Sunset Drive Limited ("Sunset Drive", "we", "our") is committed to protecting your personal data. This policy explains how we collect, use, and protect your information in accordance with the Kenya Data Protection Act, 2019.

1. Data We Collect

We collect information you provide directly and information generated through your use of our services:

Identity data: Full name, national ID number, driving licence number and expiry, date of birth.
Contact data: Email address, phone number, physical address.
Booking data: Vehicle bookings, rental dates, pick-up/drop-off locations, payment records.
Technical data: IP address, browser type, device information, pages visited.
Usage data: Search history, favourite vehicles, feedback and reviews.

2. How We Use Your Data

Processing and managing vehicle rental bookings.
Sending booking confirmations, invoices, and rental reminders via SMS and email.
Processing payments and preventing fraud.
Verifying your identity and driving eligibility.
Improving our website and service offerings.
Sending marketing communications (only with your consent, which you may withdraw at any time).
Complying with legal obligations.

3. Legal Basis for Processing

Contract performance: Processing necessary to fulfil your booking.
Legal obligation: Compliance with Kenyan tax and transport regulations.
Legitimate interest: Fraud prevention and service improvement.
Consent: Marketing communications and cookies.

4. Data Sharing

We do not sell your personal data. We may share it with:

Payment providers (Safaricom M-Pesa, card processors) for transaction processing.
SMS providers (BlessedTexts) to send transactional SMS messages.
Insurance companies when required for claims.
Law enforcement when legally required.

5. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes described in this policy, or as required by Kenyan law. Booking records are retained for 7 years for tax and legal compliance.

6. Your Rights

Under the Kenya Data Protection Act, you have the right to:

Access the personal data we hold about you.
Correct inaccurate or incomplete data.
Request deletion of your data (subject to legal retention requirements).
Object to or restrict certain processing.
Data portability.
Withdraw consent at any time.

To exercise your rights, contact us at book@sunsetdrive.co.ke.

7. Cookies

We use essential cookies necessary for the website to function, and optional analytics cookies. You can control non-essential cookies through your browser settings. See our Cookie Policy for details.

8. Security

We implement appropriate technical and organisational measures to protect your data against unauthorized access, alteration, disclosure, or destruction, including TLS encryption, access controls, and regular security audits.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via email or a notice on our website.

10. Contact Us

Data Controller: Sunset Drive Limited
Email: book@sunsetdrive.co.ke
Phone: +254 143 949 266

If you have unresolved concerns, you may contact the Office of the Data Protection Commissioner of Kenya.

Privacy Policy