Jungle Oasis ("we", "us", "our") is a boutique retreat located in Karen, Nairobi, Kenya. We are committed to protecting your privacy and handling your personal data with care, transparency and in accordance with the Kenya Data Protection Act, 2019 and, where applicable, the EU General Data Protection Regulation (GDPR) and other equivalent data protection laws in jurisdictions from which our guests visit.
This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights you have over your personal data.
1. Who We Are
The data controller responsible for your personal data is Jungle Oasis, a boutique retreat operating in Karen, Nairobi, Kenya. You can reach us at:
- Email: hello@jungleoasisnairobi.com
- WhatsApp only: +254 715 476 731 (not available on regular voice network)
- Address: Karen, Nairobi, Kenya
2. Information We Collect
2.1 Booking Information
When you submit a booking request through our website or third-party booking channels, we (or our booking partner) collect information such as your full name, email address, phone number, country of residence, travel dates, number of guests, and any special requests or preferences you share with us.
2.2 Contact Form Submissions
When you contact us via our website contact form, WhatsApp, email or phone, we collect your name, contact details and the content of your message so we can respond to you.
2.3 Cookies & Similar Technologies
Our website uses cookies and similar technologies to make the site work, remember your preferences and understand how visitors interact with our content. You can control cookies through your browser settings. Where required by law, we will ask for your consent before setting non-essential cookies.
2.4 Google Analytics
We may use Google Analytics to understand how visitors use our site (pages viewed, time on page, device type, approximate location). Google Analytics uses cookies and processes data such as your IP address (which is typically truncated). See Google's Privacy Policy.
2.5 Google Tag Manager
We use Google Tag Manager to manage tracking tags on our website. Google Tag Manager itself does not collect personal data but it enables the deployment of other tags that may.
2.6 Microsoft Clarity
Where enabled, we use Microsoft Clarity to capture how visitors interact with our website through behavioural metrics, heatmaps and session recordings. This helps us improve the website. Clarity data is processed by Microsoft in accordance with its Privacy Statement.
2.7 Lodgify Integration
Bookings, availability and guest communications may be processed through Lodgify, our property management and booking system provider. When you submit a booking request, the information you provide is transmitted to Lodgify to check availability, generate quotes and manage your reservation. Lodgify processes your data in accordance with its own privacy policy.
2.8 Payment Information
We do not store full payment card details on our servers. Payments (including M-Pesa, card and bank transfer) are processed by regulated third-party payment providers. We only receive confirmation of payment status and limited transaction reference data necessary to reconcile your booking.
3. How We Use Your Information
- To respond to booking enquiries and confirm reservations.
- To provide accommodation, services and hospitality during your stay.
- To process payments and issue receipts or invoices.
- To communicate with you about your stay, arrival details and check-in instructions.
- To comply with legal, tax and regulatory obligations in Kenya.
- To improve our website, services and guest experience.
- With your consent, to send you occasional updates, offers or newsletters.
4. Legal Basis for Processing (GDPR)
Where GDPR applies, we rely on the following legal bases:
- Contract — to fulfil your booking and stay.
- Legal obligation — for tax, accounting and regulatory compliance.
- Legitimate interests — to run and improve our business and website.
- Consent — for non-essential cookies and marketing communications.
5. Third-Party Services
We share personal data only with trusted service providers who help us operate, including:
- Lodgify (booking and property management)
- Payment processors (including M-Pesa via Safaricom, and card / bank providers)
- Google (Analytics, Tag Manager, Workspace email)
- Microsoft (Clarity, where enabled)
- Website hosting and infrastructure providers
- Professional advisors (accountants, lawyers) where necessary
- Government or regulatory authorities where required by law
6. International Data Transfers
Some of the service providers listed above are based outside of Kenya (including in the European Union and the United States). Where we transfer your personal data outside Kenya or the European Economic Area, we take reasonable steps to ensure it receives an adequate level of protection, including through contractual safeguards such as Standard Contractual Clauses or equivalent mechanisms recognised under the Kenya Data Protection Act and GDPR.
7. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes described in this policy, including to satisfy any legal, accounting or reporting requirements.
- Booking and guest records: retained for at least 7 years for tax and accounting purposes under Kenyan law.
- Contact enquiries: retained for up to 24 months from last contact.
- Marketing consents: retained until you withdraw consent.
- Website analytics: retained in aggregated form according to the provider's default settings.
8. Your Rights
Subject to applicable law, you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate or incomplete data.
- Request deletion of your data (right to be forgotten), where applicable.
- Object to or restrict certain processing.
- Withdraw consent at any time where processing is based on consent.
- Request portability of your data in a machine-readable format.
- Lodge a complaint with the Office of the Data Protection Commissioner (Kenya) or your local supervisory authority in the EU/EEA.
To exercise any of these rights, please email us at hello@jungleoasisnairobi.com. We will respond within the timeframes required by applicable law.
9. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
10. Children's Privacy
Our website is not directed at children under 18. We do not knowingly collect personal data from children without parental consent. Bookings for minors must be made by a responsible adult.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with a new "Last updated" date.
12. Contact Us
For any privacy questions, requests or complaints, please contact:
- Email: hello@jungleoasisnairobi.com
- WhatsApp only: +254 715 476 731 (not available on regular voice network)
- Address: Karen, Nairobi, Kenya