Hously — Property management and rentals in Kenya

Hously ("we," "us," or "our") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and share your data when you use the Hously platform at hously.com (the "Platform"). By using the Platform, you consent to the practices described in this policy.

This Privacy Policy is governed by the Kenya Data Protection Act, 2019 (DPA) and any applicable regulations thereunder.

1. Information We Collect

1.1 Information You Provide Directly

When you register and use the Platform, we may collect:

Full name and contact information (email address, phone number, physical address)
Payment details (processed securely via Stripe; we do not store raw card data)
Property information (property addresses, unit details, rental amounts)
Lease information (lease terms, start and end dates, rental agreements)
Tenant information entered by property managers or landlords

1.2 Information Collected Automatically

When you access the Platform, we automatically collect certain technical data, including:

IP address and device information
Browser type and version
Pages visited, time spent, and actions taken on the Platform
Referring URLs

We collect this information using cookies and similar tracking technologies (see Section 6).

2. How We Use Your Information

We use the information we collect to:

Create and manage your account
Provide, operate, and improve the Platform and its features
Process rent payments and facilitate financial transactions via Stripe
Send you service-related communications (e.g. payment confirmations, maintenance updates)
Respond to your inquiries and provide customer support
Monitor and analyze usage to improve user experience
Detect, investigate, and prevent fraudulent or unauthorized activity
Comply with our legal obligations under Kenyan law

3. Legal Basis for Processing

Under the Kenya Data Protection Act, 2019, we process your personal data on the following lawful bases:

Contract: Processing is necessary to perform the services you have requested
Legal obligation: Processing is required to comply with applicable Kenyan laws and regulations
Legitimate interests: Processing is necessary for our legitimate business interests, such as improving the Platform and preventing fraud
Consent: Where we rely on your consent, you may withdraw it at any time by contacting us at sam@hously.com

4. How We Share Your Information

We do not sell your personal data. We share your information only in the following limited circumstances:

4.1 Stripe (Payment Processing)

We share payment-related information with Stripe to facilitate rent collection and payment processing. Stripe acts as an independent data controller for payment data and their use of your information is governed by Stripe's Privacy Policy (stripe.com/privacy).

4.2 Legal Requirements

We may disclose your information if required to do so by law, court order, or governmental authority, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred as part of that transaction. We will notify you via email or a prominent notice on the Platform before your data is transferred and becomes subject to a different privacy policy.

5. International Data Transfers

Hously may store and process your data on servers located outside Kenya, including through cloud infrastructure providers such as Amazon Web Services (AWS) or Google Cloud. Where data is transferred outside Kenya, we take appropriate measures to ensure your data remains protected in accordance with the Kenya Data Protection Act, 2019, including through contractual safeguards and data processing agreements with our service providers.

By using the Platform, you consent to the transfer of your data to servers outside Kenya for the purposes described in this Privacy Policy.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on the Platform. Cookies are small text files stored on your device that help us recognize you and remember your preferences.

6.1 Types of Cookies We Use

Essential cookies: Required for the Platform to function correctly (e.g. session management, security)
Analytics cookies: Help us understand how users interact with the Platform (e.g. pages visited, time spent). We may use tools such as Google Analytics for this purpose
Functional cookies: Remember your preferences and settings to improve your experience

6.2 Managing Cookies

You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. For more information on managing cookies, refer to your browser's help documentation.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with our services. We may also retain your data for longer periods where required by law, to resolve disputes, or to enforce our agreements.

When your data is no longer needed, we will delete or anonymize it in a secure manner.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit, access controls, and regular security reviews.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee its absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant Kenyan authorities as required by law.

9. Your Rights

Under the Kenya Data Protection Act, 2019, you have the following rights regarding your personal data:

Right of access: You may request a copy of the personal data we hold about you
Right to rectification: You may request correction of inaccurate or incomplete data
Right to erasure: You may request deletion of your personal data, subject to legal retention requirements
Right to object: You may object to certain types of processing, including direct marketing
Right to data portability: You may request your data in a structured, machine-readable format
Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at sam@hously.com. We will respond to your request within 21 days as required by Kenyan law. We may need to verify your identity before processing your request.

The Platform is not directed at or intended for use by individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have inadvertently collected data from a person under 18, we will take steps to delete it promptly.

11. Third-Party Links

The Platform may contain links to third-party websites or services. This Privacy Policy does not apply to those third-party sites. We encourage you to review the privacy policies of any third-party services you access through the Platform.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by posting the updated policy on the Platform and updating the effective date above. Your continued use of the Platform after any changes constitutes your acceptance of the revised Privacy Policy.

13. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, please contact our Data Controller at:

Hously

Email: sam@hously.com

Website: hously.com

If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Data Protection Commissioner of Kenya (www.odpc.go.ke).