Privacy Policy

DreamSpace Virtual Photography ("DreamSpace," "we," "us," or "our") is a virtual photography and web development company registered and operating in Kenya. We are committed to protecting your personal information and your right to privacy.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services, including 360° virtual tours, web development, and construction monitoring. Please read this policy carefully. If you disagree with any part of this policy, please discontinue use of our services.

This policy is governed by the Data Protection Act, 2019 (Kenya) and complies with applicable data protection principles under Kenyan law.

Personal Information You Provide Directly:

• –Full name
• –Email address
• –Phone number
• –Company or organisation name (optional)
• –Property address and GPS coordinates (for capture bookings)
• –Account password (stored in encrypted form)
• –Booking details including service type, date, time, and property size
• –Website feature preferences (for web development bookings)
• –Notes and instructions you provide for your booking
• –Admin notes visible only to our team

Information Collected Automatically via Google Sign-In:

If you choose to sign in with Google, we receive your name, email address, and profile picture from Google. We do not receive your Google password. We additionally request your phone number during your first sign-in to complete your profile.

Technical and Usage Information:

We may collect technical data such as your browser type, device type, and pages visited. This information is used for security monitoring and platform improvement only.

We collect information through the following means:

• –Directly from you when you create an account or complete a booking form
• –From Google when you use Google Sign-In
• –From your interactions with our website and dashboard
• –From your correspondence with our team by email or phone

We use your personal information for the following purposes:

• –To create and manage your DreamSpace account
• –To process, confirm, and schedule your service bookings
• –To communicate with you regarding your bookings, including confirmations, reminders, and updates
• –To dispatch our team to the correct property location
• –To deliver completed virtual tour links, embed codes, and QR codes to your dashboard
• –To enable our admin team to manage and track all bookings and project progress
• –To maintain records of services delivered for accounting and business purposes
• –To respond to your enquiries and support requests
• –To improve and secure our platform
• –To comply with legal and regulatory obligations

We do not use your personal information for unsolicited marketing without your explicit consent.

We do not sell, trade, or rent your personal information to any third parties. We may share your information in the following limited circumstances:

Service Providers:

We use the following third-party platforms to deliver our services. Each processes data only as necessary for the service they provide:

• –Supabase — our database, authentication, and storage provider. Account data, bookings, and virtual-tour/scan content are stored securely in compliance with industry standards.
• –Google — for Maps integration (property location) and optional Google Sign-In authentication.
• –Cloudflare — we use Cloudflare Turnstile to protect our contact and booking forms from automated abuse and spam.
• –Lovable — the development platform through which this application is deployed.

Bot Protection (Cloudflare Turnstile):

To prevent spam and automated abuse, our contact and booking forms are protected by Cloudflare Turnstile. When you submit one of these forms, Turnstile may collect technical information such as your IP address, browser characteristics, and interaction signals to confirm you are human. This processing is governed by the Cloudflare Turnstile Privacy Addendum.

Legal Requirements:

We may disclose your information if required to do so by law, court order, or government authority, or where we believe disclosure is necessary to protect our rights or the safety of others.

Your personal data is stored on Supabase's secure cloud infrastructure. We implement industry-standard security measures including:

• –Encryption of data in transit using HTTPS/TLS
• –Encrypted storage of passwords (we never store passwords in plain text)
• –Row-Level Security (RLS) policies that restrict data access to authorised users only
• –Admin-only access controls for sensitive booking and client data

While we take all reasonable steps to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

We retain your personal data for as long as necessary to provide our services and comply with our legal obligations:

• –Account profile data (name, phone, company) is retained while your account is active and deleted upon account deletion.
• –Booking records (including your name, email, phone, and booking details) are retained indefinitely for business and accounting purposes, even after account deletion. This is required for legal compliance and business record-keeping.
• –Virtual tour content is hosted on our own platform and retained in line with our hosting terms (see Section 5 of the Terms of Service).
• –Correspondence and support communications are retained for up to 3 years.

Under the Kenya Data Protection Act, 2019, you have the following rights regarding your personal data:

• –Right to access — you may request a copy of the personal data we hold about you.
• –Right to rectification — you may update or correct inaccurate information through your account settings or by contacting us.
• –Right to erasure — you may delete your account at any time via your Account Settings page. Note that booking records are retained as described above.
• –Right to object — you may object to certain uses of your data by contacting us.
• –Right to data portability — you may request your data in a structured, machine-readable format.

To exercise any of these rights, please contact us at hello@dreamspace.africa. We will respond within 30 days.

Our platform uses session cookies to maintain your logged-in state. These are essential for the platform to function correctly and are not used for advertising or tracking purposes. We do not use third-party advertising cookies or tracking pixels.

By using our platform, you consent to the use of essential session cookies. You may disable cookies in your browser settings, but doing so will prevent you from logging in to your account.

Our website may contain links to third-party websites (such as Google Maps). We are not responsible for the privacy practices of those websites and encourage you to review their privacy policies.

Our services are not directed at children under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a child, please contact us immediately and we will take steps to delete it.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the new policy on this page with an updated effective date. Your continued use of our services after any changes constitutes your acceptance of the revised policy.

This Privacy Policy is governed by and construed in accordance with the laws of the Republic of Kenya, including the Data Protection Act, 2019, and any amendments thereto. Any disputes arising out of this policy shall be subject to the exclusive jurisdiction of the courts of Kenya.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: