ads)

🏛️ Government & Regulatory Authorities

  • Ministry of Lands – for title searches and registration
  • Kenya Revenue Authority (KRA) – for stamp duty and tax compliance
  • Office of the Data Protection Commissioner (ODPC) – upon lawful request

All third parties are contractually bound to protect your data and comply with Kenyan law.


6. Cookies and Tracking Technologies

Our website uses cookies to enhance functionality, analyze traffic, and personalize your experience.

Essential
Site navigation, login, form security
No
Analytics
Google Analytics – user behavior
Yes (opt-in)
Marketing
Facebook Pixel, LinkedIn Ads – retargeting
Yes (opt-in)
You can manage cookie preferences via your browser settings. Disabling non-essential cookies may affect site features like saved searches or personalized recommendations.

For full details, see our Cookie Policy.


7. Data Security Measures

We implement industry-grade security protocols to protect your data:

  • End-to-end SSL encryption on all web forms and portals
  • Secure cloud storage with role-based access control
  • Two-factor authentication (2FA) for employee systems
  • Regular penetration testing and audits
  • Encrypted file sharing for sensitive documents (ID, title deeds)
  • Staff training on data ethics, phishing, and GDPR/Kenyan law alignment

In the event of a data breach, we will notify affected individuals and the ODPC within 72 hours, as mandated by law.


8. Data Retention Periods

We retain your personal data only as long as necessary:

Active client records
Up to 7 years after transaction close
Land registry, tax, audit requirements
Lead inquiries & unconverted users
3 years
Follow-up, service improvement
Marketing consents
Until withdrawal or 2 years of inactivity
Compliance with consent rules
Deleted data
Removed permanently upon request
Respect for user rights

9. International Data Transfers

For diaspora clients (UK, USA, Canada, UAE, etc.), some data may be processed outside Kenya — such as video calls, emails, or cloud-stored documents.

We ensure that:

  • All international transfers are strictly necessary for service delivery
  • Data is hosted on GDPR-compliant platforms (e.g., encrypted CRM, secure email)
  • No data is shared with governments or surveillance programs without legal justification
  • Appropriate safeguards (e.g., contractual clauses) are in place per ODPC guidance

You have the right to request details of cross-border processing at any time.


10. Your Data Rights Under Kenyan Law

The Data Protection Act, 2019 grants you the following rights:

  1. Right to Access – Request a copy of your personal data
  2. Right to Correction – Update inaccurate or outdated information
  3. Right to Deletion – Ask us to erase your data (where no legal obligation remains)
  4. Right to Restrict Processing – Limit use during disputes
  5. Right to Object – Opt out of marketing or automated decisions
  6. Right to Data Portability – Receive your data in a usable format
  7. Right to Lodge a Complaint – With BUY KENYA or the ODPC

👉 To exercise any right, email us at [email protected] with:

  • Your full name and contact details
  • A copy of your ID for verification
  • A clear description of your request

We respond within 14 business days.


11. Children’s Privacy

Our services are intended for individuals aged 18 and above. We do not knowingly collect data from minors. If you believe a child has submitted information through our site, please contact us immediately for prompt removal.


12. Changes to This Privacy Policy

We may update this policy to reflect changes in legislation, technology, or our services. The latest version will always be published at:

👉 www.buykenya.com/privacy
With the “Last Updated” date clearly displayed.

We encourage you to review this page periodically. Material changes will be communicated via email or website notice.


13. How to Contact Us

For questions, requests, or concerns about your privacy, please reach out:

📧 Email: [email protected]
📞 Phone: +254 700 123 456 (Mon–Fri, 8:00 AM – 6:00 PM EAT)
📍 Office Visit: Orchid By Kaisa, Nairobi, Kenya
📬 Mail: Data Protection Officer, HOMEION OWNERSHIP PARTNERS LTD, P.O. Box 1500-00200, Nairobi

For formal complaints not resolved by us, you may contact:

🏛️ Office of the Data Protection Commissioner (ODPC)
🌐 https://www.odpc.go.ke | 📞 020 212 0756 | 📧 [email protected]


14. Acceptance of This Policy

By using BUY KENYA’s website, services, or communications, you acknowledge that you have read, understood, and agreed to this Privacy Policy.

Your trust is sacred. Your legacy is secure.
BUY KENYA – Where Luxury Meets Integrity.

© 2025 HOMEION OWNERSHIP PARTNERS LTD t/a BUY KENYA. All Rights Reserved.