Privacy Policy

1. Who We Are

Barguts Tours is the data controller for information collected through this website. Our registered address is Ravine Apartments, Mutarakwa Road, Nairobi, Nairobi, Kenya.

To contact us about this policy or to exercise your data rights:

• Phone: 0707 116 220
• Website: carhirenairobi.co.ke/contact/

2. What Data We Collect

We collect personal data only when you submit an enquiry form on this website. The data collected depends on the form submitted.

Enquiry and booking forms

• Full name
• Phone number
• Email address
• Pickup location and dates
• Vehicle type preference
• Number of passengers
• Additional requirements you choose to provide

Automatically collected data

When you visit this website, our hosting provider records your IP address, browser type, and pages visited in server access logs. These logs are retained for 30 days for security and performance monitoring. We do not use this data to identify individual visitors.

Cookies

This website sets functional cookies required for WordPress to operate. These include a session cookie that expires when you close your browser. We do not set advertising or tracking cookies. If Google Analytics is added in future, this policy will be updated before implementation.

3. Why We Collect Your Data

We do not use your data for marketing unless you have given separate, explicit consent.

4. How Long We Keep Your Data

• Enquiry records — 12 months from the date of enquiry, or the date of the last hire transaction, whichever is later.
• Completed hire records — 7 years, in compliance with Kenya Revenue Authority requirements for financial records.
• Server access logs — 30 days.

After the retention period, data is permanently deleted from our systems and from WPForms (the form platform we use).

5. Who We Share Your Data With

We do not sell your personal data. We share data only with the following service providers, under contractual data processing agreements:

• WPForms — the form platform that receives and stores enquiry submissions. Data is processed on our hosting server.
• Hosting provider — provides the server on which this website and its data are stored. Server located in Kenya or EU region (confirm with your host).
• Google Maps — we embed a Google Maps iframe on the contact page and homepage. When the map loads, Google may collect your IP address. Google's privacy policy applies: policies.google.com/privacy.

We may disclose data if required by Kenyan law or a court order.

6. Your Rights

Under the Kenya Data Protection Act 2019, you have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate data
• Deletion — request deletion of your data (subject to legal retention obligations)
• Object — object to processing based on legitimate interests
• Portability — receive your data in a structured, machine-readable format

To exercise any right, contact us by phone or via the contact page. We will respond within 21 days.

If you are unsatisfied with our response, you may lodge a complaint with the Office of the Data Protection Commissioner (ODPC), Kenya at odpc.go.ke.

7. Data Security

This website is served over HTTPS. Form submissions are transmitted using TLS encryption. Access to the WordPress admin and form data is protected by password authentication.

No data transmission over the internet can be guaranteed 100% secure. If you believe your data has been compromised, contact us immediately at 0707 116 220.

8. Changes to This Policy

We update this policy when our data practices change. The date at the top of this page shows when it was last revised. Continued use of this website after a policy update constitutes acceptance of the revised policy.