Gilfro Homes · Effective October 2026
Global Privacy Policy
Aligned with GDPR, UK GDPR, the Kenya Data Protection Act 2019 and CCPA/CPRA. We follow data minimisation, purpose limitation, transparency and security.
1. What we collect
Identity: name, phone, email and, for verification, ID or passport details.
Search: city, filters, saved homes and viewing history.
Tenancy: applications, move-in dates, repairs, payment references and vacate notices.
Landlord and agent: proof of ownership or mandate, licences and property locations.
Technical: device, browser, IP address and error logs.
2. Why we use it
To deliver the service you ask for (bookings, applications, tenancy tools), to meet legal duties, to prevent fraud and keep the platform secure, and — only with your consent — for optional offers and surveys.
3. We never sell your data
Gilfro Homes does not sell, rent or trade your personal data to advertisers, data brokers, telemarketers or debt collectors.
Sponsored offers are shown inside the app based on the page you are on. Partners never receive your details unless you choose to contact them.
4. Who sees your information
When you book or apply for a unit, your details go only to the verified landlord or agent of that property and the on-site contact needed for gate access.
Service providers that host our systems process data only on our instructions.
5. International transfers and security
Data may be processed in other countries under Standard Contractual Clauses, adequacy decisions or equivalent safeguards.
Data is encrypted in transit and at rest, and access is restricted so people only see records they are entitled to.
6. How long we keep it
Account data is kept while your account is active. Tenancy and audit records are kept up to 7 years for legal and tax purposes. Old viewing bookings are archived or anonymised after 6 months.
7. Your rights
Wherever you live you can: access a copy of your data, correct it, ask for deletion, object to marketing or profiling, and receive your rental history in a portable format.
Use the request form below or email privacy@gilfro.co.ke. You may also complain to your local data protection authority (e.g. ODPC in Kenya, ICO in the UK).
Accept the policies
Sign in to record your acceptance.
Submit a request
Questions, privacy rights requests, or reports of scams and rule breaking.