Privacy Policy

MyPloti Ltd ("MyPloti", "we", "us") respects your privacy. This policy explains what personal data we collect when you visit myploti.co.ke, contact us, use our client portal or engage us to buy land or build, and how we use, share and protect it.

We process personal data in line with the Data Protection Act, 2019 of Kenya and its regulations. Where we serve clients living in the United Kingdom or the European Union, we also follow the applicable requirements of the UK GDPR and EU GDPR.

By using our website or services, you acknowledge that you have read this policy.

MyPloti Ltd is the data controller for the personal data described in this policy.

Company

MyPloti Ltd, registration number [PVT-XXXXXX]

Address

Ciata City Mall, Block B, 2nd Floor, Ridgeways, Kiambu Road, Nairobi, Kenya

Email

info@myploti.co.ke

Phone

+254 709 202 299 / +254 794 999 555

Data protection contact

[Name, title], [privacy@myploti.co.ke]

ODPC registration

[Registration number with the Office of the Data Protection Commissioner, if registered]

Data you give us

• Inquiries: first and last name, phone number, email address, project type, plot location, budget range and your message, when you use our contact form, WhatsApp, phone or email.
• Consultations and quotes: details about your land, house plans, preferences and site photos you share with us.
• Clients: national ID or passport number, KRA PIN, postal address, title deed and land search details, signed contracts, Bills of Quantities, payment records and correspondence.
• Client portal: name, email, phone and password (stored in encrypted form) when you register at myploti.co.ke.
• Reviews and testimonials: your name, comments, photos or videos, only with your consent.

Data we collect automatically

• Device and usage data: IP address, browser and device type, pages visited, time on page, the page that referred you, and approximate location (city or country).
• Advertising data: the ad or search term that brought you to our site, and whether you then contacted us (see section 5).

Data from others

• Partners: if you buy a plot from a partner developer such as Optiven Real Estate and ask us to build on it, they may share your name, contact details and plot details with us.
• Public registers: land search results from the Ministry of Lands, and approval status from county governments, NEMA and the NCA.

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

Cookies are small files stored on your device. We use them, and similar technologies, as follows. When you first visit, our cookie banner lets you accept or reject non-essential cookies, and you can change your choice at any time through the "Cookie settings" link in the website footer.

Enhanced conversions

When you submit our contact form and have accepted advertising cookies, your email address and phone number are converted into a secure one-way code (hashed) and sent to Google so it can match the inquiry to an ad click. Google does not receive them in readable form and uses them only for measurement.

Opting out of ads

You can manage or turn off personalised Google ads in My Ad Center at adssettings.google.com and block Google Analytics with the Google Analytics opt-out add-on. Learn how Google uses data at policies.google.com/technologies/partner-sites.

WhatsApp

If you contact us through WhatsApp, your messages are also handled by WhatsApp (Meta Platforms) under its own privacy policy. We record that you clicked a WhatsApp button on our site, but not the content of your chat, for advertising measurement.

• Our team and professionals we engage: architects, engineers, quantity surveyors and site supervisors working on your project, under confidentiality obligations.
• Partner developers: such as Optiven Real Estate, when you buy or build on one of their plots.
• Government bodies: county governments, the National Construction Authority (NCA), the National Environment Management Authority (NEMA), the Ministry of Lands and the Kenya Revenue Authority, for approvals, land transactions and tax.
• Service providers acting for us: website hosting, email, cloud storage, payment processing and banks, Google (analytics and advertising), WhatsApp and our client portal provider. They may only use your data on our instructions.
• Professional advisers: lawyers, auditors and insurers.
• Legal requirements: courts, police or regulators where the law requires it, or to protect our rights or someone's safety.
• Business changes: a buyer or successor if MyPloti is merged or sold, under this same policy.

Some of our service providers, including Google and Meta, store or process data outside Kenya, for example in the United States or the European Union. We transfer data only where the Data Protection Act, 2019 allows it: where the recipient country or organisation provides appropriate safeguards (such as standard contractual clauses), or where the transfer is necessary for your contract with us or you have consented.

For diaspora clients, data you send us from abroad is processed in Kenya.

When data is no longer needed, we delete it or anonymise it so it no longer identifies you.

Under the Data Protection Act, 2019 you have the right to:

To use any of these rights, email [privacy@myploti.co.ke] or write to our head office. We may ask you to confirm your identity. We will respond within [7 days] of receiving a verified request, or tell you if we need longer and why. Exercising your rights is free unless a request is clearly unfounded or excessive.

To stop marketing messages, reply STOP, click "unsubscribe" in any email, or tell our team.

Complaints

If you are unhappy with how we handle your data, please contact us first so we can put it right. You also have the right to complain to the Office of the Data Protection Commissioner (ODPC), Kenya: www.odpc.go.ke. Clients in the UK may contact the Information Commissioner's Office, and clients in the EU their local supervisory authority.

We use appropriate technical and organisational measures, including encrypted connections (HTTPS) on our website, encrypted passwords for the client portal, access limited to staff who need it, confidentiality obligations for staff and contractors, and secure storage of signed documents.

No system is completely secure; if a data breach is likely to put your rights at risk, we will notify the ODPC within 72 hours of becoming aware of it and inform you where required by law.

Our website and services are for adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has sent us personal data, contact us and we will delete it.

Our website links to partner sites, social media and YouTube. Their privacy practices are their own; please read their policies.

We may update this policy when our services, tools or the law change. The "Last updated" date at the top shows the latest version. If a change significantly affects how we use your data, we will tell you by email or a notice on our website.