The Ivy Group
Privacy & Cookie Policy
Last updated: September 2026
This is a working draft prepared for review. It should be checked by a qualified advocate and confirmed against your registration status with the Office of the Data Protection Commissioner before it is relied upon.
This policy explains how The Ivy Group, a brand of R-Sun Properties Limited (“we”, “us”, “our”), collects and uses personal data when you use www.ivygroup.ke, contact us, or enquire about our developments. We are the data controller for that information.
We handle personal data in line with the Data Protection Act, 2019 of Kenya and its Regulations. Where you contact us from outside Kenya, we also seek to meet the standards of the laws that apply to you, such as the EU/UK GDPR.
1. The information we collect
Information you give us
When you complete a form, request a brochure, use the chat assistant, or join the rental waitlist, we collect:
- your name;
- your email address;
- your telephone number and country code;
- the development or unit type you are interested in;
- your indicative budget range;
- whether you are buying directly, jointly, as an investor, or acting as an agent or on someone’s behalf;
- your intended purchase timeframe; and
- any message or details you choose to send us.
The chat assistant asks for your name, phone and email before a conversation begins so that a consultant can follow up.
Information we collect automatically
When you visit the site we use Google Analytics 4 to understand how the site is used. This collects your approximate location (city level), the pages you view, how you arrived at the site, and your device and browser type. Google Analytics sets cookies (see section 5). We do not use analytics to identify you personally.
Pages that embed Google Maps load content directly from Google, which may set its own cookies and collect data under Google’s privacy policy.
Information stored on your device
The site stores small amounts of data in your browser’s local storage so it works better for you. This includes the contact details you enter into the chat assistant (so you do not have to type them again), your chat theme preference, and a note of banners you have dismissed. This data stays on your device and is not sent to us except as part of an enquiry you submit.
2. How we use your information
- to respond to your enquiry and answer your questions;
- to send you brochures, pricing, floor plans and project updates you have asked for;
- to arrange and follow up on viewings and site visits;
- to contact you by phone, email or WhatsApp about developments that may suit your stated requirements;
- to keep records of enquiries and transactions;
- to understand and improve how the website performs; and
- to comply with our legal and regulatory obligations.
3. Our lawful basis for processing
- Your consent — for marketing communications and for non-essential cookies. You can withdraw consent at any time (see section 10).
- Steps taken at your request — to respond to an enquiry or prepare for a possible purchase.
- Our legitimate interests — to run and improve our business and this website, provided your rights do not override those interests.
- Legal obligation — where the law requires us to keep or disclose information.
4. Who we share your information with
We do not sell your personal data. We share it with:
- our sales, customer-care and legal teams;
- service providers who process data on our behalf under contract — Supabase (secure database hosting), Resend (email delivery), Vercel (website hosting) and Google (analytics and maps);
- professional advisers, banks and conveyancers where a transaction proceeds; and
- regulators or authorities where we are legally required to do so.
5. Cookies and similar technologies
A cookie is a small file stored by your browser. This site uses:
| Cookie / item | Set by | Purpose | Retention |
|---|---|---|---|
| _ga, _ga_G4MF7YCDPV | Google Analytics | Analytics — distinguishes visitors and sessions | Up to 13 months |
| Google Maps cookies | Set when a map loads; governed by Google’s policy | Varies | |
| sb-* cookies | The Ivy Group | Strictly necessary — staff login to the private admin area only | Session |
| Local storage (chat details, preferences) | The Ivy Group | Remembers your chat details and site preferences on your device | Until you clear your browser |
You can block or delete cookies through your browser settings, and clear local storage the same way. The site will still work, though some conveniences (such as the chat remembering you) will not.
A cookie consent banner is planned. Until it is in place, analytics runs by default; you can opt out using the Google Analytics Opt-out Browser Add-on or your browser’s cookie controls.
6. International data transfers
Some of our service providers are located outside Kenya (for example in the United States and the European Union). Where personal data is transferred abroad, we rely on the provider’s contractual safeguards and, where applicable, standard data-protection clauses, so that your data receives a comparable level of protection.
7. How long we keep your information
We keep enquiry and customer records for as long as needed to deal with your enquiry, for the life of any resulting relationship, and afterwards for the period required by law and to defend legal claims. Analytics data is retained according to our Google Analytics settings.
[To confirm with your advocate: the exact retention periods for enquiry records and customer files.]
8. How we protect your information
Access to enquiry data is restricted to authorised staff. Our database and admin area are protected by authentication and encryption in transit. No system is completely secure, but we take reasonable technical and organisational measures to protect your data.
9. Children
This website is intended for adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, please contact us and we will delete it.
10. Your rights
Under the Data Protection Act, 2019 you have the right to:
- be informed of how your data is used;
- access the personal data we hold about you;
- ask us to correct inaccurate or incomplete data;
- ask us to delete your data in certain circumstances;
- object to or ask us to restrict our processing;
- withdraw consent at any time, including opting out of marketing; and
- lodge a complaint with the Office of the Data Protection Commissioner.
To exercise any of these rights, contact us using the details below. To stop marketing messages, reply “STOP” to any message or email us. You can complain to the Office of the Data Protection Commissioner (odpc.go.ke).
11. Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last revised. Significant changes will be highlighted on this page.
12. Contact us
The Ivy Group / R-Sun Properties Limited
Ivy Park Sales Suite, Ivy Park Residence, Kirichwa Road, Kilimani, Nairobi
Phone / WhatsApp: +254 118 266 666
Email: marketing.ivy-group@rsunproperty.net
[To confirm: whether R-Sun Properties Limited is registered with the ODPC as a data controller, and whether a Data Protection Officer or contact person should be named here.]