Privacy
Last updated September 2026
Draft, not legal advice. This page describes how the site currently works. It has not been reviewed by a lawyer and is not tailored to Kenyan consumer or data protection law. Have counsel review it before the site takes real bookings.
What we collect when you request a stay
The booking form asks for your name, email address, phone number, dates, room and anything you write in the notes field. We need all of it to hold a room and to reach you about it. It is stored in our own database and is not sold, rented, or shared with advertising networks.
What the website measures
We keep a first-party record of how the site is used — pages viewed, which room filters are used, whether a booking was started and finished. These records carry a random identifier stored in your browser, not your name or email, and events are automatically deleted after 90 days.
There is no third-party analytics platform, no advertising pixel, and no cross-site tracking. Clearing your browser storage resets the identifier. If you would rather not be counted at all, the site honours that — we can add a visible opt-out control on request.
Cookies
The public site sets no advertising or analytics cookies. One cookie is set when a member of staff signs into the reservations dashboard; it is httpOnly, expires after seven days, and exists only to keep them signed in.
How long we keep booking records
Booking records are kept for as long as we need them for accounting and for handling any dispute about a stay. Ask us and we will tell you what we hold about you, correct it, or delete it where we are not required to keep it.
Who to ask
Email reservations@theleishen.com with anything about your data and we will answer it.