Draft prepared: 3 November 2026
1. Who we are
SmartMarket Real Estate Co. Ltd operates the SmartMarket public website and property enquiry services. You can contact the company at info@smartmarketrealestate.co.ke or 0743 563 503.
2. Information this website may collect
Depending on how you use the website, information you provide may include your name, username, email address, phone number, account details, property preferences, enquiry or contact message, and files or profile information you choose to submit. The website also uses session and login cookies to support account access and security.
3. How information is used
Information is used to create and maintain accounts, respond to questions and property enquiries, coordinate requested services, operate and secure the website, and meet applicable business or legal obligations.
4. When information may be shared
Information may be available to authorised SmartMarket staff who need it to respond to an enquiry or provide a requested service. Where needed for those purposes, relevant enquiry details may be shared with a property owner, landlord, agent, or service provider involved in the enquiry. Information may also be disclosed where required by law.
5. Retention and security
Personal information should be kept only for as long as needed for its stated purpose and handled using appropriate safeguards. The company must confirm its actual retention periods, hosting and email providers, and any international data-storage arrangements before this draft is approved.
6. Your data protection rights
Kenya’s Data Protection Act, 2019 provides data subject rights, including the right to be informed, access personal data, object to processing, request correction, and request deletion in applicable circumstances. To raise a request with SmartMarket, use the contact details above. You may also contact the Office of the Data Protection Commissioner. See its data subject rights information.
7. Changes to this policy
When approved, the published policy should show its effective date and be updated when the website’s data practices materially change.
Management review items
- Confirm the legal controller name, postal or physical address, and privacy contact.
- Confirm the lawful bases, exact retention periods, hosting and email processors, and where data is stored.
- Confirm whether direct marketing, analytics, or additional third-party tools are used.
Reference: Office of the Data Protection Commissioner — Kenya data protection laws.