Privacy & Cookie Policy

JW Realty & Consulting Limited (“JW Realty”, “we”, “us” or “our”) is committed to protecting your privacy. This policy explains how we handle personal data collected through this website, jwrealty.co.ke, and the services offered on it, in accordance with the Data Protection Act, 2019 and the Data Protection (General) Regulations, 2021 of Kenya.

1. Who we are (Data Controller)

JW Realty & Consulting Limited is a real estate consultancy incorporated in Kenya in 2017. For the purposes of the Data Protection Act, 2019, we are the data controller responsible for your personal data.

• Registered office: Mpaka House, Mpaka Road, Westlands, Nairobi, Kenya
• Email: info@jwrealty.co.ke
• Telephone: +254 701 303 030

2. Personal data we collect

2.1 Information you give us

• Enquiry & contact forms — your full name, email address, telephone number, service of interest and the contents of your message.
• Property due-diligence & search requests — the property or Land Reference (L.R.) number, county, your phone number and email, the purpose of your request, and any documents you upload (for example title copies, allotment letters or related records).
• Payments — where you purchase a paid report, your payment is initiated and processed through Safaricom M-Pesa (STK Push). We receive confirmation of the transaction (such as the paying phone number, amount and reference) but we do not collect or store your M-Pesa PIN or full bank/card details.

2.2 Information we collect automatically

• Technical & usage data — your IP address, browser type and user-agent, the pages you visit, referring page and the date/time of access. Where you submit a form, we log the IP address and user-agent alongside your submission to help prevent abuse and spam.
• Cookies & analytics — see the Cookies section below.

3. How we use your data

• To respond to your enquiries and provide the advisory, valuation, due-diligence and search services you request;
• To carry out property and land searches and prepare the reports you order;
• To process and confirm payments for paid services;
• To operate, secure and improve this website and prevent fraud, spam and misuse;
• To send you service-related communications, and — where you have agreed — relevant updates about our services;
• To comply with our legal, regulatory and professional obligations.

4. Our lawful basis

Under section 30 of the Data Protection Act, 2019, we process your personal data on one or more of the following bases:

• Your consent — for example, when you submit a form, upload documents, or accept analytics cookies;
• Performance of a contract — to deliver a service you have requested or paid for;
• Legitimate interests — to secure our website, prevent abuse and understand how our services are used, provided this does not override your rights;
• Legal obligation — where the law or a competent authority requires it.

5. Sharing & disclosure

We do not sell your personal data. We may share it only as follows:

• Service providers (data processors) — our web hosting, email and analytics providers, who process data on our instructions;
• Google LLC — through Google Analytics and Google Fonts used on this site (see Cookies);
• Safaricom PLC — where you make an M-Pesa payment;
• Relevant registries and authorities — only as necessary to perform a search or due-diligence instruction you have asked us to carry out;
• Professional advisers, or where required by law — including to comply with a lawful request from a regulator, court or government body.

6. International transfers

Some of our providers (such as Google) may process data on servers located outside Kenya. Where personal data is transferred outside Kenya, we take reasonable steps to ensure it is protected to a standard consistent with the Data Protection Act, 2019, including appropriate safeguards and, where required, your consent.

7. How long we keep your data

We keep personal data only for as long as necessary for the purposes above:

• Enquiries — typically retained for up to 24 months after our last contact, unless a longer period is needed for an ongoing matter;
• Search & due-diligence records and uploaded documents — retained for the duration of the instruction and thereafter as required to meet our professional, regulatory and record-keeping obligations;
• Analytics data — retained in line with our Google Analytics configuration.

When data is no longer needed, we securely delete or anonymise it.

8. Security

We apply appropriate technical and organisational measures to protect your data, including access controls, secure transmission (HTTPS), and restricting access to authorised personnel. No method of transmission over the internet is completely secure, but we work to protect your data and to respond promptly to any incident in line with our legal obligations.

9. Your rights

Subject to the Data Protection Act, 2019, you have the right to:

• be informed of how your data is used;
• access the personal data we hold about you;
• request correction of inaccurate or incomplete data;
• request deletion of your data where there is no lawful reason to keep it;
• object to or request restriction of processing;
• withdraw consent at any time, without affecting processing already carried out;
• lodge a complaint with the Office of the Data Protection Commissioner (ODPC).

To exercise any of these rights, contact us using the details in section 13. You may also contact the ODPC at odpc.go.ke.

10. Cookies

Cookies are small text files placed on your device when you visit a website. They help the site work, remember your choices, and let us understand how the site is used. This website uses the following categories of cookies:

Cookie / tool	Type	Purpose	Retention
PHPSESSID	Strictly necessary	Maintains your session and secures forms (CSRF protection). The site cannot function properly without it.	Session
jwr_consent	Strictly necessary	Remembers your cookie-consent choice so we don’t ask again on every visit.	6 months
_ga, _ga_YQSTRVV4XS, _gid	Analytics (Google Analytics)	Help us understand how visitors use the site so we can improve it. Set only if you accept analytics cookies.	Up to 24 months

Managing your choices

Strictly necessary cookies are always active because the site relies on them. Analytics cookies are only set after you accept them in our cookie banner. You can change your decision at any time using the button below, or by clearing cookies in your browser settings.

Cookie preferences

Google Fonts

This site loads fonts from Google Fonts to render its typography. When it does, your browser’s request may share your IP address with Google. This is used to serve the fonts and is subject to Google’s Privacy Policy.

11. Children

Our services are intended for adults and businesses. We do not knowingly collect personal data from children under 18. If you believe a child has provided us with data, please contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. Any changes will be posted on this page with a revised “Last updated” date. Please review it periodically.

13. How to contact us

For any question about this policy or to exercise your data-protection rights, contact us at:

• JW Realty & Consulting Limited
• Mpaka House, Mpaka Road, Westlands, Nairobi, Kenya
• Email: info@jwrealty.co.ke
• Telephone: +254 701 303 030