Privacy Policy
Last updated: 6 November 2026
This policy explains how BebaPloti (“we”, “us”) collects and uses personal data on bebaploti.co.ke, in line with the Kenya Data Protection Act, 2019.
1. Who we are
BebaPloti is operated by [Legal business name] of Nairobi, Kenya, which is the data controller. Contact us at info@bebaploti.co.ke or on 0708 375 334.
2. What we collect
- Account details: your name, email address, phone number and password. We store passwords only in scrambled form.
- Listings: the details and photos you publish about land for sale. These are public.
- Documents: title deed copies, official searches, survey maps or ID copies you upload so we can review a listing. These are private and visible only to you and our staff.
- Messages you send to other users through the site.
- Payment details: the phone number you pay from, the amount, and the M-Pesa receipt number. We never see or store your M-Pesa PIN.
- Technical data: your IP address, browser type and basic server logs, and one essential session cookie that keeps you logged in.
3. Why we use it
- To create your account and run the marketplace, including showing listings and passing messages between buyers and sellers.
- To process payments for listings, featured boosts, subscriptions and verification.
- To review listings and documents, prevent fraud and enforce our Terms and Conditions.
- To send service emails, such as a new-message alert or a listing decision.
- To meet legal, tax and accounting obligations.
Our bases for this are performing our contract with you, our legitimate interest in running a safe marketplace, legal obligations, and your consent where we ask for it, for example when you choose to show a WhatsApp button on your listings.
4. What other people can see
A live listing shows its details, photos and the seller’s name. Your email address is never shown. Your phone number is used for the “Chat on WhatsApp” button only if you leave that option switched on for a listing. Your documents are never shown to buyers.
5. Who we share data with
- Safaricom (M-Pesa) to process payments.
- Hosting and email providers that run the website for us.
- WhatsApp (Meta) if you tap a chat button. Their own privacy terms then apply.
- Authorities and advisers where the law requires or to protect our rights.
We do not sell your personal data. Some providers may process data outside Kenya; where they do, we expect them to protect it to a comparable standard.
6. Cookies
We use one essential session cookie to keep you logged in and protect forms. We do not currently use advertising or analytics cookies. If that changes, we will update this policy.
7. How long we keep it
We keep your account while it is active and delete it on request. When a listing is deleted, its private documents and messages are deleted with it. We keep payment records for as long as Kenyan tax and accounting law requires.
8. Your rights
You may ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or withdraw your consent. Email us and we will respond within the time the law allows. If you are unhappy with how we handle your data, you can complain to the Office of the Data Protection Commissioner at odpc.go.ke.
9. Security
We use access controls, encrypted connections, hashed passwords and private storage for documents. No online service is completely secure, so please use a strong, unique password and never share it.
10. Children
BebaPloti is for people aged 18 and over. We do not knowingly collect data from children.
11. Changes
We may update this policy. The date at the top shows when it last changed.