Privacy Policy

Uncle Bob's (“we”, “us”) operates unclebobsny.com and the 6-room cottage retreat at Lusoi Farm, Nanyuki, Kenya. We are the data controller for personal data collected via this site. Contact: info@unclebobsny.com · +254 728 704 493 · Lusoi Farm, P2JQ+64 Ndathi, Nanyuki.

1. Information we collect

• Contact form: name, email, phone (optional), subject, message, timestamp, IP-derived rate-limit key, and reCAPTCHA token. Honeypot field is discarded.
• Booking flow: dates, guests, rooms and any payment data you enter handled directly by our booking partner ReservePort (and Pesapal where applicable). We do not store card numbers on our servers.
• Technical: IP address, device/browser, and anonymised analytics if enabled. Server logs retained briefly for security.

2. Why we use it (lawful basis)

• To reply to enquiries and manage bookings: contract / legitimate interest.
• To protect against spam/abuse via rate limiting, honeypot and Google reCAPTCHA v2: legitimate interest.
• To improve the site and meet legal obligations: legitimate interest / legal obligation.

3. Sharing

We share data only as needed:

• ReservePort / Pesapal: booking & payments.
• Google: reCAPTCHA (siteverify) and Maps embeds (subject to Google's privacy terms). reCAPTCHA checks your interaction to distinguish humans from bots.
• Authorities if required by Kenyan law.

We do not sell your personal data and we do not send marketing emails unless you explicitly opt in.

4. International transfers

Booking providers may process data outside Kenya (including EU/US). Where required we rely on contractual safeguards and the provider's compliance measures.

5. Retention

• Enquiries: up to 24 months after last correspondence, then deleted or archived.
• Booking records: retained per Kenyan tax/accounting law (typically 7 years).
• Logs: 30–90 days unless needed for security investigation.

6. Your rights

Under Kenya's Data Protection Act (2019) and, where applicable, GDPR, you may request access, correction, deletion, restriction, or objection, and withdraw consent at any time. Contact info@unclebobsny.com. You may also lodge a complaint with the Office of the Data Protection Commissioner (Kenya).

7. Cookies

We use essential cookies for language preference and booking context, and reCAPTCHA's necessary cookies. Any analytics cookies are non-essential and only set if you consent via a banner (if shown). You can control cookies in your browser settings.

8. Security

We use TLS, rate limiting, origin checks and time-to-submit validation. No system is 100% secure. Please avoid sending sensitive ID or payment data via the contact form; use the secure booking flow or phone us.

9. Children

This site is not directed at children and we do not knowingly collect children's data except as part of a family booking made by an adult.

10. Changes

We may update this policy. Material changes will be reflected by the “Last updated” date above. Continued use after changes constitutes acceptance.

11. Contact

Questions? info@unclebobsny.com · Lusoi Farm, Nanyuki · Contact form / WhatsApp.