1. Introduction

This Privacy Policy explains how Benvar Estates Limited, the developer of Herencia (“we”, “our”, or “us”), collects, uses, stores, and protects personal data obtained through the Herencia website. We are committed to safeguarding your privacy and ensuring that all personal data is handled in accordance with the Data Protection Act, 2019 and the Data Protection (General) Regulations, 2021. By accessing or using this website, you acknowledge that you have read and understood this Privacy Policy.

2. Collection of Personal Data

We collect personal data directly from you when you voluntarily interact with the website. This may occur when you submit an enquiry, request further information, book a site visit, subscribe to updates, or otherwise communicate with us through the website. The personal data collected may include your name, telephone number, email address, location or area of interest, and any additional information you choose to provide. We do not knowingly collect personal data from children.

3. Purpose of Processing

Personal data collected through the Herencia website is processed for legitimate and clearly defined purposes. These include responding to enquiries, providing information about Herencia and related developments, arranging site visits, managing follow-up communication, and sharing updates or promotional material where consent has been given. We may also use aggregated or anonymised data to improve our services and better understand customer needs.

4. Lawful Basis for Processing

We process personal data on lawful grounds recognised under Kenyan data protection law. In most cases, processing is based on your consent, which is freely given when you submit your information through the website. In certain circumstances, processing may also be necessary for our legitimate interests, such as responding to enquiries or managing prospective customer relationships, provided that such interests do not override your rights and freedoms. Where required, we may also process personal data to comply with legal or regulatory obligations. You retain the right to withdraw consent at any time.

5. Marketing Communications

Where personal data is used for marketing or promotional communication, this will only be done in accordance with the law. You will be informed at the point of data collection if your information is intended to be used for marketing purposes. You may opt out of receiving marketing communications at any time through the provided opt-out mechanisms or by contacting us directly. We do not engage in unsolicited marketing.

6. Sharing of Personal Data

We do not sell, rent, or trade personal data. Personal data may only be shared with authorised employees, agents, or professional service providers who require the information to perform their duties in relation to Herencia. Any such third parties are bound by confidentiality obligations and are required to process personal data in compliance with applicable data protection laws.

7. Data Retention

Personal data is retained only for as long as is reasonably necessary to fulfil the purpose for which it was collected or to meet legal and regulatory requirements. Once personal data is no longer required, it is securely deleted, anonymised, or otherwise rendered inaccessible.

8. Data Security

We have put in place appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. While no system can guarantee absolute security, we take reasonable steps to ensure that personal data is handled securely and responsibly.

9. Rights of Data Subjects

As a data subject, you have rights under Kenyan data protection law. These include the right to be informed about how your personal data is used, the right to access your personal data, the right to request correction of inaccurate or misleading information, the right to object to or restrict processing, and the right to request deletion of personal data where applicable. You may also withdraw consent to processing at any time. Requests relating to these rights will be handled in accordance with the law.

10. Contact and Complaints

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, you may contact us using the details provided on the website.

11. Updates to This Policy

This Privacy Policy may be updated from time to time to reflect changes in legal requirements, operational practices, or website functionality. Any updates will be published on this website, and continued use of the website constitutes acceptance of the revised policy.