Privacy Policy

1. Who We Are

Brrd is a marketplace for luggage storage and short stays, incorporated in Kenya. Our registered address is Nairobi, Kenya. For privacy matters, contact us at privacy@brrd.co.ke.

2. Data We Collect

• Account information: name, phone number, and/or email address provided at registration.
• Booking data: check-in/check-out times, number of bags or guests, and booking history.
• Payment data: M-Pesa transaction references (we do not store card numbers or M-Pesa PINs).
• Location data: approximate location used to show nearby listings (only with your permission).
• Device & usage data: browser type, pages visited, and interaction events collected via PostHog analytics.
• Communications: messages you send to support or hosts through the platform.

3. How We Use Your Data

• To create and manage your account.
• To process bookings and facilitate payments via M-Pesa (IntaSend).
• To generate and verify QR codes for check-in.
• To send booking confirmations, receipts, and service updates by SMS or email.
• To improve our platform through anonymised analytics.
• To comply with legal obligations and prevent fraud.

4. Legal Basis for Processing

We process your data on the following grounds:

• Contract performance: to fulfil your bookings.
• Legitimate interests: to improve our service and prevent fraud.
• Legal obligation: to comply with Kenyan law.
• Consent: for marketing communications (you may withdraw at any time).

5. Third-Party Services

• Supabase — database and authentication (servers in EU).
• IntaSend — M-Pesa payment processing (Kenya).
• PostHog — anonymised product analytics.
• Vercel — web hosting (global CDN).

All third parties are contractually bound to protect your data and may not use it for their own purposes.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Booking records are kept for 7 years for tax and legal compliance. You may request deletion of your account at any time (see Section 8).

7. Cookies & Tracking

We use essential cookies to keep you logged in and remember your preferences. Analytics cookies (PostHog) are used only with your consent. You may disable non-essential cookies in your browser settings at any time.

8. Your Rights

Under the Kenya Data Protection Act, you have the right to:

• Access a copy of the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data ("right to be forgotten"), subject to legal retention requirements.
• Object to or restrict processing in certain circumstances.
• Data portability — receive your data in a machine-readable format.
• Withdraw consent for marketing at any time.

To exercise any right, email privacy@brrd.co.ke. We will respond within 30 days.

9. Children's Privacy

Brrd is not intended for users under 18. We do not knowingly collect data from minors. If you believe a minor has registered, please contact us immediately.

10. Changes to This Policy

We may update this policy periodically. Significant changes will be communicated by email or in-app notification. Continued use of Brrd after the effective date constitutes acceptance.

11. Contact & Complaints

For privacy concerns, email privacy@brrd.co.ke. If you are unsatisfied with our response, you may lodge a complaint with the Office of the Data Protection Commissioner of Kenya at odpc.go.ke.