Privacy Policy

1. Who we are

Curated Lofts ("we", "us", "our") operates a network of serviced apartments in Nairobi, Kenya and the website at curatedlofts.com. This policy explains what personal information we collect from guests and site visitors, why we collect it, and the choices you have. If you have questions, email us at bookings@curatedlofts.com.

2. Information we collect

• Account details — your name, email address, phone number, and password hash when you create an account or sign in with Google.
• Booking details — check-in and check-out dates, guest count, apartment selected, special requests, and messages you exchange with our team.
• Payment details — card information is entered directly with our payment processor; we store only the transaction reference and amount, never full card numbers.
• Device and usage — IP address, browser type, pages viewed, and referring URL, collected through cookies and server logs.

3. How we use your information

• Confirm and manage your bookings, including sending arrival instructions and receipts.
• Respond to enquiries you send through our contact form, email, or WhatsApp.
• Prevent fraud, enforce our house rules, and comply with legal obligations.
• Improve our website, apartments, and guest experience through aggregated analytics.
• Send occasional service updates. We only send marketing emails if you opt in, and every message includes an unsubscribe link.

4. Who we share it with

We share information only with service providers who help us run Curated Lofts: our hosting and database provider, our payment processor, email delivery services, and analytics tools. These providers may only use the data on our behalf and under written agreements. We do not sell your personal information. We may disclose information when required by Kenyan law, a valid court order, or to protect the safety of our guests and staff.

5. How long we keep it

We retain booking records for seven years to meet Kenyan tax and accounting requirements. Account and marketing data is kept while your account is active and deleted within 90 days of a verified deletion request. Server logs are rotated after 30 days.

6. Your rights

Under the Kenya Data Protection Act, 2019 you can request a copy of the personal data we hold about you, ask us to correct or delete it, object to certain uses, or withdraw consent for marketing at any time. Email bookings@curatedlofts.com and we will respond within 30 days. You may also lodge a complaint with the Office of the Data Protection Commissioner of Kenya.

7. Cookies

We use strictly necessary cookies to keep you signed in and to remember your booking selections, and privacy-respecting analytics cookies to understand which pages are useful. You can block cookies in your browser settings; some site features may not work without them.

8. Security

Data is transmitted over HTTPS and stored on managed infrastructure with encryption at rest, role-based access, and regular backups. No system is perfectly secure — if we ever detect a breach that affects your data we will notify you and the Data Protection Commissioner as required by law.

9. Changes to this policy

We may update this policy as our services evolve. The "Last updated" date at the top of the page always reflects the current version, and material changes will be announced by email or a prominent notice on the site.

10. Contact us

Curated Lofts · Westlands, Nairobi, Kenya · bookings@curatedlofts.com · +254 798 718 252.