Privacy Policy

1. Introduction

HomeMovers ("we", "us", "our") is a moving and relocation services provider operating in Kenya. We act as a data controller (and occasionally as a data processor on behalf of clients) when processing personal data in connection with our website (homemovers.co.ke), quote requests, bookings, customer service, and related activities.

This Privacy Policy explains what personal data we collect, why, how we use and protect it, with whom we share it, your rights under the Data Protection Act, 2019, and how to contact us.

2. Personal Data We Collect

We collect personal data that is necessary, adequate, relevant, and limited to what is required for the purposes outlined below. Categories include:

• Contact & Identification Data: Full name, phone number, email address, ID/passport number (where required for contracts or high-value moves), physical address (current and new).
• Service-Related Data: Move details (inventory lists, property type, dates, special instructions), payment information (processed securely via third-party providers; we do not store full card details).
• Communication & Support Data: Messages, call recordings (with notice), emails, WhatsApp/chat logs, feedback/survey responses.
• Technical & Usage Data: IP address, browser type, device information, pages visited, time/date of access, cookies & similar technologies (see our Cookie Policy).
• Sensitive Data (limited): Health/medical information only if voluntarily provided for accessibility needs during a move (processed with explicit consent).

3. How We Collect Your Data

• Directly from you: When you request a quote, book services, fill forms, contact us, or provide feedback.
• Automatically: Via cookies, server logs, analytics tools (e.g., Google Analytics – anonymized where possible).
• From third parties: Referrals, partners (with your consent), public sources (limited), or during joint moves.

4. Purposes & Legal Basis for Processing

We process personal data only when lawful, fair, and transparent. Main purposes and legal bases:

5. Sharing & Disclosure of Personal Data

We do not sell personal data. We share only when necessary:

• Service providers (truck partners, storage facilities, insurers, payment processors) – bound by contracts with DPA-compliant terms.
• Professional advisors (lawyers, accountants, insurers).
• Authorities – when required by law, court order, or to protect rights/safety.
• Successors – in case of business transfer (with notice where feasible).

6. International Transfers

We primarily process data in Kenya. If transfers outside Kenya occur (e.g., cloud services, international partners), we ensure:

• Adequacy decision by the Office of the Data Protection Commissioner (ODPC), or
• Appropriate safeguards (standard contractual clauses, binding corporate rules), or
• Derogations where permitted (e.g., explicit consent).

7. Data Security

We implement appropriate technical and organizational measures (encryption, access controls, firewalls, regular testing, staff training) to protect personal data against unauthorized access, loss, destruction, or damage.

In case of a personal data breach posing risk to rights/freedoms, we notify the ODPC within 72 hours and affected data subjects without undue delay (where required).

8. Data Retention

We retain personal data only as long as necessary for the purpose collected, or to meet legal/tax/contractual obligations (typically 7 years post-move for financial records; shorter for marketing data). After that, data is securely deleted or anonymized.

9. Your Rights Under the Data Protection Act, 2019

You have the following rights (subject to verification and exceptions):

• Right to be informed
• Right of access (free once per year)
• Right to rectification
• Right to erasure (“right to be forgotten” – where no overriding reason)
• Right to restrict processing
• Right to data portability
• Right to object (including to direct marketing)
• Rights re automated decision-making (we do not currently use profiling that produces legal effects)
• Right to withdraw consent (does not affect prior lawful processing)
• Right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC)

To exercise any right, contact us at the details below. We respond within 14 days (extendable by 14 more if complex).

10. Children's Privacy

Our services are not directed at children under 18. We do not knowingly collect data from children without verifiable parental/guardian consent as required by Section 33 of the DPA.

11. Changes to This Privacy Policy

We may update this policy to reflect changes in law, services, or practices. Significant changes will be notified via email (where we have your contact) or prominent notice on the website. Check the “Last updated” date.

12. Contact Us

For questions, rights requests, or complaints: