Effective Date: October 2025
1. Introduction and Scope
AVC Company Limited t/a Mnarani Beach Club (“Mnarani,” “we,” “our,” or “us”) is committed to protecting your privacy.
This Privacy Policy explains how we collect, use, share, and protect your personal information when you visit our website at https://www.mnaranibeachclub.com, make a booking, or interact with us in any other way.
This Policy is issued in compliance with the Data Protection Act, 2019 of Kenya and its subsidiary regulations.
If you do not agree with this Policy, please do not use our website or services.
2. Data Controller and Contact Information
The Data Controller responsible for your personal information is:
AVC Company Limited t/a Mnarani Beach Club
Address: Mnarani Beach Club, Mombasa-Malindi Highway, 80108 Kilifi, Kenya, KE
Email: antoinettedt@mnaranibeachclub.com
If you have any questions or concerns about this Policy or your personal information, you may contact our Data Protection Officer at the above email address.
3. Information We Collect
We may collect the following types of personal information from you:
- Identification and contact details – such as your name, email address, phone number, and postal address.
- Booking and stay information – such as reservation dates, room preferences, special requests, and payment details.
- Account and communication data – when you contact us via email, forms, or social media.
- Marketing and preference data – such as your subscription to newsletters or participation in promotions.
- Device and technical data – including IP address, browser type, and cookie identifiers.
- Survey or feedback data – if you choose to respond to guest satisfaction surveys.
We do not intentionally collect sensitive personal data (such as health or biometric information) unless required to provide specific services and you explicitly consent to it.
4. How We Collect Information
We collect personal information in several ways, including:
- Directly from you when you make a booking, contact us, subscribe to our newsletter, or complete a form.
- Automatically when you browse our website through cookies and analytics tools.
- From third parties such as booking partners, travel agents, or payment processors assisting in your reservation.
5. How We Use Your Information
We process your personal data for the following purposes, in accordance with the lawful bases set out in the Kenya Data Protection Act:
| Purpose | Lawful Basis |
|---|---|
| To process and confirm your booking, manage your stay, and provide requested services | Performance of a contract |
| To respond to inquiries, feedback, or complaints | Legitimate interest |
| To comply with legal and accounting obligations | Legal obligation |
| To send marketing communications or newsletters (where you have opted in) | Consent |
| To conduct guest satisfaction surveys and service improvement | Legitimate interest |
| To manage security, fraud prevention, and IT systems | Legitimate interest |
| To personalise website experience and advertising (including social media campaigns) | Consent |
You may withdraw your consent at any time by emailing antoinettedt@mnaranibeachclub.com or by clicking unsubscribe on any of the e-mails.
6. Sharing and Disclosure of Information
We may share your personal information in the following circumstances:
- Service providers and partners who assist in hosting, payment processing, IT support, or marketing, under data-processing agreements that ensure confidentiality and compliance with Kenyan law.
- Regulatory or governmental authorities if required by law or for the protection of legal rights.
- Business transfers if part of our business is restructured, merged, or sold.
We do not sell, rent, or trade your personal information to unaffiliated third parties.
7. International Transfers
Where it is necessary to transfer your information outside Kenya (for example, to cloud service providers or reservation systems hosted abroad), we ensure that such transfers comply with the requirements of the Data Protection Act, 2019, including the use of appropriate safeguards such as contractual clauses or adequacy decisions by the Data Commissioner.
8. Data Retention
We retain your personal information only for as long as is necessary to fulfil the purposes for which it was collected or as required by applicable law, including tax or accounting regulations.
After the retention period, your data will be securely deleted or anonymised.
9. Your Rights
Under the Kenya Data Protection Act, 2019, you have the right to:
- Request access to your personal data;
- Request correction or deletion of your data;
- Object to or restrict processing;
- Withdraw consent (where processing is based on consent);
- Request data portability;
- Lodge a complaint with the Office of the Data Protection Commissioner.
10. Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your browsing experience and understand how our website is used. Cookies may:
- Enable website functionality;
- Remember your preferences;
- Collect statistical and analytical data;
- Support marketing campaigns.
You may manage or disable cookies through your browser settings. However, doing so may limit website functionality.
11. Marketing and Communications
If you subscribe to our newsletter or consent to receive marketing messages, we may contact you about our services, promotions, or offers. You can opt out of receiving such communications at any time by clicking the unsubscribe link in our emails or by contacting antoinettedt@mnaranibeachclub.com.
12. Security Measures
We employ reasonable technical and organisational measures to safeguard your personal data from unauthorised access, loss, misuse, or alteration.
While we take reasonable precautions, no system is completely secure, and we cannot guarantee absolute security of your information transmitted online.
13. Children’s Privacy
Our website and services are not directed to children under 18 years of age. We do not knowingly collect personal information from minors without appropriate consent.
14. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Updates will be posted on our website with a revised effective date.
15. Contact Us
For any questions, complaints, or requests regarding this Privacy Policy or how we handle your personal data, please contact:
Data Protection Officer
AVC Company Limited t/a Mnarani Beach Club
Address: Mnarani Beach Club, Mombasa-Malindi Highway, 80108 Kilifi, Kenya, KE
Email: antoinettedt@mnaranibeachclub.com