97 Alta

Legal

Privacy Policy

How we collect, use, share and protect your personal data when you visit this site or enquire about a residence at 97 Alta — and the rights you have under Kenya’s Data Protection Act, 2019.

Last updated

1. About this policy

This policy explains how MSDC handles personal data in connection with 97 Alta, the managed residential development at 97 Rhapta Road, Westlands, Nairobi — whether you browse this website, submit an enquiry, use the chat assistant, message us on WhatsApp, visit our sales office, or go on to buy a residence.

We process personal data in accordance with the Data Protection Act, 2019 and the regulations made under it. It sits alongside our Terms of Use.

2. Who is responsible for your data

MSDC, the developer of 97 Alta, is the data controller for the personal data described in this policy. Our contact details are:

For any question about this policy or about how your data is used, write to us at info@97alta.com and mark your message for the attention of our data protection contact.

3. What we collect

Depending on how you interact with us, we may collect:

  • Identity and contact details — your name, phone number, email address and, where relevant, your country of residence.
  • Enquiry details — the residence type you are interested in (mini one-bed, one-bed, two-bed, duplex, loft or penthouse), your purchase timeline, how you intend to finance the purchase, and any notes or questions you send us.
  • Chat assistant messages — the options you select and the details you enter in the on-site chat.
  • Correspondence — emails, WhatsApp messages, call notes and meeting records relating to your enquiry.
  • Transaction and compliance data (only if you proceed to buy) — identification documents, KRA PIN, proof of address, source-of-funds information and payment records that we are required to obtain under Kenyan law.
  • Technical and usage data — IP address, browser and device type, referring page, the pages you view and the approximate time and date of your visit, collected by our hosting provider in server logs.

We do not seek sensitive personal data through this site. Please do not send us health, biometric, religious or political information in an enquiry.

4. How we collect it

  • directly from you, through the enquiry pop-up, the “Invest Now” forms and the chat assistant;
  • directly from you, when you email us, call us, message us on WhatsApp or visit the sales office;
  • from your browser and our hosting provider, automatically, when you load a page;
  • from our agents, brokers and marketing partners, where you have asked them to refer you to us or consented to the referral;
  • from publicly available sources, where required for identity or source-of-funds checks.

5. Why we use it, and our lawful basis

We use your personal data for the following purposes:

Purpose Lawful basis (Data Protection Act, 2019)
Responding to your enquiry, sending brochures and pricing, and arranging site visits Your consent, and steps taken at your request before entering a contract
Qualifying your interest and following up on your enquiry by phone, email or WhatsApp Your consent, and our legitimate interest in selling the residences
Preparing reservation and sale documentation and administering your purchase Performance of a contract with you
Identity, anti-money-laundering and source-of-funds checks Compliance with a legal obligation
Sending updates about 97 Alta, construction progress and future projects Your consent (you can withdraw it at any time)
Keeping the site secure, diagnosing faults and improving how it performs Our legitimate interest in a secure, working website
Establishing, exercising or defending legal claims, and keeping statutory records Legal obligation and our legitimate interest

We do not sell your personal data, and we do not use it for automated decision-making that produces legal effects for you.

6. Marketing and your choices

If you have enquired about 97 Alta, we may contact you about the development and about similar opportunities. Every marketing email includes an unsubscribe link, and you can opt out of calls, SMS or WhatsApp at any time by replying “STOP” or emailing info@97alta.com.

Withdrawing consent to marketing does not affect messages we need to send you about a purchase already in progress.

7. Cookies and browser storage

This site does not use advertising cookies and does not run third-party analytics or tracking pixels. It does store a small amount of data in your own browser so the site behaves sensibly between visits:

Stored item What it does How long it lasts
97alta-lead-shown Remembers that the enquiry pop-up has already appeared, so it is not shown again in this session Until you close the browser tab
97alta-lead-submitted Remembers that you have already sent an enquiry, so the pop-up stops appearing Until you clear your browser storage
97alta-bot-lead Holds the answers you gave the chat assistant so the conversation can continue Until you clear your browser storage

These are stored on your device and you can delete them at any time by clearing site data in your browser settings. Doing so simply means the pop-up and chat will treat you as a new visitor.

The site loads the Poppins typeface from Google Fonts. When it does, your browser makes a request to Google servers, which necessarily discloses your IP address to Google. Our hosting provider also keeps standard server logs for security and performance.

8. Who we share it with

We share personal data only where it is necessary, and only with:

  • Our sales, marketing and management partners — including the appointed short-stay and rental management operator, where you ask about or sign up for managed letting;
  • Project delivery partners — contractors, project managers and consultants, where a matter concerns your specific residence;
  • Professional advisers — advocates, valuers, auditors and accountants, under a duty of confidentiality;
  • Service providers — website hosting, email, messaging and CRM providers who process data on our instructions under a written agreement;
  • Financial institutions — where you ask us to refer you for mortgage or payment-plan financing;
  • Regulators, courts and law-enforcement bodies — where we are required or permitted by law to disclose.

9. Transfers outside Kenya

Some of the service providers we use — website hosting, email and messaging platforms — store data on servers outside Kenya. Where we transfer personal data out of Kenya, we do so in line with sections 48 and 49 of the Data Protection Act, 2019: on the basis of appropriate safeguards in our contracts with those providers, because the transfer is necessary to perform a contract with you, or with your consent.

10. How long we keep it

  • Enquiries that do not lead to a purchase — up to 24 months from our last meaningful contact with you, then deleted or anonymised.
  • Purchase and transaction records — for the life of the contract and then for the period required by Kenyan tax, anti-money-laundering and limitation rules (generally at least seven years).
  • Marketing consents and opt-outs — for as long as needed to prove that we honoured your choice.
  • Server logs — for a short period set by our hosting provider, for security purposes.

11. How we protect it

The site is served over HTTPS, and we apply access controls, staff confidentiality obligations and need-to-know limits on who can see enquiry and transaction data. No transmission over the internet is completely secure, so we cannot guarantee absolute security — but if a breach occurs that presents a real risk to your rights, we will notify the Office of the Data Protection Commissioner, and you, as required by law.

Please note that we will never ask you to send payment details or change bank instructions by email or messaging app alone. Always verify account details by calling our office on a number you already hold.

12. Your rights

Under the Data Protection Act, 2019 you have the right to:

  • be informed of how your personal data is being used;
  • access the personal data we hold about you;
  • have inaccurate or incomplete data corrected;
  • ask us to delete data we no longer have a reason to keep;
  • object to processing based on our legitimate interests, and to direct marketing at any time;
  • ask us to restrict how we use your data while a concern is being resolved;
  • receive the data you gave us in a portable format, or have it transferred to another controller; and
  • withdraw consent at any time, without affecting processing carried out before you withdrew it.

To exercise any of these rights, email info@97alta.com. We may ask you to confirm your identity before we act, and we will respond as soon as we can and in any event within the timeframe the law allows.

13. Children

This site and our sales process are directed at adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us their details, contact us and we will delete them.

14. Changes to this policy

We may update this policy as the development progresses or as our practices or the law change. The version published here is the current one, and the “last updated” date at the top of the page shows when it last changed. Where a change materially affects how we use your data, we will tell you directly.

15. Contact and complaints

Questions, requests and complaints about your personal data can be sent to info@97alta.com, or by post to 97 Rhapta Road, Westlands, Nairobi.

If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Data Protection Commissioner, Kenya — www.odpc.go.ke.