Last Updated: 9th October 2024
Arban Realty (“we,” “our,” “us”) respects your privacy and is committed to protecting the personal information you provide when accessing our services or interacting with our website, https://arban.co.ke (the “Website”). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data in compliance with international privacy standards, including the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other relevant laws.
This policy applies to any personal information collected through the Website, services, or communication channels. By accessing our Website and using our services, you agree to the terms outlined here. Please read this policy carefully to understand your rights.
1. Information We Collect
A. Personal Information
We collect various types of personal data depending on your interactions with us, which may include:
- Identity Data: Name, email address, phone number, and other contact details.
- Account Data: Username, password, and any preferences set in your account.
- Transaction Data: Billing and shipping addresses, payment information, and records of transactions made through the Website.
- Communication Data: Records of any correspondence via email, phone, or through our Website.
- Geolocation Data: Information on your geographical location based on your IP address or other location data.
B. Sensitive Information
We do not generally collect sensitive information such as health data, political beliefs, or religious preferences. However, if we ever need to process such data, we will obtain explicit consent unless required by law.
C. Automatically Collected Data
When you use our Website, we may collect technical data through cookies and similar technologies. This may include:
- Device Data: Information about the device you are using, such as the type of device, operating system, browser type, and version.
- Usage Data: Pages visited, duration of visit, referring sites, and the date and time of each visitor request.
- IP Address: Used to identify your location and device for enhanced security and fraud prevention.
2. How We Collect Your Data
We gather your personal information in the following ways:
Direct Interaction
You may provide personal information when you:
- Fill out forms on our Website, such as subscribing to newsletters, making an inquiry, or registering for an account.
- Purchase services, book a consultation, or engage in any transaction.
- Interact with us through our customer service channels, either via email, phone, or online.
Automated Technologies
We use cookies, log files, and web beacons to automatically collect certain data when you browse our Website. These technologies help us understand usage patterns, track user behavior, and optimize website performance.
Third-Party Sources
We may receive personal information from:
- Public databases
- Advertising partners
- Analytics providers
- Social media platforms, if you interact with our social media accounts.
3. Use of Personal Data
Your personal data is processed for specific purposes, which include:
A. Providing Services
We process your personal information to:
- Facilitate and manage account creation, login, and service requests.
- Process transactions and provide confirmations, invoices, or customer service communication.
B. Marketing and Communication
If you have provided consent, we may use your information to send marketing communications such as newsletters, promotions, or service updates. You can opt out of marketing communications at any time.
C. Personalization and Analytics
We use your data to personalize your experience on our Website, including tailored content and advertisements, and to analyze how you use our services so we can improve them.
D. Compliance with Legal Obligations
We may process your data to comply with applicable laws, regulations, legal processes, or government requests.
4. Legal Basis for Processing
In compliance with the GDPR and other global privacy regulations, we ensure that your data is processed based on one or more of the following legal bases:
- Consent: When you provide explicit consent for specific uses, such as receiving marketing communications.
- Contractual Necessity: Processing is necessary for the performance of a contract, such as fulfilling your service requests or purchases.
- Legitimate Interests: When processing is required for legitimate business purposes that do not override your privacy rights.
- Legal Compliance: When we need to comply with legal obligations, such as fraud prevention, tax laws, or other regulatory requirements.
5. Cookies and Tracking Technologies
We use cookies and similar technologies to collect information automatically. These technologies help enhance the user experience and monitor the performance of our Website.
- Types of Cookies We Use:
- Necessary Cookies: Required for the operation of the Website.
- Performance Cookies: Collect information about how visitors use the site.
- Functional Cookies: Allow the Website to remember choices you make.
- Targeting Cookies: Track your browsing habits to deliver relevant ads.
You can manage your cookie preferences through your browser settings. However, disabling cookies may affect the functionality of certain parts of our Website.
6. Data Sharing and Disclosure
We do not sell or rent your personal information to third parties. However, we may share your data with trusted third-party service providers, including:
- Payment Processors: To process transactions securely.
- IT Service Providers: To maintain and host our Website and its infrastructure.
- Marketing Platforms: To manage and execute email campaigns, social media engagements, and advertisements.
- Legal and Regulatory Authorities: To comply with legal obligations or enforce our rights.
All third-party providers are required to comply with data protection laws and safeguard your data in accordance with this Privacy Policy.
7. International Data Transfers
Given the global nature of our business, your data may be transferred to and processed in countries outside of your jurisdiction, including countries that may not provide the same level of data protection as your own. This includes, but is not limited to, countries in Africa, Asia, Europe, and the United States.
Whenever your personal data is transferred outside of Kenya, we implement appropriate safeguards, including:
- Standard Contractual Clauses (SCCs): Where applicable, we utilize European Commission-approved SCCs to ensure a high level of data protection.
- Binding Corporate Rules (BCRs): Applied by our partners to protect your data in international transfers.
You acknowledge that by using our Website and services, your information may be subject to cross-border data transfers.
8. Data Security
We are committed to ensuring the security of your personal data. We use industry-standard measures to protect your information, including encryption, firewalls, and secure servers. However, no online service can guarantee absolute security, and we encourage you to take steps to protect your own data by using strong passwords and avoiding sharing sensitive information in unencrypted formats.
9. Data Retention
We retain your personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy, or as required by law. The retention period depends on the type of data and the purposes for which it was collected, such as maintaining records of transactions or complying with legal obligations.
Once the retention period expires, we will securely delete or anonymize your personal data.
10. Your Rights Under GDPR and CCPA
Depending on your geographical location and applicable law, you may have the following rights concerning your personal data:
- Right to Access: Request access to the personal data we hold about you.
- Right to Rectification: Request corrections to any inaccurate or incomplete data.
- Right to Erasure: Request that we delete your personal data under certain circumstances.
- Right to Restrict Processing: Request a restriction on how your data is processed.
- Right to Data Portability: Obtain a copy of your personal data in a structured, commonly used format.
- Right to Object: Object to the processing of your data based on legitimate interests.
- Right to Withdraw Consent: Withdraw your consent at any time, where consent is the legal basis for processing.
To exercise any of these rights, please contact us at [email protected] or call us at +254 799 55 50 75. We will respond to your request in accordance with applicable data protection laws.
11. Children's Privacy
Arban Realty's services are not directed at children under the age of 18. We do not knowingly collect or process personal data from children. If we become aware that we have inadvertently collected data from a minor, we will take steps to delete that information. If you believe we have collected such data, please contact us at [email protected].
12. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. Any updates will be posted on this page, with the “Last Updated” date revised accordingly. If there are significant changes, we may notify you by email or by a prominent notice on the Website.
Your continued use of our Website after the changes take effect constitutes acceptance of the revised Privacy Policy.
13. Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:
- Email: [email protected]
- Phone: +254 799 55 50 75
We take privacy seriously and are committed to resolving any concerns promptly.