Privacy Policy

Last updated: 2026

This Privacy Policy explains how NestKey ("we", "us") collects, uses and protects your information when you use our website and app. We aim to comply with Kenya's Data Protection Act, 2019. This document is a starting template — please have it reviewed by a qualified lawyer before you rely on it.

1. Information we collect

• Account details — your name, email, phone number, role (landlord, agent or individual) and password. Passwords are stored only as a secure one‑way hash; we never see your actual password.
• Listing information — property details, photos, videos, descriptions, price, county/town and the exact map location you choose to pin.
• Payment details you add — the M‑Pesa number, till/paybill or bank account where buyers pay you, plus optional KYC details (ID number, KRA PIN). Actual rent/sale payments go directly between buyer and seller — we do not hold your funds.
• Enquiries — the name, phone number and message you send when contacting a lister.
• Technical data — basic information your browser sends, and small amounts of data stored on your device (see our Cookie Policy).

2. How we use your information

• To create and manage your account and publish your listings.
• To connect house hunters with landlords/agents (your listing and the contact details you provide are shown to other users).
• To process subscription payments and to calculate and invoice our commission on sales.
• To send you enquiries and important service messages.
• To keep the service secure, prevent fraud and improve NestKey.

3. Who we share it with

We share information only as needed to run the service: with payment providers (such as Safaricom M‑Pesa / Daraja and Pesapal) to take subscription/commission payments, and with other users where you have chosen to make information public (your listings and the contact details on them). We do not sell your personal data.

4. Payments

Subscription and commission payments are handled by third‑party providers (M‑Pesa, Pesapal). Their handling of your data is governed by their own policies. Rent and sale payments are made directly between buyer and seller; NestKey records the transaction and invoices its commission but does not hold or move those funds.

5. Data retention

We keep your account and listing data for as long as your account is active, and as needed to meet legal, tax or dispute‑resolution obligations. You may ask us to delete your account.

6. Your rights

Under the Data Protection Act, 2019 you may request access to your data, ask us to correct or delete it, object to certain processing, or withdraw consent. To exercise any of these, contact us using the details below.

7. Security

We take reasonable measures to protect your data, including hashing passwords and restricting access. No system is perfectly secure, so we cannot guarantee absolute security.

8. Children

NestKey is not intended for anyone under 18.

9. Changes

We may update this policy from time to time. The "last updated" date above shows when it last changed.

10. Contact

Questions or requests about your data? Contact us at support@nestkey.example (replace with your real contact address).