Skip to content
RentPlus

Privacy Policy

Last updated: 14 August 2026 · Draft pending legal review

This policy explains how RentPlus (“we”, “us”) collects, uses, stores and protects personal data when you use the RentPlus platform, our websites and our mobile applications. We are committed to handling personal data in accordance with the Kenya Data Protection Act, 2019 and its regulations.

1. Who we are

RentPlus is a company registered in Kenya, operating this property management platform. For the purposes of the Data Protection Act, we act as a data controller for data about our customers and website visitors, and as a data processor for tenant and visitor data that our customers (landlords, property managers and estates) manage through the platform.

2. Data we collect

From customers (landlords, property managers, staff)

  • Account details: name, phone number, email, company information
  • Billing information for your subscription
  • Usage data: log-ins, actions taken in the platform (audit trail)

On behalf of our customers

  • Tenant records: names, phone numbers, identification details, lease and payment history
  • Visitor records: names, phone numbers, vehicle details, entry and exit times
  • Document signer details: names, phone numbers, signature events

From website visitors

  • Contact form submissions: name, email, phone, company, message
  • Basic technical data necessary to serve and secure the site

3. How we use data

  • To provide and operate the platform (leases, invoices, payments, receipts)
  • To send transactional communications: invoices, receipts, notices, one-time codes
  • To respond to enquiries and provide support
  • To secure the platform, including audit logging and fraud prevention
  • To meet legal and tax obligations

We do not sell personal data, and we do not use tenant data for advertising.

4. Legal bases

We process personal data where necessary for the performance of a contract, for compliance with legal obligations, for our legitimate interests in operating and securing the platform, or with consent where the law requires it.

5. Sharing

We share data only with service providers necessary to operate RentPlus:

  • Payment processing (Safaricom M-Pesa) to process rent payments
  • SMS and email delivery providers to send codes, invoices and notices
  • Cloud hosting (Amazon Web Services) to run the platform and store data

Each provider is bound by contractual confidentiality and data protection obligations. We may disclose data where required by Kenyan law or a lawful order.

6. International transfers

Platform data is hosted on Amazon Web Services infrastructure outside Kenya (EU region), with safeguards consistent with the Data Protection Act’s transfer requirements. We will update this section if hosting arrangements change.

7. Security

Data is encrypted in transit and at rest. Access is controlled through role-based permissions, two-factor authentication is available on staff accounts, and actions on the platform are recorded on a tamper-evident audit trail. See our Security page for detail.

8. Retention

We retain data for as long as needed to provide the service and meet legal obligations (including tax record requirements). Financial records are retained in line with Kenyan law. Visitor records support export and deletion tooling for our customers.

9. Your rights

Under the Data Protection Act, 2019 you have the right to:

  • Be informed about how your data is used
  • Access personal data we hold about you
  • Correct inaccurate or incomplete data
  • Request deletion of data we no longer have grounds to keep
  • Object to or restrict certain processing
  • Data portability, where applicable

If you are a tenant whose data is managed by your landlord or property manager through RentPlus, direct requests to them first — we will support them in fulfilling your request.

10. Contact

Questions or requests: hello@rentplus.ke, or write to us in Nairobi, Kenya. You may also lodge a complaint with the Office of the Data Protection Commissioner.

11. Changes

We will post any changes to this policy on this page and update the date above. Material changes will be notified through the platform.