Privacy Policy
At Nairobi Safe Vault, privacy is not just a policy — it is the foundation of what we do. This page explains what personal data we collect, why we collect it, how we protect it, and the rights you have under the Kenya Data Protection Act, 2019.
Who we are
Nairobi Safe Vault (“we”, “us”, “our”) operates a private safe deposit facility at [Building & Street], Westlands, Nairobi, Kenya. For any question about this policy or your personal data, contact us at [email] or [phone].
What we never collect
We do not know, record or ask what you store inside your box. The contents of your safe deposit box are your private information. This is the foundation of the safe deposit service — and of our business.
What we do collect
- Identity & verification data — your name, national ID or passport number, proof of address, photograph and signature, collected when you rent a box. This is required by law, our insurers and our security procedures.
- Access records — dates and times of vault entry, biometric verification logs and CCTV footage. We keep these to protect your property and everyone else’s.
- Contact details — your name, phone number, email address and message when you use our contact form, book a vault tour or request a quote.
- Payment references — handled by our payment providers (M-Pesa, card processors, banks). We retain only the fact and reference of a payment, never your full card details.
Why we process your data
- To perform our rental agreement with you — box allocation, access control and billing
- To meet legal and regulatory obligations, including KYC and anti-money-laundering requirements
- To keep our facility, your property and our staff secure
- To respond to your enquiries and service requests
- With your consent, to send occasional service updates you can opt out of at any time
Who we share data with
Only where it is genuinely necessary: our insurers, our auditors, regulators and law-enforcement bodies where we are legally compelled, our biometric and security-system providers under strict contractual safeguards, and professional advisers bound by confidentiality. We never sell, rent or trade your personal data.
How long we keep it
- Active customers: for the duration of your rental, plus 1 years
- CCTV footage & access logs: 6 days/months, then automatically overwritten
- Enquiries that do not become rentals: 2 months
How we protect it
Your data is stored on secured systems with access limited to trained, authorised staff — the same discipline we apply to the vault itself. Our facility operates dual-key control, biometric access verification and 24/7 monitoring, and our records are governed by the same security culture.
Your rights under the Kenya Data Protection Act, 2019
You have the right to:
- Access the personal data we hold about you
- Have inaccurate data corrected
- Request deletion where we have no overriding legal basis to retain it
- Obtain a copy of data you have provided to us
- Withdraw consent for marketing communications at any time
To exercise any of these rights, email [email]. We will respond within [X] days. You also have the right to lodge a complaint with the Office of the Data Protection Commissioner (odpc.go.ke).
Cookies & website analytics
Our website uses essential cookies to function and privacy-respecting analytics to understand how the site is used. You can control or delete cookies through your browser settings at any time.
Changes to this policy
We may update this policy from time to time. The “last updated” date above always shows the current version, and material changes will be communicated directly to active customers.
