Privacy Policy

1. Information We Collect

Taartu Homes collects information you provide directly to us, including:

• Name, email address, and phone number
• Property and unit information
• Payment transaction records
• Communication preferences

2. Lawful Basis for Processing

Under the Kenya Data Protection Act, 2019, we process your personal data based on one or more of the following lawful bases:

• Contractual Necessity: Processing required to perform our services to you (property management, payment processing, tenant communications)
• Consent: Where you have given explicit consent for specific processing activities (marketing communications, optional features)
• Legal Obligation: Processing required to comply with Kenyan law, including KRA tax reporting requirements and anti-money laundering regulations
• Legitimate Interests: Processing necessary for our legitimate business interests, such as fraud prevention, service improvement, and security monitoring

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process rent payments via M-Pesa and other methods
• Send you notifications about your account and properties
• Generate reports for tax compliance (KRA)

4. Third-Party Payment Processors

We work with trusted third-party payment processors to handle your financial transactions securely:

• Safaricom M-Pesa (Daraja API): For mobile money payments. Safaricom processes your phone number and payment amount to facilitate rent collection. Payments go directly to landlord PayBill/Till numbers—Taartu never holds your rent funds.
• Paystack: For card payments. Paystack securely processes card details in compliance with PCI-DSS standards. We do not store your full card number; only transaction references.

These processors have their own privacy policies and are independently regulated. We share only the minimum data required for transaction processing.

5. Data Security

We implement industry-standard security measures including 256-bit SSL encryption to protect your personal information. Your payment data is processed securely through Safaricom's M-Pesa and Paystack platforms.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide you services. Specific retention periods are as follows:

7. Your Rights Under Kenya Data Protection Act 2019

In accordance with the Kenya Data Protection Act, 2019, you have the following rights regarding your personal data:

• Right of Access: Request and receive a copy of your personal information
• Right to Rectification: Correct any inaccurate or incomplete data
• Right to Erasure: Request deletion of your data (subject to legal retention requirements)
• Right to Data Portability: Export your data in a commonly used format
• Right to Object: Object to processing of your personal data for direct marketing
• Right to Restrict Processing: Request limitation on how we use your data

To exercise any of these rights, contact our Data Protection Officer at dpo@taartuhomes.com. We will respond to your request within 30 days as required by law.

8. Data Controller

The data controller for your personal information is:

TAARTUSTREETS TECHNOLOGIES LIMITED
Westlands, Nairobi, Kenya
Email: dpo@taartuhomes.com

We are registered with the Office of the Data Protection Commissioner (ODPC) in compliance with the Kenya Data Protection Act, 2019.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Data Protection Officer: dpo@taartuhomes.com
General Inquiries: privacy@taartuhomes.com
Address: Westlands, Nairobi, Kenya
Phone: +254 118 077 071