Privacy Policy

1. Who we are

This website is run by Debricks Homes ("Debricks Homes", "we", "us"), which offers furnished studio stays inside Tsavo Coral Bells, Thindigua, Kiambu, Kenya. We are the data controller for the personal data described in this policy, meaning we decide how and why it is used.

Our contact details are in section 12.

2. What we collect

What we don't collect. We don't take payments through this website, so we never receive your card or mobile-money details here. There are no user accounts. If a booking later needs identification, such as a copy of an ID, we will ask for it directly and tell you why.

3. Why we use it

• To handle your stay request — reading your request, checking availability, confirming the studio, dates and price, and reaching you if something changes. This is needed to take the steps you've asked for.
• To keep a simple record of requests — so dates aren't double-booked and we can see how busy we are.
• To answer your questions when you contact us.
• To keep the website working and secure.

By submitting the stay request form or messaging us, you consent to us using your details for these purposes. You can withdraw that consent at any time (see section 9). We won't use your details for marketing messages unless you ask us to, and we don't sell or rent them to anyone.

4. Who we share it with

We use a small number of service providers to run the site and manage requests. They process data on our behalf or under their own terms:

Shared WhatsApp number. Our WhatsApp number is also used by Lincy's Spa & Massage Parlour, which is in the same building, so messages sent to it may be seen by its team as well.

We may also disclose personal data if required by law, a court order or a lawful request from a public authority.

5. Transfers outside Kenya

The providers above run servers in several countries, so your data may be processed outside Kenya. Where this happens we rely on providers that apply recognised security safeguards, and by using the form or messaging us you agree to this. If you'd rather not have your details handled this way, you can request a stay by phone call instead, and tell us when you do.

6. Cookies and third-party services

Cookies are small files that a website stores on your device. We don't set our own tracking or analytics cookies, and this site shows no advertising. Some third-party services may set cookies or receive your IP address when your browser loads them:

• Google Maps — the map in the "Find us" section.
• Google Fonts — the typefaces used on the site.

Your browser's local storage is used for one thing only: remembering that you've dismissed the privacy notice, so it doesn't reappear on every visit.

You can block or delete cookies in your browser settings. The site will still work, though the map may not load.

7. How long we keep it

We keep stay-request records for up to 12 months after your check-out date, then delete them. We may keep a record for longer only if the law requires it or if it's needed to resolve a dispute. WhatsApp chats stay on our phone until we delete them, and we aim to clear old conversations within the same period.

8. Keeping it safe

We take reasonable steps to protect your data: the website is served over HTTPS, our request record is kept in a private spreadsheet that only authorised people can open, and we don't share its access with anyone else. No method of transmission or storage is completely secure, so we can't guarantee absolute security. If a breach ever puts your data at risk, we will tell you and the Office of the Data Protection Commissioner as the law requires.

9. Your rights

Under the Kenya Data Protection Act, 2019 you have the right to:

• be told how your data is being used (this policy);
• ask for a copy of the personal data we hold about you;
• ask us to correct data that is wrong or out of date;
• ask us to delete your data;
• object to, or ask us to restrict, how we use your data;
• ask for your data in a portable format, where this applies; and
• withdraw your consent at any time. This won't affect anything we did before you withdrew it.

To use any of these rights, contact us using the details in section 12. We may need to confirm who you are first, and we'll respond within the time the law allows.

If you're unhappy with how we've handled your data, you have the right to complain to the Office of the Data Protection Commissioner (ODPC) in Kenya: www.odpc.go.ke. We'd appreciate the chance to put things right first.

10. Children

Stays are for adults aged 18 and over, and this website is intended for them. We don't knowingly collect personal data from anyone under 18 through this site. If you believe a child has sent us their details, contact us and we'll delete them.

11. Changes to this policy

We may update this policy from time to time, for example if we add a new feature to the site. The date at the top shows when it was last changed. If we make a significant change, we'll make it clear on the website.

12. Contact us

For questions about this policy or to use your rights:

See also our Terms & Conditions.