Effective Date: 24 September 2026
Last Updated: 24 September 2026
Golden Mind Booking Ltd respects the privacy of customers, website visitors and other individuals whose personal information we process.
This Privacy & Data Protection Policy explains what personal information we collect, why we collect it, how we use it, how we protect it and the rights available to individuals under applicable Kenyan data-protection law.
Kenya's Data Protection Act, 2019 establishes the legal framework governing the processing of personal data, while the Office of the Data Protection Commissioner (ODPC) oversees implementation and enforcement.
Golden Mind Booking Ltd
Address: Staroot Residency, Wood Avenue, Nairobi, Kenya
Email: admin@goldenmindbooking.co.ke
Telephone/WhatsApp: +254 722 115 423
Country: Kenya
For purposes of applicable data-protection law, Golden Mind Booking Ltd may act as a data controller in relation to personal information collected and used for its own business purposes.
Depending on how you interact with us, we may collect:
When you make an online payment, payment information may be processed by our authorised payment service provider.
Where the payment provider processes card information directly, Golden Mind Booking Ltd does not intend to collect or store complete payment-card numbers or CVV/CVC security codes on its own systems.
Payment Provider: [INSERT PAYMENT PROVIDER NAME]
Customers should refer to the applicable payment provider's privacy notice for information about its processing of payment information.
When you use our website, we may collect technical information such as:
We may collect information when you:
We may use personal information to:
Personal data will only be processed where there is a lawful basis for doing so.
Depending on the circumstances, this may include:
The Data Protection Act recognises, among other grounds, consent and processing necessary for contractual performance, legal obligations and certain legitimate interests.
We may share relevant information with third parties where reasonably necessary to operate our business.
These may include:
We will not sell customers' personal information as a business asset.
Where third parties process personal information on our behalf, we will take reasonable steps to ensure appropriate safeguards are in place.
Online card payments may be processed through an authorised third-party payment service provider.
Golden Mind Booking Ltd does not ask customers to send full payment-card details by email, WhatsApp or telephone.
Where the payment provider collects payment-card information directly, that information may be processed according to the provider's own privacy policy and security procedures.
Payment Provider: [INSERT NAME]
Golden Mind Booking Ltd takes reasonable technical and organisational measures to protect personal information against:
No internet-based system can be guaranteed to be completely secure. Customers should therefore take reasonable steps to protect their own accounts, devices and communications.
The Data Protection Act requires appropriate safeguards and recognises obligations relating to confidentiality and protection of personal information.
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including where necessary to:
When personal information is no longer required, we will take reasonable steps to securely delete, anonymise or otherwise dispose of it in accordance with applicable requirements.
The Data Protection Act requires personal data to be kept in identifiable form no longer than necessary for the purposes for which it was collected.
Our website may use cookies and similar technologies.
Cookies may be used to:
Where required, the website will provide appropriate information or controls relating to cookies.
Where permitted by law, Golden Mind Booking Ltd may send customers information about services, offers or promotions.
Customers may unsubscribe from marketing communications by using the unsubscribe mechanism provided or by contacting us.
We will not make continued marketing a condition of purchasing a service where such consent is required.
Our services are intended to be booked by adults.
We do not knowingly collect personal information from children except where such information is reasonably necessary in connection with an accommodation booking and is provided by an appropriate adult or guardian.
Some service providers used by Golden Mind Booking Ltd may process information outside Kenya.
Where personal information is transferred outside Kenya, Golden Mind Booking Ltd will take reasonable steps to ensure that applicable legal requirements and appropriate safeguards are addressed.
The Data Protection Act places conditions on transfers of personal data outside Kenya, including appropriate safeguards or consent in applicable circumstances.
Subject to applicable law and any lawful limitations, individuals may have rights including:
These rights are recognised under Kenya's data-protection framework.
To make a data-protection request, contact:
Golden Mind Booking Ltd
Email: admin@goldenmindbooking.co.ke
Telephone/WhatsApp: +254 722 115 423
Postal/Physical Address: Staroot Residency, Wood Avenue, Nairobi, Kenya
Please provide enough information for us to identify the relevant request and respond appropriately.
We may need to verify the identity or authority of the person making a request before releasing or changing personal information.
If you believe that your personal information has been processed in a manner inconsistent with applicable data-protection requirements, please contact us first so that we can investigate and attempt to resolve the matter.
Individuals may also have the right to complain to the Office of the Data Protection Commissioner (ODPC).
The ODPC provides mechanisms for data subjects to exercise their rights and make complaints.
We may update this Privacy & Data Protection Policy from time to time.
The latest version will be published on this website.
Last Updated: 24 September 2026