Privacy Policy

1. Who we are

This site is operated. Aeltara acts as a data processor on behalf of the site operator.

ODPC registration pending — reference available on request.

2. What we collect

We collect three categories of personal data on this site:

• Contact data — name, email, phone number, country, budget range, unit interest, and any free-text message you provide on the contact form.
• Behavioural data — page paths, UTM parameters, an IP-derived hash that rotates daily, and a record of WhatsApp click events. We do not store the raw IP address.
• Conversational data — when our chat surface is operational, the messages you exchange with it. The chat surface is currently disabled and will not be re-enabled until additional safeguards are in place.

3. Why we collect it

Under section 30 of the Kenya Data Protection Act 2019, our lawful bases are:

• Consent — you tick the consent box on the contact form before submitting.
• Legitimate interest — operating the site, responding to enquiries, matching buyers to inventory, and improving the chat surface when it is enabled.
• Contract — performing pre-contract steps once you indicate purchase intent and request paperwork.

4. How long we keep it

• Lead data (form submissions, lead-spine events): 24 months from collection.
• Chat transcripts (when re-enabled): 90 days from the last message.
• Signed contracts and reservation paperwork: indefinite, as part of the property record.
• Analytics data: per Google Analytics 4 default retention (14 months).

5. Who we share it with

We share personal data with:

• The site operator named in §1 — they receive every lead so their team can respond.
• Cloudflare, Inc. — hosts this site and the lead-capture and chat Workers; processes traffic on our behalf.
• Web3Forms — relays contact-form submissions as email to the operator's inbox.
• Anthropic, PBC — when the chat surface is enabled, processes chat messages to generate replies.
• Google LLC — provides aggregated analytics, only after you accept cookies via the consent banner.

None of the above parties resells personal data. Each operates under its own privacy policy and a written processing arrangement with Aeltara.

6. International transfers

Cloudflare, Web3Forms, Anthropic, and Google all process data outside Kenya. Under section 48 of the Kenya Data Protection Act 2019, transfers are made on the basis of standard contractual safeguards in our processing agreements with those parties. By submitting the form or using the chat surface, you acknowledge that your data may be processed in the United States, the European Union, or other jurisdictions where these processors operate.

7. Your rights

You have the right to:

• access the personal data we hold about you;
• request correction of inaccurate data;
• request erasure of your data, subject to retention obligations;
• object to processing or withdraw your consent at any time;
• request portability of data you provided directly to us;
• lodge a complaint with the Office of the Data Protection Commissioner.

8. Contact for data-protection queries

Email abdirahimmohamud79@gmail.com or call +254 117 470 000. We respond within five working days.

Our Data Processing Agreement framework, which governs how Aeltara handles data on behalf of the site operator, is published at /dpa/.

9. Change log and effective date

This policy was last revised on 2026-04-29. Material changes are reflected by updating the effective date above. We encourage you to review this page from time to time.