This policy explains how The Rennez ("we") handles personal data in StayLedger: the people who use it (consultancy staff and hotel partners), and the guests and leads whose details consultancies keep in it. It follows the Kenya Data Protection Act, 2019 and its Regulations.
For account data (who signs up and uses StayLedger, billing and support) we are the data controller.
For guest data that a consultancy stores in its workspace, the consultancy is the controller and we are its processor. To exercise your rights over guest data, contact the consultancy that messaged you. Every marketing message carries an unsubscribe link.
We do not sell personal data. We share it only with providers that help run StayLedger, under contracts that protect it:
Some providers process data outside Kenya. Where they do, we rely on appropriate safeguards under section 48 of the Data Protection Act, such as contractual protections and providers with recognised security standards.
Account and workspace data is kept while the subscription is active and for at least 90 days afterwards, then deleted after we warn the owner. Billing records are kept for 7 years for tax purposes. Backups roll over within 14 days. A consultancy can erase a guest at any time; booking amounts stay in its accounts without the guest's identity.
Data is sent over HTTPS, passwords are hashed, access is limited by role, two-step sign-in is available (and can be required), every change is logged, and the database is backed up daily. If a breach puts your data at risk we will notify affected customers and the Data Commissioner as the law requires, within 72 hours of becoming aware of it.
Under section 26 of the Data Protection Act you have the right to be informed, to access your data, to object to its processing, to have it corrected or deleted, and to receive it in a portable format. Workspace admins can export everything from StayLedger at any time. Write to us to exercise any right; we reply within 30 days. You can also complain to the Office of the Data Protection Commissioner (odpc.go.ke).
StayLedger uses one essential cookie to keep you signed in. We do not use advertising or third-party tracking cookies. Campaign emails contain a small image to count opens; mail apps that block images do not report opens.
StayLedger is for businesses and is not meant for anyone under 18.
We will post any update here with a new effective date, and tell workspace owners about significant changes. Questions: The Rennez, Nairobi, Kenya.