Privacy Policy

1. Introduction

Welcome to All Property Link ("we", "our", "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit allpropertylink.co.ke and use our services. We comply with the Kenya Data Protection Act, 2019 and its regulations, as well as applicable international data protection standards.

2. Information We Collect

Personal Information

• Name, email address, phone number, and WhatsApp number
• Account credentials (encrypted password)
• Profile information (profile photo, bio, location preferences)
• Property preferences and saved searches
• Communications with agents

Property Listing Data

• Property details (type, location, price, features, descriptions)
• Property images and media uploaded via Cloudinary
• Location data (county, city, neighborhood, coordinates for Google Maps)

Automatically Collected Data

• IP address, browser type, device information, operating system
• Usage data (pages visited, time spent, clicks, search queries)
• Cookies and similar tracking technologies (see Cookie Policy)
• Location data (with consent) for property search and mapping

3. How We Use Your Information

• Provide, maintain, and improve our property marketplace platform
• Process property listings and agent communications
• Send transactional emails via Resend (inquiries, confirmations, notifications)
• Enable WhatsApp Business API communication for property listings
• Display property locations on Google Maps
• Store and optimize property images via Cloudinary
• Personalize user experience and property recommendations
• Send marketing communications (with consent, opt-out available)
• Comply with legal obligations under Kenya Data Protection Act, 2019
• Prevent fraud, ensure security, and enforce our Terms of Service

4. Third-Party Services

We use the following third-party service providers who process data on our behalf:

• Cloudinary — Image/video management, optimization, and delivery for property media
• Resend — Transactional email delivery (contact notifications, account emails, password resets)
• Google Maps Platform — Maps, geocoding, and places API for property location display and search
• WhatsApp Business API (Meta) — Direct agent communication via WhatsApp
• Supabase (PostgreSQL, Auth, Storage) — Database, authentication, and file storage backend
• Vercel — Hosting and edge network

Each provider processes data per their privacy policies and data processing agreements. We ensure appropriate DPAs are in place.

5. Data Sharing and Disclosure

• Contact messages: Shared with the listing agent/owner when you contact them (name, phone, email, message)
• Legal compliance: Disclosed when required by Kenyan law, court order, or regulatory authority (including the ODPC)
• Business transfers: In connection with a merger, acquisition, or sale of assets, with appropriate safeguards
• Service providers: As described in Section 4, under binding data processing agreements
• With consent: For marketing communications or other purposes where you have given explicit consent

6. Data Retention

• Account data: Retained while account is active and 2 years after deletion for legal compliance
• Property listings: Retained while active; archived listings retained for 3 years for reference and dispute resolution
• Contact messages: Retained for 3 years for agent reference and dispute resolution
• Analytics/logs: Retained for 13 months (analytics) and 30 days (server logs)
• Marketing data: Retained until you opt out or for 2 years after last interaction

7. Your Rights Under Kenya Data Protection Act, 2019

As a data subject in Kenya, you have the following rights:

• Right to be informed: Know what data we collect and why
• Right of access: Request a copy of your personal data
• Right to rectification: Correct inaccurate or incomplete data
• Right to erasure: Request deletion ("right to be forgotten")
• Right to restrict processing: Limit how we use your data
• Right to data portability: Receive your data in a portable format
• Right to object: Object to processing for direct marketing or legitimate interests
• Right to withdraw consent: Where processing is based on consent
• Right to lodge a complaint: With the Office of the Data Protection Commissioner (ODPC) Kenya

To exercise these rights, contact us at privacy@allpropertylink.co.ke or use account settings in your dashboard. We respond within 30 days as required by law.

8. Cookies and Tracking Technologies

We use cookies and similar technologies for essential functionality, analytics, and marketing. See our Cookie Policy for details on cookie types, purposes, and how to manage preferences.

9. International Data Transfers

Some third-party providers (Cloudinary, Resend, Google, Meta, Vercel) may process data outside Kenya. We ensure appropriate safeguards through Standard Contractual Clauses, adequacy decisions, or other lawful transfer mechanisms under the Kenya Data Protection Act, 2019.

10. Data Security

We implement appropriate technical and organizational measures: encryption at rest (Supabase/AWS), encryption in transit (TLS 1.2+), access controls, regular security assessments, and staff training. However, no internet transmission is 100% secure.

11. Children's Privacy

Our services are not directed to children under 18. We do not knowingly collect personal information from children. If you believe we have collected data from a minor, contact us at privacy@allpropertylink.co.ke.

12. Changes to This Policy

We may update this policy periodically. Material changes will be communicated via email or prominent site notice. The "Last updated" date at the top reflects the latest revision. Continued use constitutes acceptance of the updated policy.

13. Contact Us

For questions, complaints, or to exercise your data protection rights:

You may also lodge a complaint with the Office of the Data Protection Commissioner, Kenya: odpc.go.ke