Last updated: 14 October 2026
Who we are
Msingi Africa Ltd, trading as Msingi Engineering Group ("Msingi", "we", "us"), is the data controller for personal data collected through msingi.ke and farajimarijani.ke. Faraji Marijani in Galu, Diani is a Msingi development, so both websites follow this policy.
Msingi Africa Ltd
Applewood Adams, 11th Floor, Suite 1114, Ngong Road, Nairobi, Kenya
Email: enquire@msingi.ke (Faraji Marijani sales: sales@msingi.ke)
Phone and WhatsApp: +254 143 652 519
What this policy covers
This policy covers our two websites, the forms on them, WhatsApp conversations you start from them, and the emails and calls we make when we reply to you. Other websites we link to have their own privacy policies.
The personal data we collect
Information you give us
When you fill in a form or contact us, we collect:
- your name, email address and phone or WhatsApp number;
- what you are interested in, such as a community, a home, a Faraji Marijani plot or villa, or a building or civil project;
- your preferred location, budget range, payment preference, plot of interest and when you would like to visit;
- anything you write in a message to us.
Information collected automatically
- the page you sent a form from;
- technical details our web server records for security, such as your IP address, browser type and the pages requested;
- if you agree to cookies, how you use the websites (Google Analytics) and whether you arrived from one of our adverts (Meta). Our cookie policy explains this.
We do not ask for sensitive personal data such as ID numbers, health information or bank details. Please do not send these through our forms.
How we use your data, and why we are allowed to
Section 30 of the Data Protection Act, 2019 lists the reasons that allow us to process personal data. This table shows which one applies to each use.
| What we use it for | Why we are allowed to |
|---|---|
| Replying to your enquiry, arranging viewings and site visits, and sending the brochure, floor plans or prices you ask for | Steps you ask us to take before a possible contract, and our legitimate interest in responding to you |
| Recording your enquiry in our customer relationship system so the right person follows it up | Our legitimate interest in handling enquiries properly |
| Preparing and managing a sale or building contract if you go ahead | Performing a contract with you, and our legal obligations |
| Measuring how the websites are used with Google Analytics | Your consent, given in the cookie banner |
| Measuring our adverts on Facebook and Instagram, including sending Meta a coded (hashed) copy of your email address and phone number when you send a form | Your express consent, given in the cookie banner (section 37 of the Act) |
| Keeping the websites secure and preventing misuse | Our legitimate interest in running safe websites |
| Meeting legal, tax and accounting requirements | Our legal obligations |
We do not make decisions about you by automated means alone, and we do not sell your personal data. We only send you marketing messages if you ask for them, and you can stop them at any time.
Who we share it with
We share personal data only with the people and companies that help us run these websites and respond to you, and only as much as they need:
- Pinch Africa, which builds and hosts our websites, email and customer relationship system for us, as our data processor;
- Hetzner Online GmbH, which runs the data centre in Germany where those systems are hosted;
- Google, if you accept analytics cookies (Google Analytics), if you choose to show a Google map, and to deliver the fonts our websites use;
- Meta Platforms, if you accept advertising cookies (Meta pixel and Conversions API), and WhatsApp when you choose to chat with us there;
- if you go ahead with a purchase, the advocates, banks and surveyors involved in your transaction;
- government authorities or courts, where the law requires it.
Transfers outside Kenya
Our websites, email and customer relationship system are hosted in Germany, in the European Union, where the General Data Protection Regulation protects personal data to a standard comparable to Kenyan law. Google and Meta may process data in the European Union, the United States and other countries under the contractual safeguards they provide to their business customers.
We transfer your data outside Kenya on the grounds allowed by section 48 of the Data Protection Act, 2019: because those safeguards are in place, and because the transfer is needed to respond to the request you made to us.
How long we keep it
- Enquiries and the notes about them in our customer relationship system: up to two years after our last contact with you, unless you become a client.
- If you buy a plot or home, or engage us to build: for as long as the contract and Kenyan law require, for example for tax and accounting records.
- Analytics data: no longer than the retention period set in Google Analytics, which is at most 14 months.
- Web server logs: for a short period for security, then deleted.
- Your cookie choice: 12 months, after which we ask again.
When we no longer need your data, we delete or anonymise it, as section 39 of the Act requires.
How we protect it
- Both websites use encrypted connections (HTTPS).
- Enquiries can be seen only by the Msingi staff who handle them, through password-protected accounts.
- The copy of your email address and phone number sent to Meta, if you allow it, is hashed so the original cannot be read from it.
- Your cookie choice is recorded without your name or IP address.
No system is completely secure. If a breach affects your personal data, we will notify the Data Commissioner and, where the law requires, you.
Your rights
Under the Data Protection Act, 2019 you have the right to:
- be told how your personal data is used, which is what this policy does;
- access the personal data we hold about you;
- object to our use of all or part of your personal data, including for marketing;
- have false, misleading, out-of-date or incomplete data corrected;
- have data deleted that is false or misleading, or that we are no longer allowed to keep;
- receive your data in a structured, commonly used, machine-readable format and have it sent to another organisation (we respond to these requests within 30 days);
- withdraw your consent at any time, for example through Cookie settings, without affecting what was done before;
- not be subject to a decision based only on automated processing that significantly affects you.
To use any of these rights, email enquire@msingi.ke with the subject "Data request", or write to us at the address above. We may ask you to confirm your identity before we act, and we will reply as quickly as we can and within the time the law allows.
Complaints
If you are unhappy with how we have handled your personal data, please tell us first so we can put it right. You also have the right to complain to the Office of the Data Protection Commissioner (ODPC) at www.odpc.go.ke.
Do you have to give us your data?
No law requires you to give us your details, and you can browse both websites without doing so. If you do not give us your contact details, we cannot reply to your enquiry or arrange a viewing.
Children
Our websites are meant for adults. We do not knowingly collect personal data from children under 18. If you believe a child has sent us their details, contact us and we will delete them.
Cookies
Analytics and advertising cookies stay off unless you agree to them. Our cookie policy lists every cookie we use, and you can change your choice at any time.
Changes to this policy
We will update this page when our practices change, and the date at the top shows when it last changed.