Privacy Policy - Qibla Homes Ltd

Privacy Policy

Qibla Homes Ltd

Last Updated: December 23, 2025

Compliant with Kenya Data Protection Act 2019

Your Privacy Matters

Qibla Homes Ltd is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information in compliance with the Kenya Data Protection Act, 2019.

1 Introduction

Qibla Homes Ltd ("we," "our," or "us") operates the website qiblahomesltd.com and provides real estate services in Kenya. This Privacy Policy applies to all users of our website and services.

We are committed to compliance with the Kenya Data Protection Act, 2019, and respect your rights regarding your personal data.

2 Data We Collect

We collect the following types of personal data:

Personal Information

  • Full name
  • Email address
  • Phone number (Kenyan format)
  • Account password (encrypted)

Automatically Collected Data

  • IP address and location data
  • Browser type and version
  • Device information (mobile/desktop)
  • Pages visited and time spent
  • Referral source
  • Cookies and similar technologies

Inquiry and Communication Data

  • Property inquiries and messages
  • Site visit requests
  • Consultation requests
  • Saved/favorited properties

3 How We Use Your Data

We use your personal data for the following purposes:

Account Management

  • • Create and manage your account
  • • Verify your identity
  • • Send account notifications

Service Delivery

  • • Process property inquiries
  • • Schedule site visits
  • • Provide consultations

Communication

  • • Send property updates
  • • Marketing communications (opt-in)
  • • Customer support

Analytics & Improvement

  • • Analyze website usage
  • • Improve user experience
  • • Prevent fraud and abuse

Legal Basis: We process your data based on your consent, contractual necessity, legal obligations, and legitimate business interests.

4 Data Storage and Security

Security Measures:

We implement industry-standard security measures to protect your data:

Encryption

SSL/TLS encryption for data transmission

Secure Storage

Password hashing and encrypted databases

Access Control

Restricted access to authorized personnel only

Data Location:

Your data is stored on secure servers. While we take all reasonable precautions, no method of transmission over the internet is 100% secure.

Data Breach Notification: In the unlikely event of a data breach affecting your personal data, we will notify you and relevant authorities within 72 hours as required by law.

5 Third-Party Services

We may share your data with trusted third-party service providers:

Email Service Providers

For sending transactional and marketing emails (e.g., verification, newsletters)

Analytics Services

For website analytics and user behavior tracking (anonymized data)

Payment Processors

For secure payment processing (if applicable)

Cloud Hosting

For secure data storage and website hosting

Note: All third-party providers are carefully selected and contractually obligated to protect your data and use it only for specified purposes.

6 Your Data Protection Rights

Under the Kenya Data Protection Act, 2019, you have the following rights:

Right to Access

Request copies of your personal data we hold

Right to Correction

Request correction of inaccurate or incomplete data

Right to Deletion

Request deletion of your personal data (subject to legal requirements)

Right to Object

Object to processing of your data for certain purposes

Right to Restriction

Request restriction of processing in certain circumstances

Right to Portability

Request transfer of your data to another organization

How to Exercise Your Rights

To exercise any of these rights, please contact us at:

We will respond to your request within 30 days.

7 Data Retention

We retain your personal data for as long as necessary to fulfill the purposes outlined in this policy:

Active Accounts

Data retained while your account is active and for a reasonable period after inactivity

Transaction Records

Retained for 7 years as required by Kenyan law for accounting and tax purposes

Communication Logs

Retained for up to 2 years for customer service and dispute resolution

After the retention period, your data will be securely deleted or anonymized. You may request earlier deletion by contacting us, subject to our legal obligations.

8 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience:

Essential Cookies

Required for website functionality (login sessions, security)

Analytics Cookies

Help us understand how visitors use our website

Preference Cookies

Remember your settings and preferences

Marketing Cookies

Track visits and show relevant ads (with your consent)

Managing Cookies: You can control cookies through your browser settings. Note that disabling essential cookies may affect website functionality.

9 Children's Privacy

Age Restriction

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from children under 18.

If we discover that we have inadvertently collected data from a child under 18, we will delete it immediately. If you believe we have collected data from a minor, please contact us.

10 Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Updates will be posted on this page with a revised "Last Updated" date.

Notification of Changes: Material changes will be communicated via email to registered users. We encourage you to review this policy periodically.

Data Protection Contact

For any questions about this Privacy Policy or to exercise your data protection rights:

Office of the Data Protection Commissioner (Kenya):
If you are not satisfied with our response, you may lodge a complaint with the Office of the Data Protection Commissioner