Privacy policy
Wilpum Investments Limited is the data controller for personal data processed through Wilpum Investments Ltd. This policy explains what we collect, why, and what you can do about it.
What we collect
- Account data: your name, email address, phone number and password hash.
- Verification data: for landlords, the ownership or management documents you submit and the identity details we match them against.
- Listing data: the properties, photographs, pricing and availability you publish.
- Activity data: searches, saved properties, enquiries, viewing requests and reviews.
- Technical data: IP address, device and browser information, and pages visited.
- Communications: messages sent through the platform, and correspondence with our support team.
Why we process it
- To provide the service: showing you listings, delivering your messages, booking your viewings.
- To verify landlords, which is the basis of the platform’s trust model.
- To take payment for subscriptions and to meet accounting obligations.
- To keep the platform safe: detecting fraud, fake listings and abuse.
- To improve the product, using aggregated and de-identified activity data.
- To send service messages, and marketing only where you have opted in.
Who we share it with
We do not sell personal data. We share it with processors who run parts of the service on our behalf (hosting, payment processing, email delivery, mapping and analytics) under contracts limiting them to our instructions. When you enquire about a property, the landlord receives the details necessary to respond to you. We disclose data to authorities where the law requires it.
How long we keep it
Account data is kept while your account is open and for a reasonable period afterwards. Verification documents are retained only as long as needed to evidence a check and to meet legal obligations. Messages and viewing records are kept as a record of dealings between users. Aggregated statistics may be kept indefinitely, as they no longer identify anyone.
Your rights
- Access a copy of the personal data we hold about you.
- Correct data that is inaccurate or incomplete.
- Delete your account and the data attached to it, subject to legal retention.
- Object to or restrict processing, including opting out of marketing at any time.
- Receive your data in a portable, machine-readable format.
- Complain to the data protection regulator in Kenya.
Cookies
We use cookies that are strictly necessary to sign you in and keep your session secure, and, with your consent, analytics cookies that tell us which parts of the product are used. You can withdraw consent at any time from your account settings or your browser.
Security
Data is encrypted in transit, passwords are hashed, access to production data is restricted to staff who need it, and administrative actions are recorded in an audit log. No system is perfectly secure, and we will notify you and the regulator of any breach affecting your rights within the period the law requires.
Contact
Privacy questions and rights requests go to info@wilpum.com, or write to Nairobi, Kenya.