Your information
Privacy Policy
Last updated 29 October 2026
This policy explains what information ALSET APARTMENTS collects when you book or contact us, why we need it, who sees it, how long we keep it and your rights under Kenya's Data Protection Act, 2019. Bookings are also covered by our Terms and Conditions.
1. Who is responsible
ALSET APARTMENTS, Nakuru, Kenya, is responsible for the personal data described here (the "data controller"). Contact us about your data on +254 742 067 465 or on WhatsApp.
2. What we collect
- Your details: name, phone number and email address.
- Your booking: apartment, dates, number of guests, booking reference, amount due and any special requests you write.
- Payments: the M-Pesa or bank transaction code you submit, the phone number used to pay, the amount and the payment status. We never ask for or store your M-Pesa PIN, bank PIN or card details.
- At check-in: we look at a valid ID for the lead guest. The website does not collect copies of IDs.
- Messages: what you send us by WhatsApp, phone or email about your stay.
Our server uses your internet address for a short time to protect the booking and payment forms from abuse. It is not stored with your booking.
3. How we use it, and why we may
- To take and manage your booking, confirm your payment and prepare for your arrival. This is needed to carry out the booking you asked for.
- To contact you about your stay, for example to confirm your booking or payment by email or WhatsApp.
- To keep business and tax records that the law requires us to keep.
- To keep the website and our guests safe, for example by stopping repeated fake bookings or payment codes. This is in our legitimate interest.
We do not send marketing messages without asking you first, and we do not sell your information.
5. How long we keep it
We keep booking and payment records for as long as Kenyan law requires for business and tax records, and then delete them. Unpaid bookings that are cancelled can be deleted sooner. Messages about your stay are kept only as long as they are useful for your booking.
6. Your rights
Under the Data Protection Act, 2019, you can ask us to:
- tell you what information we hold about you and give you a copy;
- correct information that is wrong or incomplete;
- delete information we no longer need, or stop using it for a particular purpose;
- send your information to you, or to someone else, in a common format.
Ask by phone or WhatsApp with your booking reference. We may need to confirm who you are first. If you are not happy with our reply, you can complain to the Office of the Data Protection Commissioner at odpc.go.ke.
7. How we protect it
The website is served over an encrypted connection. Guest and payment details are visible only to the host, behind a password-protected dashboard that signs out when idle, locks out repeated failed logins and records every sign-in. Your booking page shows your booking only to someone who has its reference, and never shows your phone number or email.
9. Changes and contact
We may update this policy; the date at the top shows the latest version. Questions about your information: call +254 742 067 465 or message us on WhatsApp.