Effective Date: Jul 11, 2025

At Alkebulan Africa, your privacy is important to us. This Privacy Policy explains how we collect, use, disclose, store, and protect your personal data when you use our short-term rental services. We are committed to handling your personal data in compliance with the General Data Protection Regulation (GDPR) and Kenya Data Protection Act, 2019 (DPA).

1. Who We Are

Alkebulan Africa Homes & Villas Ltd. ("we", "our", or "us") is a short-term rental company providing accommodation and property management services across Africa.

• Data Controller: Alkebulan Africa Homes & Villas Ltd.
• Email: info@alkebulanafrica.one
• Phone: (+44) 742 452 3190

2. Personal Data We Collect

When you interact with us, we may collect the following personal data:

• Full Name
• Email Address
• Phone Number
• National Identification Number (Kenyan ID or Foreign Passport Number)
• Booking Details (dates, property, payment information)

We only collect the data necessary for the provision of our services and for legal compliance.

3. Legal Basis for Processing

We collect and process your personal data based on the following legal grounds under the General Data Protection Regulation (GDPR) and Kenya Data Protection Act, 2019 (DPA):

• Performance of a Contract: To provide the rental services you have requested.
• Compliance with Legal Obligations: To fulfill obligations under applicable immigration, tax, and other relevant laws and regulations.
• Legitimate Interests: To manage and improve our services and ensure the safety of guests and hosts.
• Consent: Where required, especially for marketing or data sharing beyond what is necessary for service provision.

4. Purpose of Data Collection

We collect and process your data for the following purposes:

• To process bookings and reservations.
• To verify your identity for security and compliance.
• To contact you regarding your reservation or account.
• To comply with local laws and regulatory requirements (e.g., KRA, immigration).
• To provide customer support and respond to your inquiries.
• To maintain internal records and improve our services.

5. Data Sharing and Disclosure

We may share your personal data in the following circumstances:

• To Property Owners or Managers: Limited to information necessary for facilitating your stay.
• To Law Enforcement or Government Agencies: When required by law or a valid legal request.
• Service Providers: Trusted third parties (e.g., IT,Guesty,TRUVI payment processors) who are bound by confidentiality obligations.
• Legal or Regulatory Requirements: To comply with court orders, audits, or investigations.

We do not sell your data to third parties.

6. Data Retention

We will retain your personal data only for as long as is necessary for:

• The purposes stated in this policy.
• Legal, accounting, and regulatory obligations (e.g., 7 years for tax compliance).
• Resolving disputes or enforcing agreements.

Once your data is no longer required, we will securely delete or anonymize it.

7. Data Security

We implement appropriate technical and organizational measures to ensure your data is protected, including:

• Encrypted storage of personal data.
• Access controls and authentication measures.
• Secure communication channels (SSL/TLS encryption).
• Regular system and policy audits.

8. Your Rights as a Data Subject

Under the General Data Protection Regulation (GDPR) and Kenya Data Protection Act, 2019, you have the right to:

• Access: Request a copy of your personal data.
• Correction: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your data under certain conditions.
• Object: Object to processing based on legitimate interests or direct marketing.
• Data Portability: Request your data in a structured, commonly used format.
• Withdraw Consent: Where processing is based on consent.

To exercise these rights, contact us at: support@alkebulanafrica.one.

9. Cross-Border Data Transfers

If your data is transferred outside Kenya, we ensure that such transfers comply with the requirements of the General Data Protection Regulation (GDPR) and Kenya Data Protection Act, 2019, including:

• Adequate data protection safeguards in the recipient country.
• Binding agreements with recipients to ensure data protection.

10. Use of Cookies and Similar Technologies

Our website may use cookies for functional and analytical purposes. You will be notified and provided the option to accept or reject cookies where applicable.

11. Changes to This Privacy Policy

We may update this policy from time to time to reflect changes in law or our data practices. When we do, we will revise the “Effective Date” and notify you as required.