Privacy Policy

• Contact information: name, email address, phone number
• Identity documents: a copy of your government-issued ID, submitted for verification purposes only
• Booking details: stay dates, room selected, payment amount and method
• Communications: any messages sent through the guest portal (e.g. assistance requests, laundry requests)

• To confirm your identity before granting property access, for the safety of all guests and the property
• To process your booking and payment
• To provide services you request during your stay (laundry, assistance)
• To communicate with you about your booking

• Your ID is reviewed by our team to verify your identity and is never publicly visible or shared beyond what is necessary for verification.
• Once your stay is complete, your ID document is automatically and permanently deleted from our systems. We do not retain a copy of your ID after checkout. If you do not check out through the site, it is deleted automatically about a day after your stay ends.
• Your phone number is also deleted after checkout, unless you choose "Yes, remember me" when checking out. In that case we keep your name, email and phone number so we can fill in your details next time, and remove them automatically if you have not used it for 2 years. You confirm it is you with a code sent to your email, and you can say "No" at any later checkout, or contact us, to have them removed.
• Your name, email, and booking history are retained for our business records (accounting, recognizing returning guests, and responding to any post-stay issues).

We do not store your full card or payment account details. Payments are processed directly through M-Pesa, and we only retain a payment confirmation reference, not your underlying payment credentials.

Under Kenya's Data Protection Act, you have the right to:

• Know what personal data we hold about you
• Request a copy of your data
• Request correction of inaccurate data
• Request deletion of your data (note: some information, like completed booking records, may be retained for legitimate business and tax record-keeping purposes even after a deletion request)
• Withdraw consent for data processing where applicable

To exercise any of these rights, contact us at hello@pamhokhomes.com.

We take reasonable technical measures to protect your personal information, including restricting access to verified administrators only and using secure, access-controlled storage for sensitive documents.

We may update this Privacy Policy from time to time. Material changes will be reflected with an updated "last updated" date above.