1. Who We Are

Marima is a digital platform that supports property discovery, rental listing, property management, real estate agency services, hotel booking, property marketplace services, and tours and travel experiences. For privacy questions, data rights requests, or account deletion requests, contact us using the details in Section 20.

Depending on the service, Marima may act as a data controller for information we determine how and why to process, and as a service provider or processor where we process information on behalf of landlords, property managers, hotels, agents, tour operators, or other business users.

2. Scope of This Policy

This Policy applies to users who visit our website, create an account, list a property, search for a property, send enquiries, manage rentals, register tenants, make or receive bookings, use marketplace services, request agency support, book tours, contact support, or interact with Marima through our apps, websites, dashboards, forms, messages, calls, SMS, WhatsApp, emails, or social media lead forms.

Some services may have additional terms, notices, consent prompts, or contracts. If there is a conflict between this Policy and a service-specific notice, the service-specific notice applies to that service.

3. Personal Data We Collect

The personal data we collect depends on how you use Marima. It may include:

• Account data: name, phone number, email address, password, profile photo, role, account type, language, country, region, preferences, and verification status.
• Identity and verification data: identification details, business details, ownership details, agency records, licensing details, or verification documents where required for trust, safety, fraud prevention, or legal compliance.
• Property and listing data: property name, category, type, unit details, photos, videos, descriptions, location, rent, sale price, booking price, amenities, availability, rules, and contact options.
• Location data: GPS coordinates, selected region, locality, address, map pin, nearby landmarks, and approximate location derived from device or IP address where enabled or necessary for the service.
• Tenant, guest, buyer, traveler, and enquiry data: messages, viewing requests, booking requests, travel preferences, guest details, move-in details, support tickets, maintenance requests, and communication history.
• Property management data: tenant records, units, invoices, rent records, payment history, balances, notices, maintenance tasks, caretaker details, manager notes, and reports.
• Booking and travel data: hotel bookings, room details, check-in and check-out dates, tour packages, itinerary details, traveler counts, booking status, confirmations, cancellations, and special requests.
• Payment and transaction data: subscription records, invoices, receipts, payment references, transaction status, billing details, refund records, and payout information.
• Device, usage, and technical data: IP address, browser type, device model, operating system, app version, log data, crash logs, identifiers, session activity, pages viewed, features used, timestamps, cookies, and analytics data.
• Marketing and lead data: lead form submissions, campaign source, advertisement interactions, preferences, consent records, and communication engagement.

4. Sources of Personal Data

We collect personal data from:

• You directly when you create an account, submit forms, upload listings, make enquiries, complete bookings, contact support, or use Marima services.
• Your device or browser through cookies, logs, analytics, crash reports, app permissions, and location features.
• Other Marima users, such as landlords, tenants, agents, hotel owners, guests, tour operators, caretakers, or managers, where they provide information needed to deliver a service.
• Third-party services such as payment processors, communication tools, social media lead forms, analytics providers, verification providers, hosting providers, and support systems.

5. How We Use Personal Data

We use personal data for the following purposes:

• To create, verify, secure, and manage user accounts.
• To publish, moderate, display, promote, and manage property, hotel, marketplace, and tour listings.
• To help users search, filter, compare, enquire, book, reserve, view, buy, lease, rent, or manage properties and services.
• To provide property management tools, including tenant records, invoices, rent tracking, maintenance coordination, notices, reporting, and caretaker workflows.
• To process payments, subscriptions, invoices, receipts, refunds, booking confirmations, payouts, and transaction records.
• To send account alerts, security notices, enquiry updates, booking confirmations, rent reminders, maintenance updates, support responses, service announcements, and administrative messages.
• To provide customer support, troubleshoot issues, improve service quality, and respond to complaints or requests.
• To detect, prevent, investigate, and respond to fraud, abuse, spam, fake listings, unauthorized access, security incidents, and illegal activity.
• To analyze usage, measure performance, improve products, personalize experiences, develop new features, and understand marketing effectiveness.
• To comply with legal, regulatory, accounting, tax, audit, dispute-resolution, law-enforcement, and contractual obligations.

6. Legal Bases for Processing

Where applicable data protection laws require a legal basis, we process personal data based on one or more of the following grounds:

• Contract: to provide services you request, manage your account, process bookings, subscriptions, listings, enquiries, and related transactions.
• Consent: where you allow location access, accept optional cookies, subscribe to marketing, upload optional information, or grant a device permission.
• Legitimate interests: to secure the platform, prevent fraud, improve services, communicate with users, moderate listings, analyze performance, and support business operations, where those interests are not overridden by your rights.
• Legal obligation: to meet tax, accounting, regulatory, law-enforcement, consumer protection, data protection, and dispute-resolution requirements.
• Vital interests or public interest: where necessary to protect safety, prevent harm, or respond to emergencies, where permitted by law.

7. Public Listings and User-Generated Content

When you publish a listing, review, profile, agency page, hotel page, tour package, property page, or similar content, parts of that content may be publicly visible or visible to other users. This may include photos, descriptions, pricing, location, availability, amenities, rules, ratings, reviews, and contact options.

Do not upload personal data, documents, images, or contact details that you are not authorized to share. You are responsible for ensuring that your uploaded content is accurate, lawful, and suitable for the audience that may view it.

8. Location Data

Some Marima services use location data to show nearby rentals, verify property positions, improve listing accuracy, support GPS-based discovery, or help users find relevant services. We may collect precise GPS location only where you grant permission through your device or provide location details directly.

You can disable location permissions through your device settings. Some location-based features may not work properly without location access.

9. Cookies, Analytics, and Similar Technologies

We may use cookies, pixels, local storage, software development kits, analytics tools, crash reporting tools, and similar technologies to operate Marima, remember preferences, secure accounts, analyze performance, improve features, detect fraud, and measure marketing performance.

You can control cookies through your browser settings. Where required by law, we will request consent for non-essential cookies or similar tracking technologies.

10. How We Share Personal Data

We do not sell personal data. We may share personal data only as needed to provide services, operate Marima, comply with legal duties, protect users, or support legitimate business purposes.

• With other users: for enquiries, bookings, viewings, tenant communication, property management, travel coordination, hotel stays, and marketplace interactions.
• With service providers: including hosting, cloud storage, payments, SMS, email, WhatsApp tools, analytics, maps, customer support, security, backups, and verification providers.
• With business users: such as landlords, property managers, agents, hotel owners, hosts, caretakers, and tour operators where they need the information to deliver the service you request.
• With payment providers: to process subscriptions, bookings, invoices, refunds, receipts, payouts, transaction checks, and fraud controls.
• With authorities or legal parties: where required by law, court order, regulatory request, lawful process, safety incident, fraud investigation, or dispute.
• With professional advisors: including lawyers, accountants, auditors, insurers, and consultants where necessary for compliance, risk management, or business operations.
• During business changes: where Marima is involved in a merger, acquisition, restructuring, financing, sale of assets, or similar transaction, subject to appropriate safeguards.

11. Payments and Financial Information

Payments may be processed by third-party payment providers. Marima may store transaction references, payment status, receipt details, billing history, subscription details, and payout records. We do not intentionally store full card details unless this is provided through a compliant payment provider and permitted by applicable law.

12. International Transfers

Marima, its service providers, or technology partners may process or store personal data outside your country of residence, including outside Kenya. Where personal data is transferred internationally, we take reasonable steps to use appropriate safeguards such as contractual protections, access controls, security measures, and compliance checks as required by applicable data protection laws.

13. Data Retention

We keep personal data only for as long as reasonably necessary for the purposes described in this Policy, unless a longer retention period is required or permitted by law. Retention periods depend on the nature of the data, the service used, legal obligations, accounting requirements, fraud prevention needs, dispute risks, user requests, and legitimate business needs.

When information is no longer needed, we may delete, anonymize, aggregate, or securely archive it. Some information may remain in backups for a limited period before deletion according to backup cycles.

14. Data Security

We use reasonable technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, loss, misuse, or destruction. These measures may include access controls, password protection, encryption where appropriate, secure servers, monitoring, backups, audit controls, staff access limits, and incident response procedures.

No online service, mobile app, transmission method, or storage system is completely secure. You are responsible for using strong passwords, keeping login details confidential, updating your devices, and notifying us immediately if you suspect unauthorized access.

15. Data Breach and Security Incident Response

If we become aware of a security incident that affects personal data, we will investigate and take appropriate steps to contain, assess, and remediate the incident. Where required by applicable law, we will notify affected users, regulators, data controllers, or other relevant parties within the required timelines.

16. Your Privacy Rights

Subject to applicable law and verification of your identity, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate, incomplete, outdated, or misleading data.
• Request deletion or erasure of personal data, subject to legal, contractual, security, and business retention requirements.
• Object to or restrict certain processing activities where permitted by law.
• Withdraw consent where processing is based on consent.
• Request data portability where applicable.
• Opt out of marketing communications.
• Lodge a complaint with the relevant data protection authority where applicable.

To exercise these rights, contact us using the details in Section 20. We may request information to verify your identity and authority before acting on a request.

17. Marketing Communications and Preferences

We may send marketing communications, offers, newsletters, property updates, travel updates, product updates, or promotional messages where permitted by law or where you have provided consent. You may opt out at any time using unsubscribe instructions, app settings, or by contacting us.

Even if you opt out of marketing, we may still send service, security, account, transaction, billing, legal, or operational messages.

18. Children and Minors

Marima is not intended for children under the age of 13. Users under 18 should use Marima only with the involvement and consent of a parent or legal guardian. We do not knowingly collect personal data from children without appropriate consent. If you believe a child has provided personal data without consent, contact us and we will take appropriate action.

19. Third-Party Links and Services

Marima may contain links to third-party websites, payment pages, map services, social media pages, app stores, partner services, or external platforms. We are not responsible for the privacy practices, security, or content of third-party services. Review their privacy policies before providing personal data.

20. Contact Us

If you have questions about this Privacy Policy, want to exercise your privacy rights, request account deletion, report a privacy concern, or contact us about data protection matters, use the following details:

• Email: support@marima.co.ke
• Phone: +254 718 505 072
• Website: https://marima.co.ke

21. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, business operations, technology, legal requirements, or data protection practices. Updated versions will be posted on this page with the latest effective date.

Continued use of Marima after an update means you acknowledge the revised Privacy Policy. Where required by law, we may provide additional notice or request consent for material changes.