Privacy Policy

This policy explains how Biashara Continent ("we", "us") collects, uses and protects information across our public website, the tenant portal, and the staff dashboard used by property managers. It applies to visitors, tenants and staff users alike, with the specific differences noted below.

1. Information we collect

From tenants: full name, email, phone number, national ID number (used as your tenant portal sign-in), occupation, next of kin details, lease dates, the room and apartment you're assigned to, and records of the payments you make — amount, method, reference number and date.

From staff and property managers: name, email and phone number, login credentials, assigned role and permissions, and a log of actions taken in the dashboard for audit purposes.

From all visitors: standard technical data such as your browser type and the pages you visit, generated automatically by any website.

2. Why we collect it

• To identify tenants when they sign in to the tenant portal.
• To process and confirm rent payments, and to issue receipts.
• To let property managers track apartments, tenants, rent and maintenance requests.
• To contact tenants or staff about their account, a payment, or a maintenance request.
• To meet our own accounting, legal and regulatory obligations.

3. Payments and other third parties

We don't store your M-Pesa PIN or full card details. Payments are processed directly by:

• Safaricom M-Pesa (Daraja API) — for M-Pesa STK Push payments.
• Paystack — for card payments.

These providers process the payment details you give them directly and return only a confirmation and reference number to us.

4. Cookies

We use only the essential cookies needed to keep you signed in (a session cookie) and to protect forms from cross-site attacks (a CSRF token). We don't use advertising or analytics cookies. Fonts and styling are loaded from Google Fonts and a Tailwind CSS CDN, which — like any external resource — will see the request come from your browser and IP address when the page loads.

5. How long we keep information

We keep tenant and payment records for as long as your tenancy is active, and afterwards for as long as we're required to for accounting and legal purposes. Staff account data is kept for as long as the account is active, plus a reasonable period for audit purposes.

6. How we protect it

Access to tenant and payment data in the staff dashboard is restricted by role and permission. Passwords are stored using industry-standard hashing, and sensitive API credentials are encrypted at rest. No system is completely immune to risk, but we take reasonable technical and organisational steps to protect your information.

7. Your rights

If you're in Kenya, the Data Protection Act, 2019 gives you the right to access, correct, or request deletion of your personal data, to object to how it's processed, and to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) if you believe your rights have been breached.

If you're in the European Economic Area or UK, the GDPR gives you the equivalent rights of access, rectification, erasure, restriction, objection and data portability, and the right to lodge a complaint with your local supervisory authority.

To exercise any of these rights, contact us using the details below.

8. Children

Our services are intended for adults entering into or managing a tenancy, and are not directed at children.

9. Changes to this policy

We may update this policy from time to time. We'll update the "last updated" date above when we do.

10. Contact us

Questions about this policy, or a request relating to your data, can be sent to admin@gmail.com or by phone on 0701097012 .