Last updated: 29 April 2026

1. Who is the controller?

The controller for personal data processed on this website is:

JS Landmark Homes Ltd.
5th Avenue, Nyali
Mombasa, Kenya
Email: info@mombasa-homes.com
Phone: +254-714 66 5352

2. What data do we process on this website?

This website does not use cookies, does not run analytics, and does not embed any third-party tracking scripts. When you load a page, no personal data is sent to any third party directly by the site code.

However, the following data is processed as part of normal web-hosting operations:

• Server access data (IP address, user-agent, requested URL, timestamp, response status). This data is handled by our hosting provider Amazon Web Services, Inc. (AWS) for operational and security purposes (e.g. defending against abuse and attacks). We do not enable extended access logging ourselves and do not retain these records beyond what AWS requires for service operation.

Legal basis: Art. 6(1)(f) GDPR — our legitimate interest in providing a secure and functional website.

3. Contacting us

If you contact us via the channels listed on our Contact page (email, phone, WhatsApp), the personal data you send us (such as your name, email address, phone number, and the content of your message) will be processed for the purpose of answering your inquiry. We do not use this data for any other purpose and do not share it with third parties unless required by law or necessary to fulfil your request (for example, coordinating a booking).

Legal basis: Art. 6(1)(b) GDPR (steps prior to entering into a contract) and Art. 6(1)(f) GDPR (our legitimate interest in responding to inquiries).

Retention: We retain inquiry messages for up to 3 years after the last contact, longer where tax or commercial law requires. Messages that lead to a booking are retained for the duration of the booking relationship and afterwards as required by applicable tax and commercial law.

4. Third parties we link to

Our website links out to third-party services. We do not control these services and their own privacy policies apply once you follow a link:

• Airbnb — when you click the AirBNB profile link on the Contact page, you are sent to Airbnb, Inc. Your interactions with Airbnb are governed by Airbnb's Privacy Policy.
• WhatsApp (Meta Platforms, Inc.) — when you click the WhatsApp link, your conversation is handled by WhatsApp and governed by WhatsApp's Privacy Policy.

5. Hosting and international transfers

Our website is hosted on Amazon Web Services (AWS) using Amazon S3 and Amazon CloudFront. The origin S3 bucket is located in the Stockholm region (eu-north-1), inside the European Economic Area. CloudFront edge locations used to deliver the site are restricted to North America and Europe.

AWS is a US-based processor. Where personal data is transferred outside the European Economic Area, we rely on AWS's GDPR Data Processing Addendum and the European Commission's Standard Contractual Clauses, which AWS incorporates into its service terms.

6. Your rights

Under the GDPR you have the following rights regarding personal data we hold about you:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure / “right to be forgotten” (Art. 17 GDPR)
• Right to restrict processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to withdraw consent at any time, where processing is based on consent (Art. 7(3) GDPR)

To exercise any of these rights, contact us at info@mombasa-homes.com.

You have the right to lodge a complaint with your local EU/EEA data protection supervisory authority. A list of authorities is available at https://edpb.europa.eu/about-edpb/about-edpb/members_en.

7. Changes to this policy

We may update this privacy policy from time to time. The current version is always available at this URL. Material changes will be announced on the website prior to taking effect.