Privacy Policy

LuxBnB Africa Limited ("LuxBnB," "we," "us," or "our") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you use the LuxBnB platform to book or list homes for short-term rental across Africa.

LuxBnB connects travelers with unique home accommodations across major African countries. We are built on trust, and a fundamental part of earning that trust is being transparent about how we handle your information and respecting your right to privacy.

This Privacy Policy applies to www.luxbnb.africa and the LuxBnB mobile applications (collectively, the "Platform"). By using our Platform, you agree to the collection and use of information in accordance with this policy.

1. Who Controls Your Personal Information

LuxBnB Africa Limited, registered in Kenya with offices in Westlands Area, Nairobi, Kenya, is the data controller responsible for your personal information collected through the Platform.

For payment-related data, Paystack (our payment processor) acts as a co-controller for payment transaction information.

2. Personal Information We Collect

2.1 Information You Provide to Us

Account Information

• Full name, email address, phone number
• Date of birth
• Password (encrypted)
• Profile photo
• Preferred language and currency

Identity Verification Information

• Government-issued ID documents (passport, national ID card, driver's license)
• Selfie photographs for identity verification
• Address verification documents

Payment Information

• Payment card details (processed and stored by Paystack)
• Mobile money account information (M-Pesa, Airtel Money)
• Billing address and postal code
• Transaction history

Listing Information (for Hosts)

• Property address and location details
• Property photos and descriptions
• Pricing and availability
• House rules and cancellation policies
• Amenities and features

Communication Information

• Messages sent through the Platform between guests and hosts
• Reviews and ratings you provide
• Customer support communications
• Survey responses

Social Media Information

When you choose to connect your account with Facebook, Google, Apple, or Spotify, we receive:

• Basic profile information (name, email, profile picture)
• Any additional information you authorize us to access

2.2 Information We Collect Automatically

Usage Information

• Searches for properties
• Bookings and reservations made
• Pages viewed and features used
• Time spent on different pages
• Links clicked

Device Information

• IP address
• Device type and model
• Operating system and version
• Browser type and version
• Mobile device identifiers
• App version information

Location Information

• Precise location from your device GPS (with your permission)
• Approximate location from IP address
• Location information you provide when searching

Cookies and Similar Technologies

We use cookies, web beacons, and similar technologies to enhance your experience and collect usage data. See Section 9 for more details.

2.3 Information from Third Parties

Background Check Providers

For hosts, we obtain background check information from third-party verification services operating in your country to help ensure platform safety.

Social Media Platforms

When you link your Facebook, Google, Apple, or Spotify accounts, we receive information as described in Section 2.1.

Payment Processors

Paystack provides us with payment confirmation and transaction status information.

Public Sources

We may collect publicly available information to verify identity or for fraud prevention purposes.

3. How We Use Your Information

3.1 Provide and Improve Our Services

• Create and manage your account
• Enable bookings and facilitate communication between guests and hosts
• Process payments and send transaction confirmations
• Provide customer support
• Send service-related notifications and updates
• Improve our Platform features and user experience
• Conduct analytics and research
• Develop new features and services

3.2 Safety and Security

• Verify user identity through ID checks and selfie verification
• Conduct background checks on hosts
• Detect and prevent fraud, spam, and illegal activities
• Protect against security threats
• Monitor and investigate suspicious activities
• Enforce our Terms of Service and community standards
• Resolve disputes between users

3.3 Personalization

• Customize your experience based on your preferences
• Show relevant property recommendations
• Remember your search preferences
• Provide location-based suggestions
• Display content in your preferred language

3.4 Communication

• Send booking confirmations and reminders
• Facilitate messaging between guests and hosts
• Send important account updates
• Respond to your inquiries
• Send marketing communications (with your consent)
• Request reviews after your stay

3.5 Legal Compliance

• Comply with applicable laws and regulations across African countries where we operate
• Respond to legal requests from authorities
• Enforce our legal rights
• Protect against legal liability
• Comply with tax obligations

4. How We Share Your Information

4.1 With Other Users

When You Book a Property: Hosts receive your name, profile photo, and contact information to facilitate your stay.

When You List a Property: Guests receive your name, profile photo, property location, and contact information.

Reviews and Ratings: Your reviews and ratings are publicly visible along with your name and profile photo.

4.2 With Service Providers

We share information with third-party service providers who help us operate our Platform:

• Payment Processing: Paystack (for card and mobile money payments)
• Cloud Hosting: International cloud service providers for data storage
• Identity Verification: Third-party verification services for background checks and ID verification
• Maps and Location: Google Maps for displaying property locations
• Analytics: Analytics providers to understand platform usage
• Communication: Email and SMS service providers
• Customer Support: Support tools to assist you better

These providers are contractually obligated to protect your information and use it only for the purposes we specify.

4.3 For Legal Reasons

We may disclose your information when required by law or when we believe disclosure is necessary to:

• Comply with legal obligations
• Respond to valid legal requests from government authorities
• Protect our rights and property
• Prevent fraud or illegal activities
• Protect the safety of our users and the public
• Comply with tax reporting obligations in Kenya and other African countries where we operate

4.4 Business Transfers

If LuxBnB is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.

4.5 With Your Consent

We may share your information for purposes not described in this policy when we have your explicit consent.

5. International Data Transfers

LuxBnB Africa Limited is based in Kenya, but we use international cloud service providers to store and process your information. This means your data may be transferred to and processed in countries outside of Africa, including countries that may have different data protection laws.

When we transfer your information internationally, we ensure appropriate safeguards are in place, including:

• Standard contractual clauses
• Compliance with applicable data protection laws
• Security measures to protect your data during transfer and storage

We operate primarily in stable African countries including Kenya, Rwanda, South Africa, Egypt, and other East African and Southern African nations. Your data is protected in accordance with the data protection laws applicable in these jurisdictions.

6. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

Access: Request access to the personal information we hold about you.

Correction: Request correction of inaccurate or incomplete information.

Deletion: Request deletion of your personal information, subject to legal obligations.

Portability: Request a copy of your information in a structured, commonly used format.

Objection: Object to certain processing of your information.

Restriction: Request restriction of processing in certain circumstances.

Withdraw Consent: Withdraw consent for processing based on consent (this will not affect the lawfulness of processing before withdrawal).

Opt-Out of Marketing: Unsubscribe from promotional emails at any time.

To exercise these rights, contact us at info@luxbnb.africa. We will respond to your request within 30 days.

You also have the right to lodge a complaint with your local data protection authority if you believe we have violated your privacy rights.

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Secure payment processing through Paystack
• Regular security assessments and updates
• Access controls and authentication
• Employee training on data protection
• Secure cloud infrastructure
• Regular backups and disaster recovery procedures

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

If you believe your account has been compromised, please contact us immediately at info@luxbnb.africa.

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Retention Periods:

• Account Information: Retained while your account is active and for a reasonable period after account closure for legal and operational purposes
• Transaction Records: Retained for at least 7 years for tax and accounting purposes
• Identity Verification Data: Retained for the duration of your account and for a period after closure as required by law
• Communications: Retained for as long as necessary to provide support and resolve disputes
• Reviews and Ratings: Retained indefinitely as they provide value to the community

After the retention period expires, we will delete or anonymize your information. Some information may remain in backup systems for a limited time.

9. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience on our Platform:

Essential Cookies: Required for the Platform to function properly (authentication, security, remembering preferences)

Analytics Cookies: Help us understand how users interact with our Platform

Functionality Cookies: Remember your preferences and settings

Social Media Cookies: Enable social media features and sharing

You can control cookies through your browser settings. However, disabling certain cookies may affect Platform functionality.

Third-Party Cookies:

• Google Maps (for location services)
• Facebook, Google, Apple, Spotify (when you use social login)
• Analytics providers

These third parties have their own privacy policies governing their use of your information.

10. Children's Privacy

Our Platform is not intended for children under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at info@luxbnb.africa, and we will delete such information from our systems.

11. Third-Party Services and Links

Our Platform may contain links to third-party websites and services, including:

• Social media platforms (Facebook, Google, Apple, Spotify)
• Payment processors (Paystack)
• Google Maps

These third-party services have their own privacy policies. We are not responsible for their privacy practices. We encourage you to review their privacy policies before providing any information.

Key Third-Party Services:

• Paystack: Handles payment processing - see Paystack Privacy Policy
• Google Maps: Provides location services - see Google Privacy Policy
• Social Login Providers: Process authentication - see respective privacy policies

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you via email or through a prominent notice on our Platform
• For significant changes, provide you with at least 30 days' notice before the changes take effect

Your continued use of the Platform after the effective date of the updated Privacy Policy constitutes your acceptance of the changes. If you do not agree with the updated policy, you should stop using the Platform and close your account.