Last updated: 14 September 2026
Coast Sun Gardens Ltd. (“Coast Sun Gardens”, “we”, “us”) respects your privacy and processes personal data in accordance with applicable data-protection law, including the Kenya Data Protection Act, 2019.
Who controls your data
Coast Sun Gardens Ltd., P.O. Box 91, Msambweni 80404, Kenya. Privacy enquiries may be sent to coast.sun.gardens.cottage@gmail.com.
Information we collect
We may collect your name, contact details, country of residence, booking dates, accommodation preferences, number of guests, messages, payment status, transaction references, technical information such as IP address and browser data and any information you voluntarily provide when contacting or booking with us.
Why we use it
- To answer enquiries and provide quotations.
- To process, administer and fulfil reservations.
- To take or reconcile payments and prevent fraud.
- To provide guest support before, during and after a stay.
- To meet accounting, tax, security and other legal obligations.
- To maintain and improve the website, subject to your cookie choices.
Legal grounds
Depending on the purpose, processing is necessary to take steps at your request or perform a booking contract, comply with legal obligations, pursue legitimate interests such as security and service improvement, or is based on your consent.
Who receives information
We disclose only what is necessary to trusted providers involved in website hosting, booking technology, payment processing, email, analytics, security, accounting and guest services. Information may also be shared with an online travel agency when you book through that agency, or with authorities where legally required. Payment-card details are handled by the relevant payment provider and are not intended to be stored directly by Coast Sun Gardens.
International transfers
Some service providers may process information outside Kenya. Where required, we use appropriate safeguards or rely on another lawful basis for the transfer.
Retention and security
We keep information only for as long as needed for the purposes above, including legal, tax, accounting, dispute and fraud-prevention requirements. We apply reasonable organisational and technical measures, but no online system can be guaranteed completely secure.
Your rights
Subject to applicable law, you may request access, correction, deletion or restriction of your personal data, object to certain processing, withdraw consent where processing relies on consent and complain to the Office of the Data Protection Commissioner in Kenya. To exercise a right, email us using the address above. We may need to verify your identity.
Cookies
The website uses cookies and similar technologies. Essential cookies support core functions. Optional analytics or marketing technologies are used in accordance with the choices available in our cookie notice. See our Cookie Policy for details and to manage preferences.
Updates
We may update this policy when our services or legal obligations change. The date above identifies the current version.