1. Introduction
Fuchsia Gardens (“Fuchsia Gardens”, “we”, “our”, or “us”) is committed to protecting the privacy, confidentiality, and security of personal data in accordance with the Constitution of Kenya, the Data Protection Act, 2019 (the “Act”), and all applicable regulations issued by the Office of the Data Protection Commissioner (ODPC).
This Privacy Policy describes how we collect, process, store, use, and protect personal data obtained through our website and venue rental services.
By accessing our website or engaging our services, you acknowledge that you have read and understood this Privacy Policy.
2. Data Controller
For purposes of the Data Protection Act, 2019, Fuchsia Gardens acts as a Data Controller in relation to personal data collected through its website and business operations.
Contact Details:
Email: info@fuchsia-gardens.co.ke
Phone: +254 733 836 459
Physical Location: Nairobi, Kenya
3. Personal Data We Collect
We collect personal data that is adequate, relevant, and limited to what is necessary for the purposes outlined in this Policy.
3.1 Personal Identification Information
- Full name
- Email address
- Telephone number
- Physical address (where applicable)
- Identification details (if required for contractual or security purposes)
3.2 Event and Booking Information
- Type of event
- Event date
- Number of guests
- Special requirements
- Payment and billing information
3.3 Technical and Usage Data
- IP address
- Device type and browser information
- Website usage data
- Cookies and tracking information
4. Lawful Basis for Processing
We process personal data strictly in accordance with the lawful bases provided under the Data Protection Act, 2019, including:
- Consent – Where you have explicitly consented to processing (e.g., marketing communications).
- Contractual Necessity – Where processing is necessary to perform a contract (e.g., event booking and venue hire).
- Legal Obligation – Where processing is required by law or regulatory authorities.
- Legitimate Interests – Where processing is necessary for our legitimate business interests, provided such interests do not override your rights and freedoms.
5. Purpose of Processing
We collect and process personal data for the following purposes:
- To respond to inquiries and booking requests
- To manage event reservations and contracts
- To process payments and maintain financial records
- To provide customer support
- To improve our website and service delivery
- To send marketing communications where consent has been obtained
- To comply with legal and regulatory requirements
We shall not process personal data for purposes incompatible with those stated above without obtaining further consent where required.
6. Data Sharing and Disclosure
We do not sell, lease, or trade personal data to third parties.
Personal data may be shared only:
- With authorized service providers (e.g., payment processors, IT support providers) under strict confidentiality obligations
- Where required by law, court order, or regulatory authority
- To protect our legal rights or prevent fraud
All third parties engaged by us are required to comply with applicable data protection laws.
7. International Data Transfers
Where personal data is transferred outside Kenya (for example, through cloud hosting services), we ensure that appropriate safeguards are implemented in accordance with the Data Protection Act, 2019 to ensure an adequate level of protection.
8. Data Retention
We retain personal data only for as long as necessary to:
- Fulfill contractual obligations
- Comply with statutory retention requirements
- Resolve disputes
- Enforce legal agreements
Once personal data is no longer required, it will be securely deleted or anonymized.
9. Data Security Measures
Fuchsia Gardens implements appropriate technical and organizational measures to safeguard personal data against:
- Unauthorized access
- Accidental loss
- Destruction or damage
- Alteration or disclosure
Such measures may include secure servers, password-protected systems, access controls, and secure payment gateways.
10. Data Subject Rights
Under the Data Protection Act, 2019, you have the right to:
- Be informed of the use of your personal data
- Access your personal data
- Object to the processing of all or part of your personal data
- Request correction of false or misleading data
- Request deletion of personal data
- Withdraw consent at any time (where processing is based on consent)
- Lodge a complaint with the Office of the Data Protection Commissioner (ODPC)
Requests to exercise these rights should be submitted in writing to the contact details provided above.
11. Cookies Policy
Our website may use cookies and similar technologies to:
- Enhance user experience
- Analyze website traffic
- Improve website performance
You may disable cookies through your browser settings. However, doing so may affect website functionality.
12. Children’s Data
Our services are not directed toward individuals under the age of 18. We do not knowingly collect personal data from minors without parental or guardian consent.
13. Amendments to this Policy
We reserve the right to amend this Privacy Policy from time to time to reflect changes in legal requirements or business practices. Updated versions will be published on our website with a revised effective date.
14. Complaints
If you believe that your personal data has been handled in a manner inconsistent with the Data Protection Act, 2019, you may:
- Contact us directly to seek resolution; or
- Lodge a complaint with the Office of the Data Protection Commissioner (ODPC), Kenya.