Jaqanaz Resort (“we”, “us”, or “our”) is committed to protecting the privacy of visitors to our website and guests at our resort. This Privacy Policy explains how we collect, use, disclose, and protect personal information in accordance with applicable data protection laws in Kenya (e.g. the Data Protection Act, 2019) and other relevant legislation.

1. What information we collect

Personal identification information: name, email address, phone number, postal address.
Booking information: arrival & departure dates, type of room, number of guests, payment information.
Usage information: how you use our website (pages visited, time spent, etc.).
Cookies and tracking data: IP address, device type, browser type, operating system.

2. How we collect information

When you make a booking or enquiry via our website, email, or phone.
When you subscribe to our newsletter or promotional offers.
Automatically via cookies or similar technologies when you use our website.

3. Purposes of processing your data

We use your information to:

Process your bookings, reservations, payments;
Communicate with you (confirmation, updates, customer service);
Improve our services and website;
Send promotional offers, if you have opted in;
Comply with legal and regulatory obligations.

4. Legal basis for processing

Where applicable, we rely on:

Contract performance (to fulfill your reservation).
Legitimate interests (e.g. improving services, website analytics).
Your consent (for marketing communications, use of cookies beyond essentials).

5. Sharing your information

We may share personal information with:

Third-party service providers (payment processors, reservation platforms, marketing tools).
Our staff, agents, or contractors who need the information to perform services for us.
Legal authorities, when required by law or to protect rights or safety.

6. Data retention

We retain your personal data only for as long as necessary for the purposes for which it was collected, or as required by law.
Booking information may be retained for several years as required for accounting, audit, or legal obligations.

7. Security of your information

We employ reasonable technical and organizational measures to protect your data from unauthorized access, alteration, disclosure or destruction. However, no method of transmission over the internet or electronic storage is completely secure.

8. Your rights

Depending on applicable law, you may have rights including:

Access your personal data;
Correct inaccurate or incomplete data;
Delete data (“right to be forgotten”);
Restrict or object to processing;
Withdraw consent at any time (for marketing);
Data portability.

9. Children

We do not knowingly collect personal data from minors under 18 without parental consent.

10. Third-party links

Our website may contain links to third-party sites. We are not responsible for their privacy practices.

11. Changes to this Policy

We may update this Privacy Policy from time to time. We will post changes on this page and modify the “last updated” date.