1. Scope and responsibility
Ephrathar Carmel determines why and how personal information is used for the platform. Vendors, hosts, movers, cleaners, designers, hospitality partners and payment providers may also act as independent data controllers for information they need to complete a transaction or meet a legal obligation.
This policy is written with Kenya’s Data Protection Act, 2019 and applicable regulations in mind. It does not replace rights granted by law.
2. Information we collect
- Account information: name, email address, phone number, login records and account preferences.
- Partner verification: business details, role applications, identification number, contact details, portfolio material and review records.
- Orders and payments: cart contents, delivery area, quoted prices, M-Pesa phone number, transaction references, payment status, refund and payout records. Ephrathar Carmel does not ask for an M-Pesa PIN.
- Stays: booking dates, guest counts, children’s age bands, arrival details and communications needed for a booking.
- Services and design: addresses, project descriptions, budgets, photographs, quotes and completion records.
- Messages and support: marketplace conversations, dispute evidence and enquiries sent to Ephrathar Carmel.
- AI Remodel: room images, instructions, generated concepts, credit use and technical records.
- Technical information: browser, device, IP address, security events and platform activity needed to operate and protect the service.
3. How we use information
We use information to create accounts, verify partners, match customers with the correct vendor or provider, process orders and bookings, operate messaging, generate AI concepts, prevent fraud, resolve disputes, maintain financial records and improve platform reliability.
Depending on the activity, processing is based on performing a contract, complying with law, obtaining consent, or pursuing a legitimate business interest that does not override your rights.
5. AI Remodel and uploaded images
Upload only images you are entitled to use. Avoid images showing people, identity documents, private correspondence or other sensitive information unless it is genuinely necessary and lawful.
When you request a generation, the selected room image and prompt are sent to the configured AI provider to create the result. Generated concepts are visual suggestions, not construction, engineering or safety advice.
6. Retention and security
We keep information only for as long as needed for the transaction, account, dispute, safety, tax, accounting or legal purpose for which it was collected. Different records have different retention periods. When information is no longer required, we delete, anonymise or securely isolate it.
Ephrathar Carmel uses access controls, role restrictions, encrypted connections, audit records and database safeguards. No online system can promise absolute security, so users must protect their passwords and report suspected account misuse promptly.
7. Your choices and rights
Subject to Kenyan law, you may ask to be informed about the use of your information, access it, correct inaccurate information, object to certain processing, request deletion where applicable, or ask that processing be restricted. You may also withdraw consent where consent is the basis of processing.
Some records cannot be deleted immediately when they are needed for an open order, dispute, fraud investigation or legal retention duty. You may lodge a complaint with Kenya’s Office of the Data Protection Commissioner.
8. Contact
Send privacy requests through the official Ephrathar Carmel support channel shown on the website. We may need to verify your identity before releasing or changing account information.