Last updated: 18 September 2026

1. Who is the controller?

The controller for personal data processed on this website is:

JS Landmark Homes Ltd.
5th Avenue, Nyali
Mombasa, Kenya
Email: info@mombasa-homes.com
Phone: +254 714 66 5352

2. What data do we process on this website?

This website does not use cookies and does not embed any third-party analytics or tracking scripts in your browser. When you load a page, no personal data is sent to any third party directly by the site code.

However, the following data is processed as part of normal web-hosting operations:

• Server access data (IP address, user-agent, requested URL, timestamp, response status). This data is handled by our hosting provider Amazon Web Services, Inc. (AWS) for operational and security purposes (e.g. defending against abuse and attacks). We do not enable extended access logging ourselves and do not retain these records beyond what AWS requires for service operation.
• Aggregate, anonymized visit statistics. We derive aggregate counts of page visits and outbound Airbnb-link clicks, broken down by apartment/page, country, operating system, and referrer, from the server access data above. These statistics never include an IP address, user-agent string, or any other individual-level identifier, only rounded counts per category per day, and are used solely to understand which apartments and pages attract interest.

Legal basis: Art. 6(1)(f) GDPR — our legitimate interest in providing a secure and functional website.

3. Contacting us

If you contact us via the channels listed on our Contact page (email, phone, WhatsApp), the personal data you send us (such as your name, email address, phone number, and the content of your message) will be processed for the purpose of answering your inquiry. We do not use this data for any other purpose and do not share it with third parties unless required by law or necessary to fulfil your request (for example, coordinating a booking).

Legal basis: Art. 6(1)(b) GDPR (steps prior to entering into a contract) and Art. 6(1)(f) GDPR (our legitimate interest in responding to inquiries).

Retention: We retain inquiry messages for up to 3 years after the last contact, longer where tax or commercial law requires. Messages that lead to a booking are retained for the duration of the booking relationship and afterwards as required by applicable tax and commercial law.

4. Third parties we link to

Our website links out to third-party services. We do not control these services and their own privacy policies apply once you follow a link:

• Airbnb — when you click an AirBNB link on this site (including the "Check Availability on AirBNB" button on an apartment page, which passes through a redirect on our own domain that records an anonymized click count for that apartment before forwarding you), you are sent to Airbnb, Inc. Your interactions with Airbnb are governed by Airbnb's Privacy Policy.
• WhatsApp (Meta Platforms, Inc.) — when you click the WhatsApp link, your conversation is handled by WhatsApp and governed by WhatsApp's Privacy Policy.

5. Hosting and international transfers

Our website is hosted on Amazon Web Services (AWS) using Amazon S3 and Amazon CloudFront. The origin S3 bucket is located in the Stockholm region (eu-north-1), inside the European Economic Area. CloudFront edge locations used to deliver the site are restricted to North America and Europe.

AWS is a US-based processor. Where personal data is transferred outside the European Economic Area, we rely on AWS's GDPR Data Processing Addendum and the European Commission's Standard Contractual Clauses, which AWS incorporates into its service terms.

6. Your rights

Under the GDPR you have the following rights regarding personal data we hold about you:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure / “right to be forgotten” (Art. 17 GDPR)
• Right to restrict processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to withdraw consent at any time, where processing is based on consent (Art. 7(3) GDPR)

To exercise any of these rights, contact us at info@mombasa-homes.com.

You have the right to lodge a complaint with your local EU/EEA data protection supervisory authority. A list of authorities is available at https://edpb.europa.eu/about-edpb/about-edpb/members_en.

7. Changes to this policy

We may update this privacy policy from time to time. The current version is always available at this URL. Material changes will be announced on the website prior to taking effect.