Privacy Policy

1. Data We Collect

When you book with Shammy Homes, we collect essential personal data to facilitate your stay. This includes:

• Identity Data: Full name, phone number, email address, and copies of government-issued ID.
• Transaction Data: Booking dates, payment amounts, and billing addresses. (Note: Card numbers and M-Pesa PINs are handled securely by Paystack; we do not see or store this information).
• Communication Data: Chat history via WhatsApp, email, or our internal messaging system.

2. How We Use Your Data

We strictly use your data to:

• Process your booking and confirm your payment.
• Send check-in instructions, gate access codes, and receipts via WhatsApp and email.
• Verify your identity for building security protocols.
• Retain a guest ledger for future direct-booking discounts (Repeat Guest Program).

3. Data Sharing & Third Parties

We do not sell your personal data. We only share data with essential infrastructure partners to operate our business:

• Paystack: To process secure payments.
• Airbnb iCal: Calendar sync to coordinate availability between our direct booking site and Airbnb listings.
• Building Management: Security desks require guest names and ID numbers to grant physical access to the premises.
• Google & Meta: If you consent to analytics and advertising cookies (see Section 4), we share usage and conversion data with Google (Google Analytics & Google Ads) and Meta (Facebook Pixel) so we can measure website performance and show relevant ads. This data may include your IP address, device and browser information, pages viewed, and booking value. We never share your name, ID, phone number, or payment details with these platforms.

4. Web Tracking & Marketing Communications

• Strictly necessary cookies & storage: Our website uses strictly necessary cookies to maintain secure admin sessions. We also store your currency preference, booking selections, and your cookie-consent choice in your browser's local storage so your choices persist across pages. These are always active and cannot be switched off.
• Analytics & advertising cookies: We use Google Analytics 4, Google Ads, and the Meta (Facebook) Pixel to understand how visitors use the site, measure which channels lead to bookings, and show relevant ads to people who have visited us ("retargeting"). These set cookies and share usage data with Google and Meta as described in Section 3.
• Your choice (opt-out): When you first visit, a banner lets you accept or decline analytics and advertising cookies. You may decline at any time; declining immediately stops these cookies from collecting further data via Google Consent Mode and the Meta Pixel consent controls. To change a previous choice, clear this site's data in your browser (which re-shows the banner) or adjust your browser's cookie settings. Strictly necessary cookies remain active regardless of this choice. You can also opt out of Google Analytics across all sites using Google's browser add-on.
• Marketing: If you book with us, we may occasionally email or WhatsApp you exclusive discounts for future stays. You retain the absolute right to opt out of marketing communications at any time by replying "STOP" or clicking the unsubscribe link in our emails. Opting out will not affect our ability to send you critical, transaction-specific updates regarding an active booking.

5. Data Security & Retention

Your data is stored securely on encrypted databases. We retain booking and financial records for up to 7 years to comply with Kenya Revenue Authority (KRA) tax laws.

6. Your Rights

Under the Kenya Data Protection Act, 2019, you have the right to request access to the personal data we hold about you, or request its deletion (excluding data we are legally required to keep for tax or security purposes). To exercise these rights, contact us at shammy@shammyhomes.com.