Privacy Policy

Effective Date: 10th September 2025

At Escape Airbnb Kenya, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your data when you use our services.

1. Information We Collect

1.1 Personal Information

We collect the following personal information when you book with us:

Booking Information:

• Full name and contact details
• Email address and phone number
• Physical address
• Date of birth and nationality
• Payment information and billing details
• Government-issued ID details (as required by Kenyan law)

Guest Information:

• Names and ages of all guests
• Special requests or accessibility needs
• Emergency contact information
• Travel preferences and history

1.2 Automatically Collected Information

Website Usage Data:

• IP address and browser information
• Device type and operating system
• Pages visited and time spent on site
• Search queries and booking patterns
• Cookies and similar tracking technologies

Property Usage Data:

• Check-in and check-out times
• Facility usage patterns
• Communication records with our staff
• Feedback and review submissions

1.3 Third-Party Information

We may receive information about you from:

• Payment processors (M-Pesa, banks, credit card companies)
• Travel booking platforms
• Social media platforms (if you connect accounts)
• Government databases (for verification purposes)
• Reference checks or background verification services

2. How We Use Your Information

2.1 Primary Purposes

Booking Management:

• Processing and confirming reservations
• Managing check-in and check-out procedures
• Providing customer service and support
• Handling payments and billing

Legal Compliance:

• Meeting Kenyan tourism and hospitality regulations
• Complying with tax reporting requirements
• Cooperating with law enforcement when required
• Maintaining guest registration records as mandated

2.2 Secondary Purposes

Service Improvement:

• Personalizing your experience
• Analyzing usage patterns to improve our services
• Developing new accommodation offerings
• Conducting market research and surveys

Marketing Communications:

• Sending booking confirmations and updates
• Promotional offers for future stays
• Newsletter and travel tips (with your consent)
• Social media engagement and advertising

3. Information Sharing and Disclosure

3.1 Service Providers

We share information with trusted third parties who assist us:

• Payment processors (Safaricom M-Pesa, banks)
• Cleaning and maintenance services
• Security and safety service providers
• Website hosting and technical support
• Marketing and advertising partners

3.2 Legal Requirements

We may disclose information when required by:

• Kenyan law enforcement agencies
• Tourism regulatory authorities
• Tax collection agencies
• Court orders or legal proceedings
• Emergency situations involving guest safety

3.3 Business Transfers

In the event of a business sale, merger, or acquisition, your information may be transferred to the new owner with appropriate privacy protections maintained.

3.4 We Never Sell Personal Data

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

4. Data Security Measures

4.1 Technical Safeguards

• Encrypted data transmission (SSL/TLS)
• Secure payment processing systems
• Regular security audits and updates
• Access controls and authentication systems
• Backup systems with encryption

4.2 Physical Safeguards

• Secure storage of physical documents
• Restricted access to guest information
• Locked filing systems for paper records
• Secure disposal of sensitive documents

4.3 Administrative Safeguards

• Employee training on data protection
• Clear privacy policies and procedures
• Regular review of access permissions
• Incident response procedures

5. Data Retention

5.1 Retention Periods

• Guest Records: Maintained for 7 years as required by Kenyan tourism law
• Payment Information: Stored for 5 years for tax and auditing purposes
• Marketing Data: Retained until you withdraw consent
• Website Analytics: Anonymized after 2 years

5.2 Data Deletion

Upon request and where legally permissible, we will delete your personal information. Some data may be retained longer due to legal requirements.

6. Your Privacy Rights

6.1 Access and Correction

You have the right to:

• Access your personal information we hold
• Request corrections to inaccurate data
• Update your preferences and contact details
• Obtain copies of your booking history

6.2 Consent Management

You can:

• Withdraw consent for marketing communications
• Opt-out of non-essential cookies
• Request deletion of non-essential personal data
• Control how we use your information for marketing

6.3 Data Portability

You can request a copy of your personal data in a commonly used electronic format.

7. Cookies and Tracking Technologies

7.1 Types of Cookies We Use

• Essential Cookies: Required for booking functionality and security
• Analytics Cookies: Help us understand website usage patterns
• Marketing Cookies: Enable personalized advertising (with consent)
• Preference Cookies: Remember your settings and preferences

7.2 Cookie Management

You can control cookies through your browser settings. Disabling essential cookies may affect website functionality.

7.3 Third-Party Tracking

We use Google Analytics, Facebook Pixel, and similar tools. These services have their own privacy policies.

8. International Data Transfers

8.1 Data Location

Your information is primarily stored in Kenya. Some service providers may process data outside Kenya with appropriate safeguards in place.

8.2 Transfer Safeguards

When transferring data internationally, we ensure:

• Adequate protection standards
• Contractual data protection clauses
• Compliance with applicable data protection laws

9. Children's Privacy

9.1 Age Restrictions

Our services are not directed to children under 18. We do not knowingly collect personal information from minors without parental consent.

9.2 Family Bookings

When families book with minor children, we collect only necessary information for accommodation purposes.

10. Marketing Communications

10.1 Email Marketing

• Booking confirmations and important updates (cannot opt-out)
• Promotional offers and newsletters (can opt-out anytime)
• Personalized recommendations based on your preferences

10.2 SMS Communications

• Booking confirmations and check-in instructions
• Important updates about your stay
• Promotional messages (with explicit consent)

10.3 Opt-Out Procedures

• Click "unsubscribe" in any marketing email
• Reply "STOP" to SMS messages
• Contact us directly at privacy@escapeairbnb.com
• Update preferences in your account settings

11. Data Breach Notification

In the unlikely event of a data security incident affecting your personal information, we will:

• Investigate and contain the incident immediately
• Notify affected individuals within 72 hours where required
• Report to relevant authorities as mandated by law
• Provide guidance on protective measures you can take

12. Contact Information

12.1 Privacy Inquiries

For any privacy-related questions or requests:

Email: contact@escapeairbnb.com

Phone: Nanyuki: 0702 209 989
Nyahururu: 0796 767 028

12.2 Data Protection Officer

Our designated Data Protection Officer can be reached at:

Email: dpo@escapeairbnb.com

13. Updates to This Policy

13.1 Policy Changes

We may update this Privacy Policy periodically to reflect:

• Changes in our business practices
• New legal requirements
• Enhanced security measures
• Improved service offerings

13.2 Notification of Changes

• Significant changes will be communicated via email
• Updated policies will be posted on our website
• Continued use of our services indicates acceptance of changes

14. Governing Law

This Privacy Policy is governed by the laws of Kenya, including:

• The Data Protection Act, 2019
• The Kenya Information and Communications Act
• Tourism regulatory requirements
• Consumer protection legislation

15. Complaints and Disputes

Internal Resolution:

1. Contact our privacy team first
2. We will investigate within 30 days
3. Provide written response with resolution

External Authorities:

• Office of the Data Protection Commissioner (Kenya)
• Kenya Tourism Regulatory Authority
• Communications Authority of Kenya

Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us:

Escape Airbnb Kenya

• Email: contact@escapeairbnb.com
• Phone: Nanyuki: 0702 209 989
• Phone: Nyahururu: 0796 767 028

This Privacy Policy was last updated on 10th September 2025 and is effective immediately.