Privacy

Avora Executive Homes, of Altura, Upper Hill, Nairobi, Kenya, is the data controller for the information described here. Questions or requests go to stays@avoraexecutivehomes.com, or you can reach a person through the contact page.

We handle your information under Kenya’s Data Protection Act 2019. If you would like our registration details with the Office of the Data Protection Commissioner, ask and we will send them.

Only what a booking actually needs:

Your name

So we know who is arriving

Email address

To send your confirmation and reach you about the stay

Phone number

Optional. Used for WhatsApp on the day of arrival

Country

Optional. Helps us plan arrivals and airport transfers

Your dates and party size

To hold the apartment and price the stay

Anything you write to us

The note on the booking form, if you use it

Marketing preference

Only if you tick the box

We also keep a record of each booking’s status changes, of the emails we send you about it, and of payment being collected on arrival. For security we store a one-way hash of the network address a booking request came from, so the form cannot be flooded. That hash cannot be turned back into an address.

We do not ask for card details, and none are stored — you pay in person when you arrive.

Two, both strictly functional. There is no analytics, advertising or tracking on this site.

avora_booking

Lets your browser reopen the booking you just made without retyping your email. 60 days.

avora_admin

Signs our own staff into the booking console. 12 hours.

Because we are performing the booking contract you asked us to make, and because we have a legitimate interest in keeping the apartment from being double-booked and the booking form from being abused. Marketing email is sent only on consent, and you can withdraw it at any time.

• Amazon Web Services — hosting, the database and the email that carries your confirmation. Data is held in the eu-north-1 region, which is Stockholm, Sweden.
• Nobody else. We do not sell personal information, and we do not list the apartment on booking platforms, so nothing is passed to one.

Because that hosting is outside Kenya, your information is transferred abroad. Under section 48 of the Data Protection Act 2019 we do this on the basis that the transfer is necessary to perform the contract between us — you cannot be sent a booking confirmation without your booking being stored and your email being sent. Amazon Web Services holds the data under its own contractual data-protection terms, and Sweden is subject to the European Union’s data-protection regime.

Booking records

7 years, which is what Kenyan tax law requires

Enquiries that never became a booking

12 months, then deleted

Email delivery records

24 months, so we can show what was sent

Marketing consent

Until you withdraw it

Anti-abuse hashes

24 hours

Under the Data Protection Act 2019 you may ask us for a copy of what we hold, ask us to correct it, ask us to delete it, object to how we use it, or ask us to stop sending marketing. Write to stays@avoraexecutivehomes.com and we will reply within 30 days. There is no charge, and we will not ask why.

Some of it you can do yourself: signing in to your account shows the bookings we hold for you. Ask us and we will delete an account outright — though we have to keep the booking records themselves for as long as tax law requires.

If you think we have got it wrong, you can complain to the Office of the Data Protection Commissioner in Nairobi. We would rather you told us first.

If this page changes materially we will say so here and update the date at the top. The booking terms are separate.