Privacy Policy

Roam & Rest is the data controller for personal data collected through this website and when you contact us about a stay. We process personal data in line with the Data Protection Act, 2019 of Kenya and its regulations.

The information we hold depends on how you deal with us.

• Enquiries and bookings: your name, WhatsApp number or email, the dates and number of guests, and anything else you choose to tell us.
• Running your stay: arrival details, identification where the law requires us to record it, and confirmation of payment.
• Reviews: if you are invited to review a completed stay, the review you write and the stay details it relates to.
• Technical information: basic data your browser sends when you visit, such as IP address and device type, which our hosting provider may keep in standard server logs.
• Preferences: your light or dark theme choice, saved in your own browser (see our Cookie Notice).

This website does not itself take your name, contact details or payment details. When you choose Reserve, a message is prepared for you to send us on WhatsApp and nothing is sent until you send it. The Share button creates a link containing the dates and option you chose but no personal information. We do not run advertising or tracking analytics.

• To reply to your enquiry and to confirm, manage and host your booking.
• To meet legal, tax, accounting and guest-record obligations.
• To keep our properties, guests and neighbours safe, and to protect the website from misuse.
• To invite you to leave a review after a completed stay.
• To send you news or offers only if you have asked us to, and you can stop at any time.

We rely on the performance of a contract (your booking), compliance with legal obligations, our legitimate interests in running a safe and reliable service, and your consent where we ask for it, for example for marketing messages. Where we rely on consent you can withdraw it whenever you like.

We share personal data only where it is needed to provide the service, and never to sell it:

• Messaging providers such as WhatsApp, when you contact us or we reply to you.
• Hosting and technology providers that keep this website running.
• Payment providers, if and when online payment is offered.
• People who help us run a stay, such as housekeeping or caretaking staff, who see only what they need.
• Professional advisers and authorities, where we are legally required to or need to protect our legal rights.

If a property uses security cameras, we will say so on its listing. We do not place cameras inside bedrooms or bathrooms.

Some of our providers process data outside Kenya. Where that happens we take steps to make sure your data stays protected in line with the Data Protection Act, 2019.

• Enquiries that do not become bookings: kept only for as long as needed to answer you, then deleted.
• Bookings and guest records: kept for as long as needed to run the stay and to meet legal, tax and accounting requirements.
• Reviews: kept for as long as the review is published, unless you ask us to remove it.
• After that, we delete or anonymise the data.

Under the Data Protection Act, 2019 you have the right to:

• be told how your data is used, and to access it;
• ask us to correct inaccurate or incomplete data;
• ask us to delete your data, or restrict how we use it, where the law allows;
• object to certain uses of your data and to withdraw consent you have given;
• receive your data in a portable format where applicable.

Contact us using the details below and tell us what you would like. We may need to confirm who you are first, and we will respond within the time the law allows. There is no charge for ordinary requests.

We use reasonable technical and organisational measures to protect personal data and limit access to those who need it. No online service can be completely secure, so please share only the information a booking requires. If a breach affecting your data occurs we will tell you and the Data Protection Commissioner where the law requires.

This website is intended for adults. We do not knowingly collect personal data from anyone under 18, other than the names and ages of children included in a booking.

If you are unhappy with how we handle your data, please tell us first so we can put it right. You also have the right to complain to the Office of the Data Protection Commissioner of Kenya (odpc.go.ke).

We will update this page when our practices change and show the date of the latest update at the top.

Questions about this document, or a request about your data? Get in touch and we'll respond promptly.