Privacy Policy

Who Is Responsible for Your Data

REI Hospitality Kenya is the data controller for the personal data described in this policy.

What We Collect, and Why

If You Apply for a Job

We collect your name, email address, phone number, your CV, and any note you add. We use it to assess your application and to put you forward to the employer for that role.

Lawful basis: taking steps at your request before entering into a contract, and your consent for us to share your CV with the employer.

If You Send Us Your CV for the Talent Pool

We collect your name, email address, phone number, your CV, and the kind of work and location you are looking for. We use it to contact you about roles that may suit you.

Lawful basis: your consent, which you can withdraw at any time.

If You Ask Us for an Attachment or an Internship

We collect your name, email address, phone number, your CV, where you are studying, what you are studying, the year you are in, the dates you are free and where you would like to be placed. We use it to find you a placement and to put you forward to a property.

Lawful basis: your consent, which you can withdraw at any time.

If You Request Staff as an Employer

We collect your name, your company name, email address, phone number, location and what you told us about the roles you need. We use it to respond to your enquiry and provide the service.

Lawful basis: taking steps at your request before entering into a contract, and our legitimate interest in responding to business enquiries.

If You Book a Consultation

We collect your name, your property or organisation, email address, phone number, country, the type of business you run, the service you need, how and when you would prefer to meet, and anything you tell us about your situation. We use it to arrange the consultation and to advise you.

Lawful basis: taking steps at your request before entering into a contract, and our legitimate interest in responding to business enquiries.

If You Send Us a Message

We collect your name, email address, phone number and your message, and use them to reply.

Lawful basis: our legitimate interest in responding to enquiries.

When You Browse This Site

We use privacy-friendly analytics that count page visits without setting cookies, without tracking you across websites, and without collecting anything that identifies you personally.

Cookies

This site sets no advertising or tracking cookies. The only cookies used are strictly necessary ones: a session cookie and a security token that make forms work and protect them from misuse. They are deleted when you close your browser or shortly afterwards. Because we set no non-essential cookies, there is no cookie banner to accept or decline.

Who We Share Your Data With

• Prospective employers. If you apply for a role, your CV and contact details are shared with that employer as part of putting you forward. If you are in our talent pool, or you have asked us for an attachment or an internship, we share your CV with an employer or a property only when we are putting you forward for a specific role or placement. We do not circulate CVs to employers who have not asked for candidates. Employers who receive your CV are separate data controllers and handle it under their own policies.
• Our hosting provider, which stores the website and its database on our behalf.
• Our email provider, which delivers notification and confirmation emails.

We do not sell personal data, and we do not share it for advertising.

Where Your Data Is Held

The website, its database and uploaded CVs are hosted in Kenya. Our analytics provider processes anonymous, aggregate page-visit counts outside Kenya; no personal data is involved. If that ever changes, we will update this policy and say so.

How Long We Keep It

When a retention period ends, the record and any CV file are deleted.

How We Protect It

CVs are stored outside the public area of our server, so they cannot be reached by a web address. They can only be opened by authorised REI Hospitality staff after signing in, and every time a CV is opened we record who opened it and when. We never send CVs as email attachments. The site is served over an encrypted connection, sign-in attempts are rate-limited, and access is limited to staff who need it.

What We Deliberately Do Not Ask For

We do not ask for your national ID number, date of birth, gender, marital status, religion or a photograph. None of them is needed to assess an application, and several are sensitive personal data under the Act.

Your Rights

Under the Data Protection Act, 2019 you have the right:

• to be informed of how your data is used, which is what this policy sets out;
• to access the personal data we hold about you;
• to have inaccurate data corrected;
• to have your data deleted;
• to restrict how we process your data;
• to object to processing based on legitimate interests;
• to receive your data in a portable format;
• to withdraw consent at any time, where we rely on consent.

To exercise any of these, email privacy@reihospitality.co.ke. We will respond without undue delay, and in any case within the period required by law. See our data request page for what to include.

Complaints

If you are unhappy with how we have handled your data, tell us first and we will try to put it right. You also have the right to complain to the Office of the Data Protection Commissioner (ODPC), Kenya, at odpc.go.ke.

Changes to This Policy

If we change how we handle personal data we will update this page and change the date at the top. Where the change is significant and we hold your contact details, we will tell you.