Privacy notice
Draft for legal review before launch.
Who we are
Carta Homes, Nairobi, Kenya, is the data controller for the data on this site. Contact: hello@cartahomes.example, +254 182 309 571.
What we collect
- Renters: name, phone, preferred viewing days, move-in date, household size, and the homes you asked about.
- Landlords: name, phone, email, property details, the ID and ownership documents we check, and the signed letting agreement.
- Agents and agencies: agency name, your name, phone, email, the agents you list with us, and the partner agreement.
- Kenyans abroad and relocation clients: name, email, phone, country, the property or brief you give us, and our report.
- Payments: the amount, date, reference and payment method. Paystack processes card and M-Pesa payments; we never see or store card numbers or M-Pesa PINs.
- Website: which page or campaign brought you here (one first-party cookie, see cookies) and anonymous page counts.
Why we use it
- To arrange viewings and introductions (to take steps you asked for, and our legitimate interest).
- To keep the introduction and placement records our commission depends on (legitimate interest and legal obligation).
- To deliver paid property checks and relocation searches, and send receipts (contract).
- To work with partner agents on the homes they list (contract).
- To send new-home alerts on WhatsApp if you ask for them (consent; reply STOP anytime).
- To stop fraud and scams that use our name (legitimate interest).
We don't use your data for automated decisions about you, and we don't send marketing without your consent.
Who we share it with
- The landlord, caretaker or partner agent for a home you want to view: your first name, phone and viewing time only.
- A moving or service partner, only if you ask us to connect you.
- Paystack, for payments.
- Our hosting, database, email and WhatsApp providers, who process data for us under contract.
- Authorities, if the law requires it.
We never sell your data. Some of our providers store data outside Kenya. We use only providers with proper security and contracts that protect your data, as the Act requires.
How long we keep it
- Enquiries that don't lead anywhere: 12 months.
- Introductions, agreements, placements and invoices: 7 years (tax and contract records).
- Diaspora reports: 3 years, unless you ask us to delete them sooner.
Your rights
You can ask to see your data, correct it, get a copy, delete it, object to how we use it, or withdraw consent. Email hello@cartahomes.example or message us on WhatsApp. We reply within 7 days. If you're not happy with our answer, you can complain to the Office of the Data Protection Commissioner (odpc.go.ke).
Security
Only Carta Homes staff who need your data can see it, and admin sign-in uses one-time email links. We never show exact addresses or landlord phone numbers publicly. If a breach puts your data at risk, we'll tell you and the Data Commissioner as the law requires.
Children
Carta Homes is for adults. We don't knowingly collect data from anyone under 18.
Changes
We'll update this notice when how we use data changes. The date at the top shows the latest version.