Privacy Policy
Last updated: April 1, 2026
1. Introduction
Midnight Estates ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and mobile app (collectively, the "Service"). This policy complies with the Kenya Data Protection Act, 2019, and applicable international privacy standards.
2. Information we collect
We collect information you provide directly (name, email, phone, address, payment details, ID documents for verification), information generated by your use of the Service (search history, saved properties, messages, device and browser data, IP address, approximate location), and information from third parties (social login providers, payment processors, identity verification partners).
3. How we use your information
We use your information to: create and manage your account; match you with relevant property listings and agents; process payments and issue receipts; verify identities and prevent fraud; communicate updates, service notices, and — with consent — marketing; improve our Service through analytics; and comply with legal obligations.
4. Sharing your information
We share information only as needed: with agents or companies you explicitly contact through the Service; with payment, identity, and cloud infrastructure providers under strict confidentiality; with law enforcement when legally compelled; and in the event of a merger or acquisition, subject to equivalent privacy commitments. We never sell your personal data.
5. Cookies and tracking
We use cookies and similar technologies to keep you signed in, remember your preferences, measure engagement, and deliver relevant content. You can control cookies through your browser settings, though disabling them may affect parts of the Service.
6. Data retention
We keep your personal data only for as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Inactive accounts are typically archived after 24 months and deleted after 36 months unless retention is legally required.
7. Your rights
Under the Kenya Data Protection Act you have the right to: access the data we hold about you; correct inaccurate data; request deletion of your data; object to processing; withdraw consent for marketing; request a copy of your data in a portable format; and lodge a complaint with the Office of the Data Protection Commissioner. To exercise these rights, contact us using the details below.
8. Security
We apply administrative, technical, and physical safeguards to protect your information, including encryption in transit, restricted access controls, and regular security reviews. No system is 100% secure — if we discover a breach that affects you, we will notify you and the relevant authorities without undue delay.
9. Children
The Service is not directed to anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it promptly.
10. International transfers
Your information may be processed on servers located outside Kenya. When we transfer data internationally, we rely on appropriate safeguards such as contractual clauses and ensure the receiving country offers adequate protection.
11. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be communicated through the Service or by email at least 14 days before they take effect. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.
12. Contact
Questions, requests, or complaints about this policy can be directed to our Data Protection Officer at info@midnightestates.com.