Privacy Policy

We respect your privacy and are committed to protecting your personal information. This privacy policy (“Policy”) applies to your use of www.buyrentkenya.com (referred to as the “Site” or Sites” depending on the context). This Policy sets out how we collect, store, guard, share and use any personal data that we may collect from you when you use or otherwise interact with the Platform or the services offered through our Sites. The Policy and our treatment of your personal data complies with the Data Protection Act of Kenya 2019 (as otherwise amended or varied from time to time).

Please review this Policy carefully to understand our practices.

This Site is not intended for children (i.e. under 18 years) and we do not knowingly collect data relating to children.

For ease of reference, the terms below as used in the Policy have the following meaning:

Account means the account you create when registering as a user on the Site to enable you to access some of the Services.

Group means any other business of Ringier One Africa Media Ltd operating in Kenya or within the Ringier companies worldwide.

Personal data means information relating to you and which can identify you as an individual (whether on its own or taken with other information). It does not include aggregated or anonymized data, which is information that can no longer identify you.

Site means, together or individually as applicable, BuyRentKenya, BrighterMonday and Pigiame sites.

Services means such services made available, accessed, published or otherwise offered through the Site.

Buy Rent Kenya Limited is the data controller and responsible for your personal data (referred to as “we”, “us” or “our” in this Policy). If you have any questions about this Policy please send an email to privacy@buyrentkenya.com

Ringier One Africa Media Ltd is made up of different legal entities, details of which can be found here This Policy is issued on behalf of Ringier One Africa Media Group (“Group”) so when we mention "BuyrentKenya.com ", "we", "us" or "our" in this Policy, we are referring to the relevant company in the Group responsible for processing your data. We will let you know which entity will be the controller for your data when you purchase a product or service with us. Buyrent Kenya Limited is the controller and responsible for this Site. We have appointed a data privacy manager who is responsible for overseeing questions in relation to this Policy. If you have any questions about this Policy, including any requests to exercise your legal rights, please contact the data privacy manager using the details set out above.

Ringier One Africa Media Ltd is made up of different legal entities, details of which can be found here. This Policy is issued on behalf of Ringier One Africa Media Group (“Group”) so when we mention "BuyRentKenya ", "we", "us" or "our" in this Policy, we are referring to the relevant company in the Group responsible for processing your data. We will let you know which entity will be the controller for your data when you purchase a product or service with us. Buy Rent Kenya Limited is the controller and responsible for this Site. We have appointed a data privacy manager who is responsible for overseeing questions in relation to this Policy. If you have any questions about this Policy, including any requests to exercise your legal rights, please contact the data privacy manager using the details set out above.

Depending on the Services you are obtaining or accessing, we may collect, store, use and transfer the following different types of information:

• Identity information such as your first name, maiden name, last name, username or similar identifier, marital status, title, nationality, date of birth or gender.
• Contact Information such as your billing address, delivery address, email address and telephone numbers, the name of your business, and/or location.
• Financial information such as bank account, payment card details, and/or monthly income. Details about monthly income is collected for users of BuyRentKenya only.
• Verification information such as your government issued national identification or passport, KRA PIN certificate, business permits, company incorporation certificates, and/or location.
• Account information relating to the use of the Site including profile data such as your username, password, orders, interests, preferences, survey responses and/or feedback.
• Automatic information and information about your device including technical data (internet protocol (IP) address, login data, time zone setting, browser type and version, location, browser plug-in types and versions, operating system and platform, and/or other technology on the devices you use to access the Site. Note that this automatic information and device information is used to screen for potential risks and fraud, to improve and optimize the Site, to ease access to the Site, and to carry out upgrades, data analysis, and improve the quality of services. You can set your browser to refuse all or some browser cookies, but this will make parts of the Site inaccessible or inhibit functionality.
• Vehicle information including vehicle identification and ownership documents.
• Marketing and communications data such as your preferences in receiving marketing from us and our third parties and your communication preferences.

Please note that this is not an exhaustive list.

We may collect and use statistical or demographic information for any purpose. This data is anonymous and it is not personal information as this data will not directly or indirectly reveal your identity. However, if we combine or connect statistical/demographic information with your personal data, we treat the resulting information as personal data and it will be used in accordance with this privacy policy.

We do collect sensitive personal data about you. This includes details about your race or ethnicity, religious or philosophical beliefs, sex life, information about your health, and genetic and biometric data. We also collect information about criminal convictions and offences.

Where we need to collect personal data by law, or under the terms of a contract we have with you, and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with goods or services). In this case, we may have to cancel a product or service you have with us but we will notify you if this is the case at the time.

We collect personal information:

• That you provide to us directly for example through the Site, on the phone or through any other communication channel or method.
• We obtain from other sources.
• Using cookies, logs, web beacons, tags, pixels and other internet technologies (used to record information about how you browse the Site), for example the technical data.

It is important that the personal data we hold is accurate and current to enable us to deliver the Services. As such, please keep us informed if your personal data or any other information changes in the course of your use of the Site.

You guarantee and declare that you are the owner of the information you submit on the Site or share with us, or that you have the necessary rights to do so. You also guarantee and declare that it is exact, true and verified, and the use of the information is not contrary to this Policy or applicable laws and will not damage a third party’s reputation. You accept full and complete liability for any information that is contrary to this Policy or any applicable laws.

How we use your personal data depends on the Services you are accessing. We will use your personal data:

Note: we may process your personal data for more than one lawful ground depending on the specific purpose for which we are using your data.

Generally, we do not rely on consent as a legal basis for processing your personal data although we will get your consent before sending third party direct marketing communications to you via email or text message. You have the right to withdraw consent to marketing at any time by contacting us.

Except as specified in this Policy, we will not disclose your personal data to third parties without your consent. Depending on the Services, we may share your personal data with:

• 1. Internal third parties such as companies within the Group and who are based in Kenya and South Africa;
• 2. External third parties such as service providers (for example, Amazon Web Services, Flutterwave, MailChimp), Kenya Revenue Authority and Facebook Analytics.
• 3. Third parties to whom we may choose to sell, transfer or merge parts of our business or our assets to. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this Policy.

Depending on the Services you are accessing, we may share certain personal information with third parties to help us use your personal information. For example, for users of BuyRentKenya, buyers and sellers have access to each other's contacts. We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. Your personal data may be retained for a longer period where there has been a complaint or there is a prospect of litigation with respect to your use of the Site.

We strive to provide you with choices regarding certain personal data uses, particularly around marketing and advertising. You will receive marketing communications from us if you have requested information from us or purchased goods or services from us and you have not opted out of receiving the said marketing communications.

You can ask us or third parties to stop sending you marketing messages at any time by following the opt-out links on any marketing message sent to you or by contacting us at any time.

Where you opt out of receiving these marketing messages, this will not apply to personal data provided to us as a result of a product/service purchase, product/service experience or other transactions.

Our website uses Google Analytics, a web analytics service provided by Google, Inc. (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Such use includes the 'Universal Analytics' mode of operation. This makes it possible, if a user is logged into a Google service, to assign data, sessions and interactions across multiple devices to a pseudonymous user ID and thus to analyse the user's activities across such devices.

Google Analytics uses cookies. The non-personal information generated by such cookies about your use of our website is usually transferred to a Google server in the USA and stored there. However, the corresponding IP addresses are anonymised beforehand using IP anonymisation. The anonymised IP address transmitted by your browser under Google Analytics will not be merged with other Google data. Google will use this information on our behalf for the purposes of evaluating your use of our website, compiling reports on website activity and providing other services relating to website activity and internet use.

If you wish to prevent the collection of data regarding your activity on our website by Google Analytics, you can use Google Analytics opt-out browser add-on available at https://tools.google.com/dlpage/gaoptout/. You can also prevent the storage of cookies by adjusting your browser software accordingly.

In accordance with the applicable laws of Kenya, you may have the right to:

As a data subject, you are allowed to confirm the accuracy of your data and exercise your right of correction. You can request to see any personal data that we hold about you. To exercise your right to rectification, go to your BuyRentKenya profile and edit your information. To request your data from BuyRentKenya kindly reach out to support@buyrentkenya.com or privacy@buyrentkenya.com and we will respond to your request within 30 days.

As a data subject, you can request for deletion of your personal data from our system or withdraw consent on processing of your personal information. If you wish to delete your data from BuyRentKenya website, kindly reach out to support@buyrentkenya.com or privacy@buyrentkenya.com

In any event, to the extent required or allowed by applicable law, the Data Processor, as defined as Buy Rent Kenya Limited, may retain one copy of the Personal Data for evidence purposes and/or for the establishment, exercise or defense of legal claims and/or to comply with applicable laws and regulations.

We regularly review and update this Policy in order to reflect changes to our practices, for operational, legal or regulatory reasons, and for any other purpose. Any revisions to this Policy will be uploaded to the Site and such upload will be deemed to be sufficient communication to you. Where you are a registered user, we may elect, at our own discretion, to notify you of any revision through a notice on your account.
Last updated: [06-05-2024]