This policy explains what personal information Hotel Itoya (operated by Ayoti Group, B1 Kisumu-Busia Road, Busia, Kenya) collects through this website, why we collect it, and how it's handled. It applies to our booking form, contact form, and admin systems.
What we collect
When you make a reservation: full name, phone number, email address, check-in/check-out dates, number of guests, any special requests you enter, and a photo or scan of both sides of a government-issued ID.
When you pay online: the M-Pesa phone number you provide, used to send a payment prompt via Safaricom. We do not see or store your M-Pesa PIN.
When you send us an enquiry: your name, email, phone number, and the contents of your message.
Why we collect it
ID verification is required by Kenyan hotel regulations for guest registration. The rest is used to process your reservation, confirm and coordinate your stay, process payment, and respond to enquiries. We don't use your information for marketing without your separate consent.
Who can see it
Booking and enquiry details are visible to authorized Hotel Itoya staff through a password-protected admin system. Your information also passes through the service providers that operate this site on our behalf — hosting, database, and email delivery providers, and Safaricom for M-Pesa payments. These providers only process data to keep the site and booking system running; we don't sell your information to anyone.
How it's protected
Data is transmitted over HTTPS. The admin system requires a staff password and expires sessions automatically. ID documents are only viewable by logged-in staff.
How long we keep it
We retain booking records, including ID documents, for as long as reasonably necessary to fulfil your stay and meet our legal and regulatory record-keeping obligations, after which it's deleted. If you'd like your data removed sooner, contact us using the details below and we'll do so unless we're required to retain it by law.
Your rights
Under Kenya's Data Protection Act, 2019, you can ask us to access, correct, or delete the personal information we hold about you, or object to how it's used. To make a request, email hotel.itoya@ayotigroup.com.
Cookies & tracking
This website does not currently use analytics or advertising cookies. If that changes, this policy will be updated.
Contact
Questions about this policy or your data can be sent to hotel.itoya@ayotigroup.com or call +254 714 302 777, +254 714 666 222, or +254 714 777 333.