Amua Leo Properties LTD (“Amua Leo”, “we”, “us”) sells land on Kenya’s Coast. This policy explains what personal data we collect through our website, our client and field apps, phone, WhatsApp, SMS and email, why we collect it, who we share it with and the rights you have under the Data Protection Act, 2019 of Kenya. Amua Leo is the data controller for this data.
Who to contact
For any question about your data, or to exercise any of your rights, write to hello@amualeo.co.ke. We reply within 7 days and complete a request within 30 days.
What we collect
- When you enquire or book a site visit: your name, phone or WhatsApp number, email address (optional), the estate you are interested in, your preferred date and visit type, and the consent you gave.
- When you buy: your national ID or passport details, KRA PIN, postal and physical address, next of kin where the sale agreement requires it, the plots you buy, your payment plan, payments and receipts, and the documents of your sale.
- When you use our apps: your account details, the device’s notification token, and a record of your sign-ins.
- When you call or message us: the number, the time and duration of calls, and the messages you send us, so an advisor can follow up.
- On this website: your currency choice (KES or USD), stored in your own browser. We do not use advertising or analytics cookies on this website at present; if we add them, this policy will say so first.
Why we use it, and on what basis
- To answer your enquiry and arrange your site visit — your consent, given on the form.
- To prepare your offer letter and sale agreement, take and receipt your payments, and transfer your title — the contract with you.
- To keep accounting and tax records and meet anti-money-laundering duties — legal obligation.
- To send reminders of instalments that fall due — the contract; and updates about new estates — your consent, which you can withdraw at any time.
Who we share it with
We never sell your data. We share only what each service needs to do its job for us:
- Our hosting provider (DigitalOcean, servers in Frankfurt, Germany) where our systems and records are kept.
- Email (Zoho ZeptoMail), SMS and voice (Africa’s Talking) and WhatsApp (Meta) — to send you the messages you asked for or that your purchase needs.
- M-Pesa (Safaricom) — to receive and confirm your payments.
- Advocates, surveyors and the land registry — to prepare your agreement and transfer your title.
- Authorities, where the law requires it.
Where data leaves Kenya (our hosting in Germany), we rely on the safeguards the Act requires, including the provider’s data processing terms.
How long we keep it
Enquiries that do not lead to a purchase: up to 24 months after our last contact, then deleted. Buyers’ sale, payment and title records: for as long as the law requires us to keep accounting and tax records (at least 7 years after the sale is completed). App accounts: until you ask us to delete them, subject to the records we must keep.
Your rights
You may ask to be told what data we hold about you and to receive a copy, to correct it, to delete it, to object to or restrict its use, and to withdraw a consent you gave. To stop marketing messages, reply STOP on WhatsApp or SMS, or write to us. To delete your app account and data, see Delete your data, or write to hello@amualeo.co.ke.
If you are not satisfied with our answer, you may complain to the Office of the Data Protection Commissioner (odpc.go.ke).
Security
Our systems are reached only over encrypted connections, staff access is limited to what each role needs and is logged, and passwords are never stored in readable form. Payments go only to the company’s M-Pesa paybill or bank account — nobody at Amua Leo is authorised to receive payment to a personal number.
Children
Our services are for adults. We do not knowingly collect data from anyone under 18.
Changes
When we change this policy we update the date at the top. Significant changes are announced on this website before they take effect.