Privacy Policy
Mpishire Hospitality ("we", "us") respects your privacy. This policy describes how we collect, use, and safeguard personal data in line with the Kenya Data Protection Act, 2019.
Last updated: 6/14/2026
1. Data We Collect
Contact details (name, phone, email), event details (date, county, venue, guest count, menu preferences, dietary requirements), payment metadata (M-Pesa receipts, card last-4, bank reference), and account data (login email, role).
2. How We Use Your Data
To deliver quotations and contracted services, process payments, communicate about your booking, comply with legal obligations (tax, food safety), and improve our offering. We never sell personal data.
3. Sharing
We share only what is strictly necessary with suppliers (e.g. tents, décor), payment processors (Safaricom M-Pesa, Stripe, banks), and government bodies where required by law.
4. Retention
Booking records are retained for at least 7 years for accounting and tax compliance. Marketing contacts are retained until you unsubscribe.
5. Your Rights
Under the Data Protection Act, you may request access, correction, deletion, or restriction of your personal data, and withdraw consent at any time by emailing privacy@mpishire.co.ke.
6. Security
Data is encrypted in transit (TLS) and at rest. Access is restricted to authorised staff under confidentiality obligations.
7. Cookies
The website uses essential cookies for authentication and anonymous analytics to improve performance.
8. Contact
For privacy queries contact privacy@mpishire.co.ke or visit our office in Nairobi. See also our Terms & Conditions.