Nairobi Online

nairobionline.com

1. Introduction

Welcome to Nairobi Online (“we,” “our,” or “us”). Nairobi Online is an online platform operating at nairobionline.com, providing news, classifieds, business listings, community content, and related services for Nairobi, Kenya and the wider East African region.

We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, share, and protect your information when you access or use our website, mobile applications, and related services (collectively, the 'Services').

By using our Services, you agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of our Services.

2. Data Controller

Nairobi Online is the data controller responsible for your personal data. Our contact details are:

Nairobi Online

Website: nairobionline.com

Email: privacy@nairobionline.com

Address: Nairobi, Kenya

3. Information We Collect

We collect information in the following ways:

3.1 Information You Provide Directly

Account registration details (name, email address, phone number, username, password)
Profile information (profile photo, biography, location, preferences)
Classified ad submissions (listing title, description, pricing, contact details, images)
Business listing information (business name, address, phone, operating hours, category)
Comments, reviews, and user-generated content posted on the platform
Communications with our support team
Payment information (where applicable — processed via secure third-party payment providers)

3.2 Information Collected Automatically

IP address and approximate geographic location
Browser type, version, and operating system
Device identifiers and mobile device type
Pages visited, links clicked, and time spent on pages
Referring URLs and search queries
Cookies and similar tracking technologies (see Section 8)

3.3 Information from Third Parties

Social media profile data if you log in via Google, Facebook, or other providers
Publicly available business or contact information
Analytics partners and advertising networks

4. How We Use Your Information

We use your personal data for the following purposes:

4.1 To Provide and Improve Our Services

Create and manage your account
Publish and manage your listings, ads, and business profiles
Personalise content and recommendations based on your interests and location
Respond to your enquiries and provide customer support
Improve, debug, and optimise our platform

4.2 Communication

Send transactional emails (account confirmation, password reset, listing updates)
Send service announcements and important policy updates
Send marketing newsletters and promotional offers (only with your consent)

4.3 Safety and Security

Detect, prevent, and respond to fraud, abuse, or illegal activity
Enforce our Terms of Service and Community Guidelines
Verify user identities and account authenticity

4.4 Legal and Compliance

Comply with applicable Kenyan laws and regulations, including the Data Protection Act, 2019
Respond to lawful requests from government authorities or courts
Establish, exercise, or defend legal claims

5. Legal Basis for Processing

Under Kenya's Data Protection Act, 2019, we process your personal data on the following legal grounds:

Contractual necessity — to deliver the Services you have requested
Legitimate interests — to improve our Services, prevent fraud, and market our platform
Legal obligation — to comply with applicable laws and regulations
Consent — where you have explicitly agreed (e.g., marketing emails, certain cookies)

You may withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing before withdrawal.

6. How We Share Your Information

We do not sell your personal data. We may share your information in the following circumstances:

6.1 Service Providers

We engage trusted third-party service providers to assist us in operating our platform, including cloud hosting providers, payment processors, email delivery services, analytics providers, and customer support tools. These providers are contractually bound to process your data only on our instructions and in compliance with applicable privacy laws.

6.2 Business Transfers

In the event of a merger, acquisition, or sale of all or part of our business, your data may be transferred as part of that transaction. We will notify you of any such change via email or a prominent notice on our website.

6.3 Legal Requirements

We may disclose your information where required to do so by law, court order, or regulatory authority, including the Office of the Data Protection Commissioner of Kenya.

6.4 Public Content

Any content you post publicly on the platform (listings, reviews, comments) may be viewed by other users and indexed by search engines. You should avoid including sensitive personal information in public posts.

7. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

Active account data is retained for as long as your account remains active
Listing and transaction records may be retained for up to 7 years for tax and legal compliance
Log and analytics data are typically retained for up to 24 months
Marketing preferences and consent records are retained until you withdraw consent or close your account

When data is no longer required, we securely delete or anonymise it.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience on our platform. These include:

Essential cookies — required for the website to function (e.g., session management, security)
Performance cookies — help us understand how visitors interact with our site
Functional cookies — remember your preferences and settings
Advertising cookies — used to deliver relevant advertisements (with your consent)

You can manage or disable cookies through your browser settings. Note that disabling certain cookies may affect the functionality of our Services. For more detail, please see our Cookie Policy at nairobionline.com/cookie-policy.

9. Your Rights

Under the Kenya Data Protection Act, 2019, you have the following rights regarding your personal data:

Right of access — request a copy of the personal data we hold about you
Right to rectification — request correction of inaccurate or incomplete data
Right to erasure — request deletion of your personal data in certain circumstances
Right to restriction of processing — request that we limit how we use your data
Right to data portability — receive your data in a structured, machine-readable format
Right to object — object to processing based on legitimate interests or direct marketing
Right to withdraw consent — where processing is based on consent, withdraw it at any time

To exercise any of these rights, please contact us at privacy@nairobionline.com. We will respond within 21 days. You also have the right to lodge a complaint with the Office of the Data Protection Commissioner of Kenya (odpc.go.ke).

10. Children's Privacy

Our Services are not directed to children under the age of 18. We do not knowingly collect personal data from minors. If you believe that a child has provided us with personal information, please contact us immediately and we will take steps to delete such information.

11. Data Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

Encryption of data in transit using TLS/SSL
Secure storage with access controls and authentication
Regular security assessments and vulnerability testing
Staff training on data protection obligations

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal data, we cannot guarantee absolute security. In the event of a data breach that is likely to result in risk to your rights, we will notify you and the Office of the Data Protection Commissioner as required by law.

12. Cross-Border Data Transfers

Some of our service providers may be located outside Kenya. Where we transfer your personal data internationally, we ensure that appropriate safeguards are in place in accordance with the Kenya Data Protection Act, 2019, including standard contractual clauses or other legally recognised transfer mechanisms.

13. Third-Party Links

Our website may contain links to third-party websites, advertisers, or services. We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any external sites you visit.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of significant changes by:

Posting the revised policy on nairobionline.com with an updated effective date
Sending you an email notification (if you have an account with us)

Your continued use of our Services after any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer:

Nairobi Online — Data Protection Officer