Privacy notice · Adam AHB Souq

Who we are

Adam AHB Souq is a service of ADAM. We are responsible (the data controller) for the personal data you give us when you book a house or apply for a mortgage through this website.

What we collect

Identity: your name, national ID number, KRA PIN and date of birth.
Contact: your phone number and email address.
Family: marital status, and your spouse and next of kin if you give them.
Work and income: employer, service number, salary and deductions, used for the affordability check.
Documents you upload, and the records of your bookings, mortgage applications, deposits and allocation.
Technical data: IP address, browser and sign-in records, used for security.

Why we use it

To hold the house you book, check your eligibility and affordability, and keep one active booking per national ID.
To prepare your mortgage application and send it to the partner bank you choose, and to record what the bank decides.
To record your deposit and loan disbursement as reported by the bank, allocate houses and issue offer letters.
To send you SMS and email messages about your booking.
To prevent fraud and meet our legal obligations.
News about new projects only if you agreed to receive it.

Who we share it with

The partner bank you choose, only when you submit a mortgage application.
Service providers who work for us: SMS and email delivery, and hosting. They may only use your data to provide that service.
Authorities, when the law requires it.
We do not sell your data. The public housing dashboard shows only totals, never personal data.

Where it is kept and how it is protected

Your data is stored on secure servers in the European Union, with the safeguards the Data Protection Act requires for transfers outside Kenya.
Only authorised staff can see it, they sign in with two-step verification, ID numbers are stored encrypted and every change is logged.

How long we keep it

For as long as needed for your booking, allocation and purchase, and afterwards as long as the law requires. Bank export files are deleted after 30 days and one-time codes as soon as they expire.

Your rights

You may ask to see, correct or delete your data, object to its use, withdraw your consent, or receive a copy of it. Withdrawing consent does not affect what was done before.
If you are not satisfied with our answer, you may complain to the Office of the Data Protection Commissioner (www.odpc.go.ke).

Contact us

For any question or request about your personal data, contact the booking office of your project.