Privacy Policy
Last updated: 1 July 2025 | House Levitika Plus Ltd
1. Introduction
House Levitika Plus Ltd ("Company", "we", "us") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose and safeguard your information when you visit lifestyle.houselevi.com or engage with our travel services. It is issued in compliance with the Kenya Data Protection Act, 2019 (DPA 2019) and the Data Protection (General) Regulations, 2021.
2. Data Controller Information
- Controller: House Levitika Plus Ltd
- Registered Address: Nairobi, Kenya
- Data Protection Officer: dpo@houselevi.com
- General Contact: travel@houselevi.com
3. Personal Data We Collect
- Identity Data: Full name, date of birth, nationality, passport details (where required for travel bookings).
- Contact Data: Email address, phone number, home and billing address.
- Travel Data: Travel preferences, destination history, enquiry details, booking history and travel documentation.
- Financial Data: Payment card details (processed securely via third-party processors; we do not store full card numbers), billing address.
- Health Data (where voluntarily provided): Dietary requirements, accessibility needs or medical conditions relevant to travel arrangements. This is Special Category Data and is processed only with your explicit consent under Section 45 of the DPA 2019.
- Technical Data: IP address, browser type, device identifiers, pages visited, session duration.
- Communications Data: Enquiry messages, preferences and correspondence history.
4. How We Collect Your Data
- Direct interactions: Enquiry forms, bookings, newsletter sign-ups, and direct communications.
- Automated technologies: Cookies and similar tracking technologies. See our Cookie Policy.
- Third parties: Travel partners, airlines, accommodation providers and analytics platforms.
5. Lawful Basis for Processing
- Contract: Processing necessary to arrange and manage your travel booking.
- Legitimate interests: Improving services, fraud prevention, customer communications.
- Consent: Marketing communications, non-essential cookies, processing of Special Category Data (health information).
- Legal obligation: Compliance with Kenyan and international travel regulations, tax law and anti-money laundering requirements.
6. How We Use Your Data
- To process and manage travel enquiries and bookings.
- To communicate itinerary details, booking confirmations and travel updates.
- To share relevant data with hotels, airlines, and tour operators to fulfil your travel arrangements.
- To send marketing communications about new destinations or offers (where you have opted in).
- To personalise your experience and improve our services.
- To comply with immigration, customs and regulatory requirements.
7. Data Sharing
We may share your personal data with:
- Travel partners: Hotels, airlines, ground transport providers and tour operators necessary to fulfil your booking.
- Service providers: Payment processors, IT providers, email platforms.
- Regulatory authorities: Including immigration authorities where required by law.
- ODPC: The Office of the Data Protection Commissioner where required by law.
We do not sell your personal data.
8. International Transfers
Travel bookings inherently involve international data transfers to airlines, hotels and tour operators in destination countries. We take reasonable steps to ensure adequate protections are in place, consistent with Section 48 of the DPA 2019.
9. Data Retention
- Booking and travel records: 7 years (financial and tax compliance).
- Enquiry data (non-booking): 2 years from last contact.
- Marketing preferences: Until you withdraw consent.
- Technical/analytics data: 13 months.
10. Your Rights Under the DPA 2019
You have the right to access, rectify, erase, restrict, port your data, object to processing, and withdraw consent. To exercise these rights contact dpo@houselevi.com. We will respond within 21 days.
You may also lodge a complaint with the Office of the Data Protection Commissioner.
11. Security
We implement appropriate technical and organisational security measures including encryption, access controls and regular security assessments to protect your data.
12. Children
Our services are not directed to persons under 18. Minors travelling with our packages must have a parent or guardian provide consent and data on their behalf. We process minors' data (such as passport information) only to the extent necessary to fulfil the travel booking.
13. Changes to This Policy
We may update this policy periodically. Material changes will be communicated via the website and, where appropriate, by direct communication.
14. Contact
Email: dpo@houselevi.com
Post: Data Protection Officer, House Levitika Plus Ltd, Nairobi, Kenya.