Privacy policy

What we collect

• Accounts: your email and verification status. Google sign-in also provides your Google identifier, name and profile picture where available. We store authentication records to keep you signed in; we do not receive your Google password or request access to Gmail, Drive or contacts.
• Saved units: the individual units you save to your account and when you save them. These are private and are not automatically shared with sellers or agents.
• Enquiries: the name, phone, email and message you submit, plus the property you are asking about.
• Technical information: session identifiers, IP address, browser/device information and page-view data used to operate, protect and understand use of the website.

Agent profiles

Agents can save a public name, phone number, agency name and optional logo. These details appear on their shared property pages. Uploaded logos are stored on Cloudflare R2 and served publicly.

How we use and share it

We use your information to provide accounts and saved units, send enquiries, respond to requests and prevent abuse. Processing relies on providing the service you request, legitimate operational interests, legal obligations or consent where required.

Sending an enquiry shares its contents with the listing’s configured contact, such as the developer or agent handling that property, so they can respond. They handle their response and records separately. We do not sell your personal information or add you to marketing lists just because you send an enquiry. Our hosting and database providers, AWS email delivery, Cloudflare logo storage, Google sign-in/maps and PostHog analytics process information for their respective services. We may also disclose information where legally required. Signing in or enquiring does not subscribe you to marketing.

Service emails and marketing

We may send emails needed to provide the services you request, including sign-in codes, security notices, important account or service changes, and responses about your enquiries or support requests. These are service communications, not marketing. Opting out of marketing does not stop necessary service emails.

Creating an account does not by itself give consent to marketing. If we offer optional emails about listings, recommendations or FullyListed news, we will obtain consent where required before sending them. Marketing from us will clearly identify FullyListed as the sender and include an easy way to unsubscribe. You can also contact us to withdraw consent or object to direct marketing. We do not sell or rent contact lists to third-party marketers.

Cookies and analytics

Cookies support sign-in and security. Your tab may remember one requested save for up to 15 minutes while you sign in; it becomes a favorite only after authentication.

When you open an agent’s project link, a cookie remembers that agent for that project for up to 90 days in the same browser. Opening a valid agent link renews this period; another agent’s link replaces the saved contact. The cookie holds a sharing code, not your contact details. Clearing it removes this preference.

When enabled, PostHog collects page views, agent-link visits and shares, contact-button clicks, enquiry-recorded events and technical identifiers, and may use cookies or local storage. Enquiry names, email addresses, phone numbers and messages are not included in these analytics events. We do not enable session recording, automatic click/form capture or identified user profiles. Google Maps may receive technical information when loaded. Google services have their own privacy policy.

You can manage cookies and site storage in your browser; blocking them may affect sign-in. Clearing browser storage does not delete your account.

Storage and security

We retain account information and favorites to provide your account, subject to deletion requests and necessary legal or security retention. Operational records have retention periods based on their purpose. We retain enquiry information only as needed to deliver and support enquiries, address complaints, prevent abuse or meet legal obligations. We store the contact details and message you submit, the property and intended recipient, and email-attempt records. If you are signed in, we also link the enquiry to your account. Sending an enquiry does not create an account or a marketing subscription. Enquiry emails may remain with recipients and email providers under their separate retention practices.

Providers may process data outside Kenya, including in the European Union, subject to applicable transfer requirements. Contact us for details of locations and safeguards. We use access controls and authentication protections, but no system is completely secure.

Your choices

You can browse without an account and remove favorites at any time. Contact us to request access, correction, export or deletion of your information, object to processing, or withdraw consent where applicable. We may verify your identity and explain any legal exceptions. You can also complain to Kenya’s Office of the Data Protection Commissioner.

Contact and updates

Email [email protected] or write to Plotwise Limited, ABC Place, 10th Floor, Waiyaki Way, Nairobi, Kenya.

We will update the date above when this policy changes and provide additional notice where required.