Privacy Policy
Enkipai Hill Hotel
Narok Town, Kenya
Last updated: 27 May 2026
Enkipai Hill Hotel respects your privacy. This Privacy Policy explains how we collect, use, protect and share personal information when you visit our website, make a booking, stay with us, attend an event, dine with us, use our Wi-Fi, contact us, or interact with our services.
1. Who We Are
Enkipai Hill Hotel is located in Narok Town, Kenya.
For purposes of applicable data protection law, Enkipai Hill Hotel acts as a data controller where it decides how and why guest, booking, website, event, payment and security information is processed.
Privacy contact: info@enkipaihillhotel.co.ke | +254 711 930 393 | Narok Town, Kenya.
2. Information We Collect
We may collect information that is reasonably necessary for hotel services, safety, legal compliance, business administration or guest experience.
- Name, phone number, email address and contact details.
- Booking details, stay dates, room preferences and guest requests.
- Payment, billing and transaction details.
- Identification details required for check-in, security or legal compliance.
- Dining, conference, event or group booking information.
- Dietary, accessibility or special service requests.
- Website data such as IP address, browser type, device information, pages visited and cookies.
- CCTV footage in public and operational areas of the hotel.
- Wi-Fi connection information where you use the hotel network.
- Communication records when you contact us by phone, email, website form, social media or messaging platforms.
3. How We Use Your Information
- Process bookings and manage your stay.
- Confirm reservations, payments, cancellations and changes.
- Provide accommodation, dining, event, conference, tour and guest services.
- Respond to enquiries, requests, complaints and feedback.
- Process payments, invoices, deposits and refunds.
- Maintain safety, security, access control and fraud prevention.
- Improve our website, services, facilities and guest experience.
- Send service-related communications.
- Send marketing communications where permitted by law or where you have agreed to receive them.
- Comply with legal, tax, accounting, regulatory and security obligations.
- Protect the rights, property and legitimate interests of the hotel, guests, staff and visitors.
4. Legal Basis for Processing
We process personal information where one or more of the following applies:
- It is necessary to perform a booking, stay, event, dining or service contract with you.
- It is necessary to comply with legal, tax, regulatory, safety or security obligations.
- It supports legitimate business interests such as guest service, fraud prevention, security, service improvement and dispute management.
- You have given consent, such as for optional marketing or certain optional service preferences.
- It is necessary to protect vital interests, such as during a safety, health or emergency incident.
Where we rely on consent, you may withdraw it at any time, subject to legal and contractual limits.
5. CCTV and Security
CCTV may be used in public and operational areas of the hotel for safety, security, incident investigation, access control, asset protection and legal compliance.
CCTV is not used in private guest rooms or private bathroom areas.
CCTV footage is kept only for a limited period unless required for investigation, insurance, legal, regulatory or security purposes. The hotel should display CCTV notices at appropriate points on the premises.
6. Cookies and Website Data
Our website may use cookies and similar technologies to support website functionality, improve performance, understand visitor activity and support booking or enquiry features.
You can manage cookies through your browser settings. Some website features may not work properly if cookies are disabled. For more detail, please read our Cookie Notice.
7. When We Share Information
We do not sell guest personal information. We may share information where necessary with:
- Payment processors, banks and mobile money providers.
- Booking engines, reservation platforms, travel agents and tour operators.
- IT, website hosting, email, cloud and communication service providers.
- Event, transport, tour or hospitality partners where you request such services.
- Professional advisers, auditors, insurers and consultants.
- Government, law enforcement, courts or regulators where required by law.
- Service providers who help us operate the hotel and support guests.
8. Third-Party Booking Platforms
If you book through a third-party platform, travel agent or tour operator, that third party may collect and use your information under its own privacy policy and terms. Enkipai Hill Hotel is not responsible for the privacy practices, platform fees, refund rules or communications of independent third-party platforms.
9. International Transfers
Some booking platforms, payment providers, cloud systems or technology providers may process information outside Kenya. Where personal information is transferred outside Kenya, we take reasonable steps to ensure appropriate safeguards are in place, including contractual protections, lawful transfer mechanisms, or consent where required.
10. Data Retention
| Information Type | Retention Approach |
|---|---|
| Booking and guest records | Kept for guest service, accounting, tax, legal and dispute purposes. |
| Payment and invoice records | Kept in line with financial, tax and audit requirements. |
| CCTV footage | Kept for a short period unless needed for investigation, insurance, legal or security purposes. |
| Event and conference records | Kept for contract, billing, service, legal and audit purposes. |
| Marketing contacts | Kept until you unsubscribe, withdraw consent or request deletion, unless another lawful basis applies. |
| Website enquiries | Kept for reasonable follow-up, service and business records. |
11. Data Security
We use reasonable technical and organisational measures to protect personal information from unauthorised access, loss, misuse, alteration or disclosure. No online system is completely risk-free. Guests should avoid sending sensitive information through unsecured channels.
12. Data Breaches
If a personal data breach occurs, we will take reasonable steps to contain, assess and address the incident. Where required by law, we will notify the relevant authority and affected individuals.
13. Your Rights
Subject to applicable law, you may request to:
- Access the personal information we hold about you.
- Correct inaccurate or incomplete information.
- Object to certain processing.
- Withdraw consent where processing is based on consent.
- Request deletion or restriction of your information where legally applicable.
- Ask how your information has been used or shared.
To exercise your rights, contact info@enkipaihillhotel.co.ke. We may ask for information to verify your identity before acting on your request.
14. Children's Privacy
Children may use our services as part of family stays, school groups, events or supervised activities. We do not knowingly collect children's personal information without appropriate consent or a lawful reason connected to booking, guest service, safety, security, event management or legal compliance.
15. Updates to This Policy
We may update this Privacy Policy from time to time. The latest version will be posted on our website.
Contact
Enkipai Hill Hotel | Narok Town, Kenya | info@enkipaihillhotel.co.ke | +254 711 930 393