Privacy Policy

1. Introduction

Astrentia Group ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, process, and protect your information in compliance with the Data Protection Act, 2019 of Kenya and international data protection standards.

2. Data Controller

Astrentia Group
Headquarters, Nairobi, Kenya
Email: services@astrentia.com

3. Information We Collect

We collect and process the following categories of personal data:

• Identity Information: Name, title, date of birth, passport details
• Contact Information: Email address, phone numbers, postal address
• Financial Information: Payment details, billing information
• Travel Preferences: Destinations, accommodation preferences, dietary requirements
• Technical Data: IP address, browser type, device information, cookies
• Usage Data: How you interact with our services and website
• Marketing and Communications: Your preferences for receiving marketing communications

4. Legal Basis for Processing

We process your personal data based on:

• Consent: You have given clear consent for us to process your personal data for specific purposes
• Contract: Processing is necessary to fulfill our contractual obligations to you
• Legal Obligation: Processing is required to comply with Kenyan law
• Legitimate Interests: Processing is necessary for our legitimate business interests

5. How We Use Your Information

We use your personal data to:

• Provide luxury concierge and travel services
• Process membership applications and manage accounts
• Arrange travel, accommodation, and lifestyle services
• Process payments and manage billing
• Communicate with you about services, bookings, and updates
• Improve our services and customer experience
• Send marketing communications (with your consent)
• Comply with legal and regulatory requirements
• Prevent fraud and ensure security

6. Data Sharing and Disclosure

We may share your personal data with:

• Service Providers: Hotels, airlines, tour operators, and other third-party service providers necessary to fulfill your bookings
• Business Partners: Trusted partners who assist in delivering our services
• Payment Processors: Secure payment processing companies
• Legal Authorities: When required by law or to protect our legal rights
• Professional Advisors: Lawyers, auditors, and consultants

We ensure all third parties respect the security of your data and treat it in accordance with applicable data protection laws.

7. International Data Transfers

Your personal data may be transferred to and processed in countries outside Kenya. When we transfer data internationally, we ensure appropriate safeguards are in place, including standard contractual clauses approved by relevant data protection authorities.

8. Data Security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, secure servers, access controls, and regular security assessments.

9. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods vary based on the type of data and purpose of processing, typically ranging from 6 months to 7 years for financial and contractual records.

10. Your Rights Under Kenyan Law

Under the Data Protection Act, 2019, you have the following rights:

• Right to Access: Request access to your personal data
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data in certain circumstances
• Right to Restrict Processing: Request limitation on how we process your data
• Right to Data Portability: Request transfer of your data to another organization
• Right to Object: Object to processing of your data for specific purposes
• Right to Withdraw Consent: Withdraw consent for processing at any time
• Right to Lodge a Complaint: File a complaint with the Office of the Data Protection Commissioner of Kenya

11. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance user experience, analyze website performance, and deliver personalized content. You can manage your cookie preferences through your browser settings. For detailed information, please refer to our Cookie Policy.

12. Marketing Communications

We will only send you marketing communications if you have given us consent to do so. You can opt out of marketing communications at any time by clicking the unsubscribe link in our emails or contacting us directly at services@astrentia.com.

13. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "Last Updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.

15. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

Astrentia Group
Headquarters, Nairobi, Kenya
Email: services@astrentia.com

Office of the Data Protection Commissioner (Kenya):
If you wish to file a complaint regarding our data processing practices, you may contact the Office of the Data Protection Commissioner at www.odpc.go.ke