1. Who we are
Kenlife Limited is a Kenyan private limited company operating the Kenlife Resorts brand. This Privacy Policy explains how Kenlife collects, uses, stores, shares and protects personal data when you visit our website, contact us, use Shop & Book, create an account, register for an event, stay at or visit a resort, supply goods or services, apply for work, or otherwise interact with Kenlife.
General privacy contact: info@kenlife.co.ke. Finance-related correspondence may also use finance@kenlife.co.ke. Kenlife Resort Mavueni is the current flagship operating facility in Kilifi County, Kenya.
2. Scope and legal framework
Kenlife processes personal data in accordance with applicable Kenyan law, including the Data Protection Act, 2019 and its regulations. This policy is intended to operate together with any specific booking, employment, supplier, event, payment, security or consent notice presented at the point of collection.
3. Personal data we may collect
| Category | Examples |
|---|---|
| Identity and profile | Name, date of birth, customer/staff/supplier number, nationality, country, county/state/region, city, address, postal code and profile preferences. |
| Contact | Email address, telephone/WhatsApp number, emergency or corporate contact details. |
| Transactions | Orders, bookings, invoices, quotations, receipts, payment status, loyalty points, refunds, event registrations and purchase history. |
| Hospitality and service | Room or event preferences, dietary or accessibility requests, service interactions, complaints, lost-and-found records and feedback. |
| Supplier/corporate | Business name, registration/tax information, responsible person, bank/payment information, contracts, delivery and quality records. |
| Staff and applicants | Employment, attendance, leave, training, performance, certifications and authorised biometric attendance credentials or references. |
| Security and technical | Login records, device/browser data, IP address, security logs, authorised access records and, where lawfully deployed, CCTV or gate/visitor records. |
| Communications | Email, WhatsApp, SMS, contact-form messages and records of support or service conversations. |
| Marketing choices | Communication preferences, consent records, campaign interactions and cookie choices. |
4. Why we use personal data
We use personal data to create and administer accounts; process bookings, orders, events and payments; provide hospitality and customer support; manage suppliers and contracts; operate loyalty and marketing programmes; meet tax, accounting, safety, security and regulatory obligations; administer staff and recruitment; prevent fraud and misuse; maintain our systems; improve services; and establish, exercise or defend legal claims.
5. Lawful bases
Depending on the activity, processing may be necessary to perform or prepare a contract, comply with a legal obligation, protect legitimate business or security interests, protect vital interests, perform activities in the public interest where applicable, or rely on your consent. Where consent is the basis, you may withdraw it for future processing, subject to lawful retention obligations.
6. Cookies and analytics
Essential cookies support security, login, preferences and core functionality. Non-essential analytics or advertising technologies are controlled through the website cookie-choice interface where applicable. You may revisit cookie choices from the footer. Browser settings may also restrict cookies, although doing so can affect functionality.
7. Sharing and processors
Kenlife may share the minimum necessary data with payment providers, banks, mobile-money providers, booking/e-commerce platforms, communications providers, hosting/IT providers, accountants/auditors, professional advisers, delivery/logistics providers, event or service partners, government or regulatory authorities, and other processors acting under Kenlife instructions. We do not authorise external providers to use Kenlife customer data for unrelated purposes merely because they provide a service to us.
8. International transfers
Some technology, payment, communications, booking or cloud providers may process data outside Kenya. Kenlife will use appropriate safeguards, contractual controls, adequacy mechanisms or consent where required by law before cross-border transfer.
9. Data retention
We keep personal data only for as long as reasonably necessary for the purpose collected, legal/tax/accounting requirements, safety or security, contractual obligations, dispute handling and legitimate records management. When data is no longer required, we delete, erase, anonymise or pseudonymise it as appropriate. Retention periods may differ by record type.
10. Security
Kenlife uses role-based access, branch scoping, audit logs, password controls, controlled integrations, encrypted secret storage, security monitoring and other organisational and technical safeguards appropriate to the nature of the data. No online system can guarantee absolute security; suspected incidents are investigated and escalated according to applicable law and internal controls.
11. Your data rights
Subject to applicable law, you may ask to be informed about use of your data, access it, object to processing, correct inaccurate or misleading data, request deletion/erasure, restrict processing in relevant circumstances, or exercise data portability where applicable. Direct-marketing objections will be honoured for future marketing.
Requests can be sent to info@kenlife.co.ke. We may verify identity before acting. Some information cannot be deleted where Kenlife must retain it for law, tax, accounting, safety, evidence, fraud prevention or legal claims.
12. Children
Hospitality services may involve families and children. A parent, guardian or other authorised person should provide information for minors where required. Kenlife does not intentionally use children’s personal data for unrelated profiling or marketing.
13. WhatsApp, social media and third-party platforms
When you contact Kenlife through WhatsApp, social media, Google, booking platforms or other third parties, those providers may also process data under their own terms and privacy policies. Kenlife records relevant service communications in KeDOS where necessary to manage your inquiry, booking, order or support request.
14. Complaints
Please contact Kenlife first so we can investigate. You may also exercise applicable rights or lodge a complaint with Kenya’s Office of the Data Protection Commissioner in accordance with law.
15. Changes
We may update this policy when services, systems, law or processing activities change. The effective date at the top identifies the current website version.