Privacy policy

ZIDI CREATIVES (BN-93S96WWR) runs Morning Dew and is responsible for the personal data described here, in line with Kenya's Data Protection Act, 2019.

What we collect

• Account: your name, email address and, if you sign in with Google, your Google profile picture.
• Listers: your public profile (name or business name), phone and WhatsApp number, and the listings and photos you post.
• Enquiries and viewings: the name, phone number, optional email and message you send to a lister, and the date you would like to view.
• Short-stay bookings: dates, guests, amounts and the payment reference. Card and M-Pesa details are handled by Paystack; we never receive them.
• Saved homes and searches: what you save and the alerts you ask for.
• Security records: sign-in sessions (with IP address and browser), and a log of changes made to accounts, listings and bookings.

Why we use it

• To run your account and the service you ask for (contract).
• To pass your enquiry to the lister you chose, and theirs back to you (contract).
• To take and confirm payments, and keep records tax law requires (legal obligation).
• To review listings and prevent fraud, spam and abuse (legitimate interest).
• To send the alerts and sign-in codes you request. No marketing without your consent.

Who we share it with

• The lister you contact receives your enquiry details.
• Service providers who process data for us: Paystack (payments), Resend (email delivery), Cloudflare (bot checks and photo storage), Hetzner (our servers) and Google (only if you sign in with Google).
• Authorities, when the law requires it.

We do not sell personal data.

Where it is stored

Our servers are in Germany (Hetzner) and photos are stored with Cloudflare in Europe. These transfers are protected by the providers' data protection terms and our own security measures, as the Data Protection Act requires.

How long we keep it

• Enquiries: the seeker's name, phone, email and message are removed after 12 months. The anonymised record stays for the lister's statistics.
• Accounts and listings: until you ask us to delete them.
• Payment and booking records: as long as Kenyan tax law requires.
• Backups: up to 30 days.

Cookies and your browser

We use one essential cookie to keep you signed in. Cloudflare Turnstile checks that forms are sent by a person. Your browser may remember the name and phone number you last used in an enquiry form so you need not retype them; this stays on your device. No advertising or tracking cookies.

Your rights

You can ask to see, correct or delete your personal data, object to its use, or get a copy. Email info@zidi.digital from the address on your account and we will respond within the time the law sets. If you are not satisfied, you can complain to the Office of the Data Protection Commissioner (odpc.go.ke).

Security

Data is encrypted in transit, access is limited to what each role needs, and every change is logged. No system is perfectly secure; if a breach affects you, we will tell you and the Data Protection Commissioner as the law requires.

Children: Morning Dew is for adults (18+). Changes to this policy are dated above. See also our terms of service.