Privacy Policy
Effective date: 16 July 2026
M.Zahir Properties ("we", "us") respects your privacy. This policy explains what personal data we collect through mzahirproperties.com, why we collect it, and the choices you have. We operate in Kenya and handle personal data in accordance with the Data Protection Act, 2019.
What we collect
- Enquiry details you send us. When you submit the contact form or a property enquiry, we collect your name, email address, phone number (optional), your message, and the property you asked about.
- Communication records. If you contact us by phone, WhatsApp, or email, we keep a record of that correspondence.
- Technical data. Our hosting providers automatically log IP addresses and basic request information for security and abuse prevention (for example, limiting how often forms can be submitted).
We do not run advertising trackers or sell personal data — to anyone, ever.
Why we use it
- To respond to your enquiry and help you buy, sell, rent, or let a property;
- To manage our client relationships, including keeping internal notes on enquiries;
- To send you email about your enquiry (we do not send marketing email without your consent);
- To protect the website against spam and abuse.
Who processes it for us
We use a small number of reputable service providers to run this website. They process data only on our instructions:
- Supabase — secure database hosting for enquiries and website content;
- Vercel — website hosting and content delivery;
- Resend — delivery of our transactional email;
- Upstash — short-lived, IP-based counters used solely for spam prevention.
Some of these providers store data on servers outside Kenya (including the European Union and the United States) with appropriate safeguards in place.
Property pages may embed video or virtual tours from YouTube, Matterport, or similar providers, and our contact page may embed a Google map. These load content from those companies' servers — YouTube videos load only after you press play. Their own privacy policies apply to what they collect. Choosing to message us on WhatsApp is subject to WhatsApp's terms and privacy policy.
How long we keep it
We keep enquiry records for as long as needed to serve you and to meet our legal and business record-keeping obligations, after which they are deleted. You may ask us to delete your enquiry data earlier (see below).
Your rights
Under the Data Protection Act, 2019 you have the right to be informed about how your data is used, to access the data we hold about you, to have inaccurate data corrected, to object to processing, and to request deletion. To exercise any of these rights, contact us at info@mzahirproperties.com or +254 722 587 400. You also have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) of Kenya.
Security
All traffic to this website is encrypted (HTTPS). Enquiry data is stored in an access-controlled database that only authorised staff can view, protected by multi-factor authentication.
Changes
If we change this policy, the updated version will be published on this page with a new effective date.