01 Introduction
Welcome to Farman Real Estate. We are committed to protecting your privacy and ensuring a safe online experience. This Privacy Policy outlines how we collect, use, disclose, and safeguard your personal information when you visit our website, use our services, or interact with us.
02 Information We Collect
Personal Information
When you interact with Farman Real Estate, we may collect the following types of personal information:
- Contact Details — Name, email address, phone number, and postal address.
- Property Preferences — Details about your property search criteria, such as location, type of property, and budget.
- Transaction Information — Financial details and transaction history related to buying, selling, or renting property.
- Other Information — Any additional information you provide to us, such as feedback, inquiries, or communication preferences.
Usage Data
We automatically collect certain information about your visit to our website, including:
- Device Information — IP address, browser type, operating system, and device identifiers.
- Usage Data — Pages viewed, time spent on pages, referral source, and other browsing activities.
Children's Data
Our website and services are directed at adults. We do not knowingly collect or process personal data from anyone under the age of 18. In line with section 33 of the Kenya Data Protection Act, 2019, we do not knowingly process a child's personal data without the verifiable consent of a parent or guardian. If you believe a person under 18 has provided us with personal data, please contact us at info@farmanrealestate.com and we will delete it promptly.
03 How We Use Your Information
We use your information to:
- Provide Services — Assist with property searches, transactions, and real estate inquiries.
- Communicate — Send you updates, notifications, and promotional materials (if you have opted in).
- Improve Our Services — Analyze usage patterns to enhance our website and services.
- Process Transactions — Handle payments and manage your real estate transactions.
- Compliance and Security — Ensure compliance with legal obligations and safeguard our rights and the rights of others.
Lawful Basis
Under section 30 of the Kenya Data Protection Act, 2019, our lawful basis for processing the personal data you submit through our contact and enquiry forms, and for sending you Property Alerts you have opted in to, is your consent. You may withdraw that consent at any time (see Section 08). Your enquiry and any property-alert signup are delivered to us by e-mail and are not stored in a database 14 they reside only in our e-mail inbox. We use your contact-form details to respond to your enquiry; if you sign up for Property Alerts, we use your e-mail to notify you about new or matching properties, and you can ask us to stop at any time by e-mailing us.
05 Service Providers
We use the following third-party services to operate this website. Each service receives only the data technically necessary for its function. We have entered into Data Processing Agreements (DPAs) with all processors where required under the Kenya Data Protection Act 2019.
Supabase — Database & Backend
Supabase hosts this website's property listings database and runs the serverless Edge Functions that process your enquiry. When you submit the contact form or sign up for property alerts, the function transiently processes your details solely to forward them to us by e-mail 14 your contact details are not stored in our database. Supabase Inc. is headquartered in San Francisco, USA, with infrastructure in the EU (Ireland). A signed Data Processing Agreement (DPA) is in place. Supabase Privacy Policy ↗
Resend — Transactional E-mail Delivery
When you submit the contact form or sign up for property alerts, your details (name, e-mail, phone, message) are transmitted via Resend (Resend, Inc., USA) to deliver an e-mail notification to us. This is how we receive your enquiry 14 it is delivered to our inbox, not stored in a database. Resend processes this data solely to transmit the message and for no other purpose. A signed Data Processing Agreement (DPA) with standard contractual clauses is in place. Resend Privacy Policy ↗
Cloudflare — Hosting & Bot Protection
This website is served via Cloudflare's global network. Cloudflare processes request metadata (IP address, browser type) to deliver pages and to help protect against automated abuse. Data is processed under Cloudflare's standard contractual clauses. Cloudflare Privacy Policy ↗
Carto — Map Tiles
Property detail pages display an interactive map powered by Leaflet using map tiles served by Carto (CartoDB, Inc., New York, USA). When a detail page is viewed, your browser loads map images directly from Carto's servers; your IP address is transmitted in the process. This is technically necessary to render the map. No personal data beyond the IP address is shared. Carto Privacy Policy ↗
OpenStreetMap / Nominatim — Address Geocoding
When a property address is resolved to map coordinates, a request is sent to Nominatim (operated by the OpenStreetMap Foundation, UK). Only the address string is transmitted — no personal data. OSM Privacy Policy ↗
Farman Analytics — Anonymous Page Views
We operate our own privacy-first analytics system built on Supabase. It records which pages are visited, the referrer hostname, and a random session ID that expires when the browser tab is closed. No cookies, no IP addresses, no device fingerprinting, and no personal data are stored. Analytics is only activated after you accept via the consent banner.
06 Data Security
We implement industry-standard security measures to protect your personal information from unauthorized access, disclosure, or destruction. All data in transit is encrypted via HTTPS/TLS. While we strive to protect your data, no online system or transmission method is completely secure.
07 Cookies & Tracking
This website does not use advertising cookies, tracking pixels, or third-party analytics cookies. Specifically:
- No cookie-based tracking — We do not place any persistent tracking cookies on your device.
- Consent preference — Your analytics consent choice is stored in your browser's
localStorageunder the keyfarman_consent_v1. This is not a cookie and is never transmitted to any server. - Session ID — If you accept analytics, a random session ID is created in
sessionStorage. It is deleted automatically when you close the browser tab and is never linked to your identity.
You can withdraw analytics consent at any time by clearing your browser's localStorage for this site, or by declining on your next visit.
08 Your Rights
Under the Kenya Data Protection Act 2019 you have the following rights regarding your personal data:
- Access — Request a copy of the personal data we hold about you.
- Correction — Request correction of inaccurate or incomplete personal data.
- Erasure — Request deletion of your personal data, subject to legal obligations. We will respond within 21 days.
- Objection — Object to processing based on legitimate interests or direct marketing.
- Restriction — Request restriction of processing under certain conditions.
- Portability — Request transfer of your personal data to another organisation.
To exercise any of these rights — including erasure requests — please e-mail info@farmanrealestate.com with the subject line "Data Request". We will respond within 21 days.
09 Data Retention
We retain your personal information only as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by law. Because enquiries and property-alert signups are delivered to us by e-mail and are not stored in our website database, this data resides only in our e-mail inbox. We keep it only as long as necessary to handle your enquiry or alerts and delete it thereafter (and at your request at any time). Anonymous analytics data (no personal data) is retained indefinitely for business planning purposes.
10 Third-Party Links
Our website may contain links to third-party websites (e.g. WhatsApp, LinkedIn, X). We are not responsible for the privacy practices or content of such sites. We encourage you to review the privacy policies of any third-party sites you visit.
11 Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.
12 Contact & Erasure Requests
For general enquiries, data access requests, or to submit an erasure (right-to-be-forgotten) request, please contact us. We will confirm receipt within 48 hours and fulfil verified requests within 21 days.