Legal
Privacy notice
What we collect, why, who sees it, and how long we keep it.
Version 2026-01 — effective 1 January 2026
Who we are
RentRepairs operates this platform and is the data controller for the personal data described here, under the Data Protection Act, 2019.
For anything about your data, write to privacy@rentrepairs.co.ke.
What we collect
- Account details — your name, email address, phone number and password.
- Property details — addresses, coordinates, access notes and photos that landlords add.
- Provider details — trades, coverage, portfolio images, credentials and the documents submitted for verification.
- Activity — requests, responses, jobs, reviews, and messages sent through the platform.
- Subscription details — for providers who take a paid plan, what was charged and when. Card numbers are held by our payment provider, never by us.
- Technical data — IP address and device information, used for security and for spotting abuse.
Why we use it
To run the marketplace: matching requests to providers, letting you message each other, keeping a record of what was agreed.
To keep people safe: verifying identity, investigating conduct reports, and preventing fraud. This is why verification documents exist and it is the only thing they are used for.
To charge providers who take a subscription.
To tell you things you need to know. Notifications about a job or your account security are part of the service; marketing is separate and needs your consent.
Who sees what
Your public provider profile, ratings and reviews are visible to anyone. Your name and property details are visible to providers you engage with, not to the public.
Verification documents are visible only to the administrators who review them, are stored where no public link can reach them, and every access is recorded in an audit log.
Contact details in messages are hidden until a job is agreed. Private ratings a provider leaves about a client are never shown to that client.
We share data with the suppliers who make the service work — hosting, messaging, and payment processing — and with authorities where the law requires it. We do not sell your data.
How long we keep it
Account and activity records are kept for 24 months after your last activity, unless you ask for deletion sooner or the law requires us to keep something longer.
Verification documents are kept for the retention period set for that document type and then deleted.
Your rights
You can ask for a copy of your data, ask us to correct it, ask us to delete it, or object to how we use it. The data rights page explains how.