Legal
Privacy Policy
Last updated 30 August 2026 · Aligned to the Kenya Data Protection Act, 2019
The short version: this website stores almost nothing. Our current platforms run client-side — preferences, saved searches and demo accounts live in your own browser, not on our servers. When you contact us, we use what you sent to reply, and for nothing else. The full policy follows.
1. Who we are
Chacadom Investments (“Chacadom”, “we”) is a Kenyan real-estate investment and advisory firm and the operator of this website and the Keja.ai platform preview. For purposes of the Kenya Data Protection Act, 2019, Chacadom is the data controller for personal data submitted through this site. You can reach us via the contact channels published on our Contact page.
2. What we collect
We process only what you give us or what the site needs to function:
- • Contact submissions — the name, phone, email and message you choose to send us.
- • Browser-local data — the email address you optionally leave in the newsletter capture, and the timestamped consent records attached to your enquiries, are stored in your browser’s local storage on your device and never transmitted to us. (On Keja.ai, the same applies to your demo account, saved searches and comparison choices.)
- • Basic technical logs — our static hosting provider may record standard request data (IP address, browser type) for security and delivery, retained briefly.
- • Third-party embeds (click-to-load) — the interactive map on our Contact page loads from Google Maps only when you press "Load interactive map", and the video tour on our Waterfront Karen page loads from YouTube (youtube-nocookie.com) only when you press play; until then no request is made to either. Our fonts are served by Google Fonts, which receives your IP address as part of any standard web request.
We do not run advertising trackers, sell data, or operate central user accounts on this site today.
3. Why we process it (lawful basis)
Enquiry data is processed on the basis of your consent and our legitimate interest in responding to prospective clients — replying to the message you sent. Where engagement progresses to a mandate, processing additionally supports contract performance and legal obligations (identity verification, statutory records). You may withdraw consent at any time.
4. How long we keep it
Enquiries are retained while the conversation is active and for a reasonable period thereafter for record-keeping; mandate records are kept as long as law and professional standards require. Browser-local data persists until you clear it — uninstalling nothing, transmitting nothing.
5. Who we share it with
We do not sell or rent personal data. We share only where necessary: our website hosting provider; licensed advocates, valuers and conveyancers working on your mandate; and regulators or courts where the law requires. As regulated offerings (including Keja Tokenize) launch, KYC data will flow solely through licensed processors under written data-processing agreements.
6. Your rights
Kenyan data-protection law gives you rights to access, correct, delete, object to and restrict processing of your personal data, and to lodge a complaint with the Office of the Data Protection Commissioner. To exercise any right, contact us — we will verify and respond within statutory timelines.
7. Security & children
We apply technical and organisational measures appropriate to the sensitivity of what we hold, and we keep what we hold deliberately minimal. Our services are directed at adults; we do not knowingly collect data from children.
8. Changes
We will update this page when our practices change and revise the date above. Material changes to how we process your data will be flagged clearly on the site. This policy is governed by the laws of Kenya.