• 0780 977 765
BOOK NOW

Privacy Policy

Royal Canaan Nairobi Hotel (referred to as “we”, “our”, or “us”) is committed to upholding the privacy and confidentiality of everyone who interacts with us. This Privacy Policy explains how we obtain, handle, store, disclose, and protect your personal information when you engage with us through our websites, mobile applications, physical premises, or digital platforms.

By choosing to use our services or access our website you are indicating that you understand and agree to the terms set out in this Privacy Policy. If you do not accept any part of this Policy, please discontinue use of our websites and services.

1. Scope

This Privacy Policy applies to all guests, visitors, and users of Royal Canaan Nairobi Hotel and governs both in-person interactions and engagements made through our online platforms.

2. Data We Collect

We may collect and process personal information in the following categories:

  • Identification Information: Name, email address, phone number, postal address, national ID or passport number, and nationality.
  • Transaction Information: Reservation details, payment and billing records, and service preferences.
  • Technical Information: Device details, browser type, operating system, IP address, and similar identifiers.
  • Interaction Information: Chatbot conversations, feedback forms, reviews, and communications with our support teams.
  • Usage Information: Browsing behaviour, navigation patterns, search activity, and interactions tracked via cookies and analytics tools.

3. How Data Is Collected

  • Information You Provide Directly: When completing forms, making reservations, subscribing to newsletters, or contacting us.
  • Automated Digital Technologies: Through cookies, analytics tools, and session monitoring systems.
  • Third-Party Systems and Services: Including booking platforms, payment processors, and customer support tools.
  • Linked Platforms and Applications: Via social media integrations and connected mobile applications.

4. Legal Basis for Processing Personal Data

  • Consent: For newsletters and promotional communications.
  • Contractual Necessity: To manage reservations and hospitality services.
  • Legal Obligation: Compliance with tax and regulatory requirements.
  • Legitimate Interest: Service improvement, analytics, and security.

5. Purposes of Data Use

  • Managing bookings, check-ins, payments, and service requests.
  • Sending confirmations, invoices, promotions, and feedback requests.
  • Personalizing guest experiences and marketing communications.
  • Analyzing platform usage to improve services.
  • Responding to enquiries, reviews, and complaints.
  • Complying with legal and regulatory obligations.
  • Processing job applications, event registrations, and administrative requests.

6. Cookies and Tracking Technologies

Our websites use first-party and third-party cookies (including Google Analytics) to enhance user experience and analyze usage. You may disable cookies through your browser settings, though this may limit site functionality.

7. Data Sharing

We do not sell personal data. However, data may be shared with:

  • Online booking and payment service providers.
  • Legal, regulatory, or governmental authorities.
  • Professional advisors, auditors, and consultants.
  • Marketing and advertising partners.
  • Affiliated hotels or group companies.

8. Retention of Data

Personal data is retained only as long as necessary for service delivery, contractual obligations, or legal compliance. Certain records, such as tax-related documents, may be retained for at least seven years in accordance with Kenyan law.

9. Data Security

We implement industry-standard security measures including encryption, firewalls, and access controls to protect personal data. However, no internet transmission is entirely secure.

10. Data Subject Rights

You may exercise your rights under the Data Protection Act, 2019, including:

  • Right to access personal data
  • Right to correction or rectification
  • Right to deletion (“right to be forgotten”)
  • Right to withdraw consent
  • Right to data portability
  • Right to restrict processing

11. Third-Party Services and Embedded Content

Embedded content from third parties may behave as if you visited their website directly. We do not control third-party data practices.

12. Children’s Privacy

We do not knowingly collect data from individuals under 18 years of age. If such data is identified, it will be deleted promptly.

13. Limitation of Liability

Royal Canaan Nairobi Hotel shall not be liable for damages arising from third-party misuse, plugin failures, or unauthorized access beyond our reasonable control.

14. Sale of Business or Transfer of Ownership

In the event of a merger, acquisition, or sale, personal data may be transferred to the acquiring entity subject to this Privacy Policy.

15. Updates to This Privacy Policy

We may update this Privacy Policy periodically. Continued use of our services constitutes acceptance of the revised policy.

16. Governing Law

This Privacy Policy is governed by the laws of the Republic of Kenya, with exclusive jurisdiction of Kenyan courts.

17. Contact Us

If you have questions, requests, or complaints relating to your personal data or this Privacy Policy, please contact