Privacy Policy

1.0 Protecting Your Privacy and Data Security

At Rozana Properties, we hold the protection of your privacy and personal information as our highest priority. We understand that trust is fundamental in the real estate industry, and we are committed to maintaining the confidentiality and security of all individuals who interact with our digital platforms, websites, and services. This comprehensive Privacy Policy has been carefully crafted to provide complete transparency about our data collection practices, usage protocols, sharing policies, and the robust security measures we implement to protect your personal information. We strictly adhere to and often exceed the requirements set forth by applicable data protection laws, ensuring your rights as a data subject are consistently upheld and respected throughout our interactions.

When you choose to access and utilize our website and services, you explicitly consent to the collection, processing, and utilization of your information as detailed in this Privacy Policy. Given the dynamic nature of the digital landscape and evolving regulatory requirements, we maintain the right to modify and enhance this Privacy Policy periodically. Any modifications will be reflected in the “Last updated” timestamp, and we encourage regular review of this policy to stay informed about how we protect your information.


2.0 Essential Terminology and Definitions

To ensure clarity and understanding, we have defined key terms used throughout this policy:

“Rozana Properties” encompasses Rozana Properties Limited and its entire network of subsidiary companies, affiliated organizations, and associated entities operating under the Rozana Properties brand umbrella.

“Cookies” represent small but significant data packets that our website deposits on your browsing device, serving to store and track valuable information about your browsing patterns, preferences, and usage behaviors to enhance your experience.

“Data Protection Laws” refers to the comprehensive framework of data protection legislation enacted in Kenya, with particular emphasis on the Data Protection Act No. 24 of 2019 and all subsequent regulations, amendments, and implementing measures designed to protect personal data privacy.

“Device” encompasses the full spectrum of digital equipment, including but not limited to desktop computers, laptops, smartphones, tablets, and any other electronic devices capable of accessing our website and digital services.

“Personal Information” comprises any data points that can be used to identify you directly or indirectly, including but not limited to your name, national identification number, physical and digital location data, and any other characteristics specific to your physical, physiological, genetic, mental, economic, cultural, or social identity.

“Processing” encompasses the complete lifecycle of data handling operations performed on Personal Information, including initial collection, recording, organization, structuring, storage, adaptation, retrieval, consultation, use, disclosure, alignment, combination, restriction, erasure, and destruction.

“Usage Data” refers to the comprehensive set of automatically collected information during your interactions with our website, including technical details such as IP addresses, browser specifications, device information, page navigation patterns, and session duration metrics.

“You” refers to the individual accessing or utilizing our website and services, whether acting in a personal capacity or as an authorized representative of a company or legal entity.

3.0 Collection and Utilization of Personal Information

3.1 Comprehensive Personal Information Collection
We meticulously collect and process various categories of Personal Information to provide our services effectively and enhance your experience. This includes:

  • Email address for communication and account verification
  • Full legal name for identification and documentation
  • Contact numbers for direct communication and verification
  • Postal address for correspondence and property-related matters
  • Detailed Usage Data for service improvement
  • Comprehensive financial information for real estate transactions and investments
  • Professional background information when applicable
  • Property preferences and search criteria

Our collection process is primarily implemented through direct voluntary submissions on our digital platforms, including but not limited to contact forms, property inquiry forms, investment applications, employment applications, and newsletter subscriptions. We ensure transparency in our collection methods and clearly communicate the intended purpose of gathering such information.

3.2 Advanced Website Interaction Tracking
Our sophisticated tracking systems automatically collect and analyze Usage Data when you navigate our website. This includes comprehensive technical information about your Device’s interaction with our platform, such as:

  • IP address and geographical location
  • Browser type, version, and preferences
  • Operating system specifications
  • Page navigation patterns and timing
  • Click-stream behavior and interaction metrics
  • Device-specific identifiers and characteristics
  • Network connection type and quality indicators

3.3 Enhanced Cookie Implementation
Our website employs a sophisticated combination of Session and Persistent Cookies to optimize your browsing experience and gather valuable usage insights. These digital tools enable us to:

  • Remember your preferences and settings
  • Maintain secure login sessions
  • Track website performance and usage patterns
  • Personalize content delivery
  • Analyze user behavior for service improvement
  • Enable essential website functionality

While you maintain control over Cookie settings through your browser preferences, please note that disabling certain Cookies may impact the functionality and user experience of our website.

3.4 Lawful Processing and Utilization
We process your Personal Information for various legitimate purposes, including:

  • Delivering personalized property recommendations
  • Facilitating real estate transactions and investments
  • Providing comprehensive customer support
  • Conducting market research and analysis
  • Processing applications and requests
  • Managing client relationships
  • Ensuring compliance with legal obligations
  • Protecting our legitimate business interests
  • Enhancing service delivery and user experience
  • Conducting security and fraud prevention measures

All data processing activities strictly adhere to the principles outlined in Kenya’s Data Protection Laws and international best practices.

4.0 Commercial Use of Your Personal Data

4.1 Marketing and Communication
We utilize your Personal Information to deliver targeted and relevant communications, including:

  • Customized property newsletters
  • Market insights and analysis
  • Investment opportunities
  • Company updates and announcements
  • Event invitations and promotional offers
  • Service updates and improvements

All marketing communications are subject to your explicit consent, and you maintain the right to opt-out at any time through multiple convenient channels.

4.2 Information Sharing Protocols
Your Personal Information may be shared with:

  • Internal departments for service delivery
  • Legal and financial advisors for transaction processing
  • Technology service providers for platform maintenance
  • Marketing partners for targeted communications
  • Regulatory authorities as required by law
  • Property developers and agents when necessary
  • Professional service providers under strict confidentiality agreements

4.3 Data Retention and Management
We maintain your Personal Information for the duration necessary to:

  • Fulfill our service obligations
  • Comply with legal requirements
  • Support business operations
  • Maintain accurate records
  • Protect legal interests
  • Enable future reference and support

Our retention periods are regularly reviewed and updated to ensure compliance with regulatory requirements and business needs.

4.4 International Data Transfers
In our global operations, your Personal Information may be transferred to and processed in various jurisdictions. We implement appropriate safeguards, including:

  • Standard contractual clauses
  • Data processing agreements
  • Security protocols and encryption
  • Regular compliance audits
  • Data protection impact assessments
  • Cross-border transfer mechanisms

5.0 Comprehensive Data Subject Rights

Under Kenya’s Data Protection Laws, you are entitled to extensive rights regarding your Personal Information:

  • Right to detailed information about data processing
  • Right to access and obtain copies of your data
  • Right to object to specific processing activities
  • Right to rectification of inaccurate information
  • Right to erasure of unnecessary data
  • Right to restrict processing
  • Right to data portability
  • Right to withdraw consent
  • Right to lodge complaints with authorities

6.0 Exercising Your Rights and Contact Information
To exercise your rights or raise concerns:

  • Contact our Data Protection Officer
  • Submit formal requests through our website
  • Send written communications to our registered office
  • Use our dedicated privacy support channels

We implement a robust verification process to protect your privacy when handling requests. Our team is committed to addressing your concerns promptly and effectively, typically responding within legally mandated timeframes.

If you remain dissatisfied with our handling of your Personal Information, you have the right to escalate your concerns to the Office of the Data Commissioner in Kenya, who provides independent oversight of data protection matters.

6.0 Exercising Your Rights and Contact Information

To exercise your rights or raise concerns:

  • Contact our Data Protection Officer
  • Submit formal requests through our website
  • Send written communications to our registered office
  • Use our dedicated privacy support channels

We implement a robust verification process to protect your privacy when handling requests. Our team is committed to addressing your concerns promptly and effectively, typically responding within legally mandated timeframes.

If you remain dissatisfied with our handling of your Personal Information, you have the right to escalate your concerns to the Office of the Data Commissioner in Kenya, who provides independent oversight of data protection matters.