YOUR DETAILS, YOUR RIGHTS
How we use your information.
This notice explains what Nyumba Group collects when you book a visit or register interest on this website, why we collect it, and the choices you have. We process personal data in line with Kenya’s Data Protection Act, 2019.
Last updated 29 October 2026
Who we are
Nyumba Group is responsible for (the “data controller” of) the information collected on this website. It is used to arrange visits to Sahajanand Special School, Galana Farm and the Kibarani Feeding center.
What we collect
- Booking details: your full name, phone number, and, if you provide them, your email address and organization.
- Visit details: destination, date and time, number of attendees, whether you requested transport, and for Galana Farm whether you requested an overnight stay.
- Interest registrations: for places not yet open for booking, your name, phone number, optional email address and organization, the place, your preferred visit date and number of attendees.
- Feedback: if you answer our post-visit feedback request, whether you attended, your rating and any comments. Feedback is linked to your booking.
- Technical data: our web server records IP addresses and request details in standard logs for security and troubleshooting.
We do not ask for ID numbers, payment details or sensitive personal data. Please do not include such information in free-text fields.
Why we use it
- To register your visit and send you a booking confirmation by email or SMS.
- To let the destination team prepare for your visit, contact you about it, and arrange transport or accommodation you request.
- To understand how much interest there is in places not yet open for booking, and to contact you if visits there reopen.
- To invite you to give feedback after your visit and use it to improve future visits.
- To keep the website secure and working.
We use your information because it is needed to arrange the visit you asked for, and for our legitimate interest in improving visits and keeping the site secure. We do not sell your information or use it for marketing.
Who we share it with
- Destination teams at the place you are visiting, who receive your booking details by email and SMS. Interest registrations are shared only with Nyumba Group managers.
- Google Cloud, which hosts this website and its database in Johannesburg, South Africa.
- Resend, which delivers our booking and feedback emails and may process email data in the United States.
- Africa’s Talking, which delivers our booking SMS messages.
These providers act on our instructions and are bound by contractual data protection terms. Because some of them process data outside Kenya, we rely on those safeguards for transfers, as the Data Protection Act requires. We may also disclose information where the law requires it.
Cookies
This website uses only a strictly necessary session cookie, which protects the booking form from misuse. We do not use analytics, advertising or tracking cookies. The “Open in Google Maps” link takes you to Google’s website, which has its own privacy policy.
How we protect it
The website uses encrypted HTTPS connections. Booking data is stored in a private database that is not reachable from the web, and only authorized staff can view it.
Your rights
Under the Data Protection Act, 2019, you have the right to:
- be informed about how your data is used;
- access the personal data we hold about you;
- ask us to correct inaccurate data or delete data we no longer need;
- object to our use of your data.
To make a request, contact the destination team listed in your booking confirmation and quote your booking reference. We may need to confirm your identity before acting on a request.
If you are unhappy with how we handle your information, you can complain to the Office of the Data Protection Commissioner.
Children
Visits should be booked by an adult. If you book for a group that includes children, we only record the number of attendees, not their names.