Privacy Policy

1. Who we are

Rennant Living is a student housing marketplace operating in Kenya. We connect students with verified rental properties near universities and other higher learning institutions . Our registered address is in Nairobi, Kenya.

2. What data we collect

• Full name, email address, and phone number provided during registration
• M-Pesa transaction data when you pay the room locking fee (KES 100)
• Listing data submitted by landlords and agents
• Usage data including pages visited and actions taken on the platform
• IP addresses for security and fraud prevention purposes

3. Why we collect it

• To create and manage your account
• To process room lock payments via M-Pesa
• To connect students with landlords after confirmed payment
• To verify listings before they are published
• To send email notifications including OTP codes and account updates
• To detect and prevent fraud and abuse

4. Who we share it with

We do not sell your data. We share data only with:

• Safaricom M-Pesa - phone number, to process payments
• Resend - emails, to deliver transactional emails
• Cloudflare - images, for image storage and content delivery
• Landlords receive only your phone number, and only after you have paid to lock their room

5. How long we keep it

Account data is retained for as long as your account is active. You may request deletion of your account and associated data at any time by contacting us. Payment records are retained for seven years as required by Kenyan financial regulations.

6. Your rights

Under the Kenya Data Protection Act 2019, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Withdraw consent at any time

To exercise these rights, contact us at privacy@rennant.com

7. Security

Passwords are hashed using bcrypt and never stored in plain text. Communications between your browser and our servers are encrypted. We conduct regular security reviews and maintain audit logs of all significant actions on the platform.

8. Changes to this policy

We will notify registered users by email of any material changes to this policy at least 14 days before they take effect.