{"id":3,"date":"2026-09-30T10:13:15","date_gmt":"2026-09-30T10:13:15","guid":{"rendered":"https:\/\/entimsidai.com\/?page_id=3"},"modified":"2026-10-19T13:00:52","modified_gmt":"2026-10-19T10:00:52","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/entimsidai.com\/?page_id=3","title":{"rendered":"Privacy Policy"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"3\" class=\"elementor elementor-3\">\n\t\t\t\t<div class=\"elementor-element elementor-element-17997a1b e-flex e-con-boxed e-con e-parent\" data-id=\"17997a1b\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-2e3bcbcc elementor-widget elementor-widget-text-editor\" data-id=\"2e3bcbcc\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t\n<p><strong>PRIVACY POLICY<\/strong><\/p>\n<p><strong>Entim Sidai Wellness Sanctuary<\/strong><\/p>\n<p><strong>Last Updated:<\/strong> 16th October 2026<\/p>\n<ol>\n<li><strong> Introduction<\/strong><\/li>\n<\/ol>\n<p>Entim Sidai Wellness Sanctuary (&#8220;we,&#8221; &#8220;us,&#8221; or &#8220;our&#8221;) is committed to protecting your privacy and handling your personal data with care and transparency. This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you visit our website, make a booking, or use our services.<\/p>\n<p>We process personal data in accordance with the\u00a0<strong>Kenya Data Protection Act, 2019 (DPA)<\/strong>\u00a0and all applicable regulations. As a data controller, we are committed to upholding the principles of lawful, fair, and transparent data processing.<\/p>\n<ol start=\"2\">\n<li><strong> Scope<\/strong><\/li>\n<\/ol>\n<p>This Privacy Policy applies to all personal data we collect and process from:<\/p>\n<ul>\n<li>Website visitors<\/li>\n<li>Guests staying in our accommodation (standard rooms and villas)<\/li>\n<li>Spa and wellness clients<\/li>\n<li>Restaurant (Enkima) diners<\/li>\n<li>Event and conference organisers and attendees<\/li>\n<li>Enquirers and subscribers<\/li>\n<li>Service providers and partners<\/li>\n<\/ul>\n<ol start=\"3\">\n<li><strong> What Personal Data We Collect<\/strong><\/li>\n<\/ol>\n<p>We may collect the following categories of personal data:<\/p>\n<p><strong>Information you provide directly:<\/strong><\/p>\n<ul>\n<li><strong>Identity data<\/strong>\u00a0\u2014 full name, date of birth, gender<\/li>\n<li><strong>Contact data<\/strong>\u00a0\u2014 email address, phone number, postal address<\/li>\n<li><strong>Booking data<\/strong>\u00a0\u2014 reservation dates, room or service preferences, guest numbers<\/li>\n<li><strong>Payment data<\/strong>\u00a0\u2014 billing details, payment method (processed securely via third-party providers)<\/li>\n<li><strong>Health data<\/strong>\u00a0(for spa and wellness services) \u2014 relevant medical conditions or treatment preferences<\/li>\n<li><strong>Communication data<\/strong>\u00a0\u2014 enquiries, feedback, reviews, and correspondence<\/li>\n<\/ul>\n<p><strong>Information collected automatically:<\/strong><\/p>\n<ul>\n<li><strong>Technical data<\/strong>\u00a0\u2014 IP address, browser type, device information, operating system<\/li>\n<li><strong>Usage data<\/strong>\u00a0\u2014 pages visited, time spent on the site, referring URLs<\/li>\n<li><strong>Cookie data<\/strong>\u00a0\u2014 as described in Section 10 below<\/li>\n<\/ul>\n<p><em>Health data is considered sensitive data under the DPA and is subject to additional protections.<\/em><\/p>\n<ol start=\"4\">\n<li><strong> How We Collect Your Data<\/strong><\/li>\n<\/ol>\n<p>We collect personal data through:<\/p>\n<ul>\n<li>Online booking and enquiry forms on our website<\/li>\n<li>Email, telephone, or in-person correspondence<\/li>\n<li>Spa and restaurant reservations<\/li>\n<li>Event and conference bookings<\/li>\n<li>Website cookies and analytics tools<\/li>\n<li>Third-party booking platforms (where applicable)<\/li>\n<li>Guest feedback and review platforms<\/li>\n<\/ul>\n<ol start=\"5\">\n<li><strong> Purpose of Data Collection<\/strong><\/li>\n<\/ol>\n<p>We process your personal data for the following purposes:<\/p>\n<ul>\n<li>To process and manage bookings, reservations, and enquiries<\/li>\n<li>To provide our accommodation, spa, dining, and event services<\/li>\n<li>To communicate with you about your visit or booking<\/li>\n<li>To personalise your experience and improve our services<\/li>\n<li>To process payments and maintain financial records<\/li>\n<li>To respond to your enquiries, feedback, and complaints<\/li>\n<li>To comply with legal, regulatory, and tax obligations<\/li>\n<li>To send you promotional offers or updates (only with your consent, and you may opt out at any time)<\/li>\n<li>To ensure the safety and security of our guests and premises<\/li>\n<\/ul>\n<ol start=\"6\">\n<li><strong> Lawful Basis for Processing<\/strong><\/li>\n<\/ol>\n<p>We process your personal data based on one or more of the following lawful grounds under the DPA:<\/p>\n<ul>\n<li><strong>Consent<\/strong>\u00a0\u2014 where you have given us clear permission (e.g., to send marketing communications)<\/li>\n<li><strong>Contract performance<\/strong>\u00a0\u2014 where processing is necessary to fulfil a booking or service you have requested<\/li>\n<li><strong>Legal obligation<\/strong>\u00a0\u2014 where we are required to process data to comply with the law<\/li>\n<li><strong>Legitimate interest<\/strong>\u00a0\u2014 where processing is necessary for our legitimate business interests, provided your rights are not overridden<\/li>\n<li><strong>Vital interest<\/strong>\u00a0\u2014 where processing is necessary to protect your health or safety (e.g., in a medical emergency)<\/li>\n<\/ul>\n<ol start=\"7\">\n<li><strong> Data Sharing and Disclosure<\/strong><\/li>\n<\/ol>\n<p>We do\u00a0<strong>not<\/strong>\u00a0sell your personal data. We may share it with:<\/p>\n<ul>\n<li><strong>Trusted service providers<\/strong>\u00a0\u2014 payment processors, booking systems, IT support, and marketing platforms that assist us in operating our business<\/li>\n<li><strong>Wellness partners<\/strong>\u00a0\u2014 where you have requested Ayurvedic treatments or other partner services, relevant details may be shared with the partner practitioner<\/li>\n<li><strong>Professional advisers<\/strong>\u00a0\u2014 lawyers, accountants, and insurers, where necessary<\/li>\n<li><strong>Legal and regulatory authorities<\/strong>\u00a0\u2014 where required by law, court order, or to protect our legal rights<\/li>\n<li><strong>Business transfers<\/strong>\u00a0\u2014 in the event of a merger, acquisition, or sale of assets<\/li>\n<\/ul>\n<p>All third-party service providers are contractually required to protect your data and process it only for the purposes we specify.<\/p>\n<ol start=\"8\">\n<li><strong> Data Retention<\/strong><\/li>\n<\/ol>\n<p>We retain personal data only for as long as is necessary for the purposes for which it was collected, or as required by law. Specifically:<\/p>\n<ul>\n<li><strong>Booking and financial records<\/strong>\u00a0\u2014 retained for\u00a0<strong>five (5) years<\/strong>\u00a0from the end of the reporting period, in accordance with the\u00a0<strong>Tax Procedures Act<\/strong>\u00a0and the\u00a0<strong>Income Tax Act<\/strong>\u00a0of Kenya.<\/li>\n<\/ul>\n<p><strong>Enquiry data<\/strong>\u00a0(where no booking is made) \u2014 retained for up to\u00a0<strong>two (2) years<\/strong>.<\/p>\n<ul>\n<li><strong>Marketing data<\/strong>\u00a0\u2014 retained until you withdraw your consent.<\/li>\n<li><strong>Website analytics<\/strong>\u00a0\u2014 retained for\u00a0<strong>twenty-six (26) months<\/strong>\u00a0after your last visit.<\/li>\n<\/ul>\n<p>When data is no longer needed, it is securely deleted or anonymised.<\/p>\n<ol start=\"9\">\n<li><strong> Data Security<\/strong><\/li>\n<\/ol>\n<p>We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:<\/p>\n<ul>\n<li>Encryption of data in transit and at rest<\/li>\n<li>Access controls limiting data access to authorised personnel only<\/li>\n<li>Regular security reviews and audits<\/li>\n<li>Secure disposal of physical and electronic records<\/li>\n<li>Staff training on data protection and confidentiality<\/li>\n<\/ul>\n<p>While we take reasonable steps to safeguard your data, no online transmission or storage system is completely secure. We cannot guarantee absolute security.<\/p>\n<ol start=\"10\">\n<li><strong> Cookies<\/strong><\/li>\n<\/ol>\n<p>Our website uses cookies and similar technologies to enhance your browsing experience, analyse site traffic, and remember your preferences.<\/p>\n<p><strong>Types of cookies we use:<\/strong><\/p>\n<ul>\n<li><strong>Essential cookies<\/strong>\u00a0\u2014 necessary for the website to function<\/li>\n<li><strong>Analytics cookies<\/strong>\u00a0\u2014 help us understand how visitors use our site<\/li>\n<li><strong>Preference cookies<\/strong>\u00a0\u2014 remember your settings and choices<\/li>\n<\/ul>\n<p>You can manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect your experience on our website.<\/p>\n<ol start=\"11\">\n<li><strong> Your Rights as a Data Subject<\/strong><\/li>\n<\/ol>\n<p>Under the Kenya Data Protection Act, 2019, you have the following rights:<\/p>\n<ul>\n<li><strong>Right to be informed<\/strong>\u00a0\u2014 to know how your personal data is being used<\/li>\n<li><strong>Right to access<\/strong>\u00a0\u2014 to request a copy of the personal data we hold about you<\/li>\n<li><strong>Right to rectification<\/strong>\u00a0\u2014 to request correction of inaccurate or incomplete data<\/li>\n<li><strong>Right to erasure<\/strong>\u00a0\u2014 to request deletion of your personal data where there is no lawful reason for us to retain it<\/li>\n<li><strong>Right to object<\/strong>\u00a0\u2014 to object to the processing of your personal data in certain circumstances<\/li>\n<li><strong>Right to restriction<\/strong>\u00a0\u2014 to request that we limit the processing of your data<\/li>\n<li><strong>Right to data portability<\/strong>\u00a0\u2014 to receive your data in a structured, commonly used format<\/li>\n<li><strong>Right to withdraw consent<\/strong>\u00a0\u2014 where processing is based on consent, you may withdraw it at any time<\/li>\n<li><strong>Right not to be subject to automated decision-making<\/strong>\u00a0\u2014 including profiling, where it produces legal or similarly significant effects<\/li>\n<\/ul>\n<p>To exercise any of these rights, please contact us using the details in Section 15. We will respond within the timeframe required by the DPA.<\/p>\n<ol start=\"12\">\n<li><strong> Children&#8217;s Privacy<\/strong><\/li>\n<\/ol>\n<p>Our services are not directed at children under the age of 18. We do not knowingly collect personal data from minors without verifiable parental or guardian consent. If you believe we have inadvertently collected data from a minor, please contact us so we can take appropriate action.<\/p>\n<p>Rights of minors may be exercised by a parent or guardian.<\/p>\n<ol start=\"13\">\n<li><strong> International Data Transfers<\/strong><\/li>\n<\/ol>\n<p>Your personal data is primarily stored and processed within Kenya. Where we transfer data outside Kenya, we will ensure that adequate data protection safeguards are in place, or we will obtain your explicit consent, in accordance with the DPA.<\/p>\n<p>\u00a0<\/p>\n<p>\u00a0<\/p>\n<ol start=\"14\">\n<li><strong> Changes to This Privacy Policy<\/strong><\/li>\n<\/ol>\n<p>We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on this page with a revised &#8220;Last Updated&#8221; date. We encourage you to review this policy periodically.<\/p>\n<ol start=\"15\">\n<li><strong> Contact Us<\/strong><\/li>\n<\/ol>\n<p>For any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:<\/p>\n<p><strong>Entim Sidai Wellness Sanctuary<\/strong><br \/>Rura Drive, Karen, Nairobi, Kenya<br \/>info@entimsidai.com<br \/>0702577530<\/p>\n<p>You also have the right to lodge a complaint with the\u00a0<strong>Office of the Data Protection Commissioner (ODPC)<\/strong>:<\/p>\n<p><strong>Office of the Data Protection Commissioner<\/strong><br \/>www.odpc.go.ke<br \/>info@odpc.go.ke<br \/>020 780 1800<\/p>\n<p>\u00a0<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>PRIVACY POLICY Entim Sidai Wellness Sanctuary Last Updated: 16th October 2026 Introduction Entim Sidai Wellness Sanctuary (&#8220;we,&#8221; &#8220;us,&#8221; or &#8220;our&#8221;) is committed to protecting your privacy and handling your personal data with care and transparency. This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you visit our website, make a booking, or use [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"open","template":"","meta":{"postBodyCss":"","postBodyMargin":[],"postBodyPadding":[],"postBodyBackground":{"backgroundType":"classic","gradient":""},"footnotes":""},"class_list":["post-3","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/entimsidai.com\/index.php?rest_route=\/wp\/v2\/pages\/3","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/entimsidai.com\/index.php?rest_route=\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/entimsidai.com\/index.php?rest_route=\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/entimsidai.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/entimsidai.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3"}],"version-history":[{"count":6,"href":"https:\/\/entimsidai.com\/index.php?rest_route=\/wp\/v2\/pages\/3\/revisions"}],"predecessor-version":[{"id":1008,"href":"https:\/\/entimsidai.com\/index.php?rest_route=\/wp\/v2\/pages\/3\/revisions\/1008"}],"wp:attachment":[{"href":"https:\/\/entimsidai.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}