1. Information We Collect

We collect information that you provide directly to us, information automatically collected when you use our services, and information from third-party sources.

1.1 Information You Provide

• Contact Information: Name, email address, phone number, physical address.
• Account Credentials: Username, password, and security questions.
• Property Preferences: Property type, location preferences, budget range, timeline.
• Inquiry Details: Messages, questions, and information provided in contact forms.
• Transaction Information: Details about property inquiries, viewings, offers, or transactions.
• Payment Information: Billing details when purchasing our premium services.

1.2 Automatically Collected Information

• Device Information: IP address, browser type, operating system, device identifiers.
• Usage Data: Pages visited, time spent, search queries, clicks, and interactions.
• Location Data: Approximate location based on IP address (with your consent).
• Cookies: Small text files stored on your device to enhance user experience.

2. How We Use Your Information

We use your information for the following purposes:

• Provide Services: Connect you with properties, facilitate viewings, process inquiries.
• Communicate: Send property recommendations, respond to inquiries, provide updates.
• Improve Platform: Analyze usage patterns, optimize user experience, fix technical issues.
• Marketing: Send promotional materials about properties, services, and events (with opt-out option).
• Legal Compliance: Comply with applicable laws, regulations, and legal processes.
• Security: Detect, prevent, and address fraud, security issues, or technical problems.

3. Legal Basis for Processing

Under Kenyan data protection laws (Data Protection Act, No. 24 of 2019), we process your personal data based on the following legal grounds:

• Consent: You have given clear consent for us to process your data for specific purposes.
• Contract: Processing is necessary for a contract you have with us or because you asked us to take specific steps before entering a contract.
• Legal Obligation: Processing is necessary for compliance with a legal obligation.
• Legitimate Interests: Processing is necessary for our legitimate business interests (e.g., improving our services, preventing fraud).

4. Sharing Your Information

We do not sell your personal information. We may share your information with:

We require all third parties to respect the security of your personal data and treat it in accordance with the law.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption: SSL/TLS encryption for data transmitted between your browser and our servers.
• Access Controls: Restricted access to personal data based on job responsibilities.
• Regular Audits: Periodic security assessments and vulnerability testing.
• Employee Training: Staff training on data protection and privacy practices.
• Secure Storage: Personal data stored on secure servers with firewalls and intrusion detection.

While we strive to protect your data, no transmission over the Internet is 100% secure. You use our services at your own risk.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law.

• Account Information: Retained until account deletion or 2 years of inactivity.
• Inquiry Records: Retained for 3 years after the last interaction.
• Transaction Records: Retained for 7 years to comply with tax and legal requirements.
• Marketing Data: Retained until you unsubscribe or request deletion.

7. Your Rights

Under Kenya's Data Protection Act, you have the following rights regarding your personal data:

To exercise these rights, contact us at privacy@citygate.ke. We will respond within 30 days.

8. Cookies & Tracking

We use cookies and similar tracking technologies to enhance your experience. Types of cookies we use:

• Essential Cookies: Required for basic site functionality (login, forms).
• Performance Cookies: Analyze site usage and improve performance.
• Functional Cookies: Remember your preferences and settings.
• Marketing Cookies: Deliver relevant advertisements (with your consent).

You can control cookies through your browser settings. Blocking certain cookies may affect site functionality.

9. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors. If we discover that we have collected data from a minor without parental consent, we will delete it immediately.

10. International Transfers

Your information may be transferred to and processed in countries other than Kenya. We ensure appropriate safeguards are in place, such as standard contractual clauses, to protect your data when transferred internationally.

11. Third-Party Links

Our platform may contain links to third-party websites, plugins, or applications. Clicking those links may allow third parties to collect your data. We do not control these third-party sites and are not responsible for their privacy practices.

12. Changes to This Policy

We may update this privacy policy periodically to reflect changes in our practices or legal requirements. We will notify you of material changes by:

• Posting the updated policy on this page with a new "Last Updated" date.
• Sending an email notification (for significant changes).
• Displaying a notice on our website before changes take effect.

We encourage you to review this policy regularly.

13. Contact Us

If you have questions about this privacy policy or our data practices, please contact our Data Protection Officer (DPO):

• Email: privacy@citygate.ke
• Phone: +254 740 000 222
• Address: CityGate Commercial, 5th Floor, Westlands Business Park, Nairobi, Kenya

You also have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) of Kenya at www.odpc.go.ke.