Privacy notice
Lemawasi Hotel (“we”, “us”) respects your privacy and handles personal data in line with Kenya’s Data Protection Act, 2019. This notice explains what we collect through this website, why, and the choices you have.
What we collect
- When you book: your name, email address and phone number, the dates and room you choose, and any other details you give us or that the hotel needs for your stay (for example nationality, ID details, arrival time, company name and KRA PIN, or special requests).
- When you pay: the M-Pesa phone number you pay from and the transaction reference. Payments are processed by Safaricom M-Pesa; we never see or store your M-Pesa PIN.
- When you contact us: your name, email address and message.
- When you create an account: your login email and the bookings linked to it.
- Technical data: your IP address, used briefly to protect our forms from abuse and automated misuse.
How we use it
- To take, confirm and manage your booking, and to prepare for your stay.
- To process your payment and keep financial and tax records required by Kenyan law.
- To reply to your enquiries.
- To keep this website and our booking system secure.
We do not sell your personal data, and we do not use it for advertising.
Who we share it with
- Safaricom, to process M-Pesa payments.
- The providers that host our systems and send our emails, only as needed to run them.
- Cloudflare, if a “verify you are human” check is shown on a form.
- Government authorities where the law requires it.
Cookies
This website does not use advertising or analytics cookies. Your browser keeps a short-lived record of an in-progress booking on your own device so you can finish paying; it is cleared when you close the tab.
How long we keep it
We keep booking and payment records for as long as we need them to provide your stay and as Kenyan tax and accounting law requires. Contact messages are kept only as long as needed to deal with your enquiry.
Your rights
You may ask to see the personal data we hold about you, to correct it, to have it deleted where the law allows, or object to how we use it. You may also complain to the Office of the Data Protection Commissioner.
Contact
For any privacy question or request, email info@lemawasihotel.com.