Privacy Policy

Last updated: May 10, 2026

1. Introduction

CIG-Patna ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our real estate investment platform (the "Platform").

By using our Platform, you consent to the data practices described in this Privacy Policy. If you do not agree with this policy, please do not use our Platform.

2. Information We Collect

2.1 Personal Information

We collect personal information that you provide directly to us, including:

  • Identity Information: Full name, date of birth, national ID number, passport details
  • Contact Information: Email address, phone number, physical address, mailing address
  • Financial Information: Bank account details, payment card information (processed securely through third-party processors), investment amounts, transaction history
  • KYC Documents: Government-issued ID, proof of address, source of funds documentation
  • Account Information: Username, password (encrypted), user preferences, account activity
  • Investment Information: Investment preferences, project selections, investment history

2.2 Automatically Collected Information

When you use our Platform, we automatically collect:

  • Device Information: IP address, browser type, operating system, device identifiers
  • Usage Data: Pages visited, time spent on pages, click patterns, access times and dates
  • Location Data: General geographic location based on IP address
  • Cookies and Tracking Technologies: See our Cookie Policy section below

2.3 Information from Third Parties

We may receive information about you from third-party services, including identity verification services, payment processors, and credit bureaus, to verify your identity and comply with regulatory requirements.

3. How We Use Your Information

We use the information we collect for the following purposes:

  • Service Provision: To provide, maintain, and improve our Platform services
  • Account Management: To create and manage your account, process transactions, and facilitate investments
  • KYC and Compliance: To verify your identity, conduct due diligence, and comply with anti-money laundering (AML) and know-your-customer (KYC) regulations
  • Communication: To send you notifications, updates, investment confirmations, and important information about your account
  • Legal Compliance: To comply with applicable laws, regulations, and legal processes
  • Fraud Prevention: To detect, prevent, and investigate fraud, security breaches, and other illegal activities
  • Analytics and Improvement: To analyze usage patterns, improve our services, and develop new features
  • Marketing: To send you promotional communications (with your consent, where required by law)
  • Customer Support: To respond to your inquiries and provide customer support

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process your personal information based on:

  • Contract Performance: To fulfill our contractual obligations to you
  • Legal Obligation: To comply with legal and regulatory requirements
  • Legitimate Interests: To operate and improve our business, prevent fraud, and ensure security
  • Consent: Where you have provided explicit consent for specific processing activities

5. How We Share Your Information

We may share your information with:

5.1 Service Providers

Third-party service providers who perform services on our behalf, including:

  • Payment processors and financial institutions
  • Identity verification and KYC service providers
  • Cloud hosting and data storage providers
  • Email and communication service providers
  • Analytics and marketing service providers
  • Legal and compliance advisors

5.2 Business Partners

We may share information with Chayim International Group (CIG) and project partners as necessary to facilitate investments and project management.

5.3 Legal Requirements

We may disclose information when required by law, including to:

  • Regulatory authorities and government agencies
  • Law enforcement agencies in response to legal processes
  • Courts and tribunals as required by legal proceedings

5.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

  • Encryption of data in transit and at rest
  • Secure authentication and access controls
  • Regular security assessments and updates
  • Employee training on data protection
  • Limited access to personal information on a need-to-know basis

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as necessary to:

  • Fulfill the purposes outlined in this Privacy Policy
  • Comply with legal, regulatory, and contractual obligations
  • Resolve disputes and enforce our agreements
  • Maintain records as required by financial and tax regulations

When information is no longer needed, we will securely delete or anonymize it in accordance with our data retention policies.

8. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

8.1 Access and Portability

You have the right to access your personal information and receive a copy in a portable format.

8.2 Correction

You may request correction of inaccurate or incomplete information.

8.3 Deletion

You may request deletion of your personal information, subject to legal and regulatory retention requirements.

8.4 Objection and Restriction

You may object to certain processing activities or request restriction of processing.

8.5 Withdraw Consent

Where processing is based on consent, you may withdraw consent at any time.

8.6 Marketing Communications

You can opt-out of marketing communications by clicking unsubscribe links in emails or contacting us directly.

To exercise these rights, please contact us at: privacy@cigpatna.co.ke

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

  • Remember your preferences and settings
  • Authenticate your identity
  • Analyze Platform usage and performance
  • Provide personalized content and advertisements

You can control cookies through your browser settings. However, disabling cookies may affect Platform functionality.

We use the following types of cookies:

  • Essential Cookies: Required for Platform functionality
  • Analytics Cookies: Help us understand how users interact with the Platform
  • Marketing Cookies: Used to deliver relevant advertisements (with consent)

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws.

When transferring data internationally, we implement appropriate safeguards, including standard contractual clauses approved by regulatory authorities, to ensure your information is protected in accordance with this Privacy Policy.

11. Children's Privacy

Our Platform is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will take steps to delete it immediately.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

  • Email notification to your registered email address
  • Posting a prominent notice on the Platform
  • Updating the "Last updated" date at the top of this page

Your continued use of the Platform after changes constitutes acceptance of the updated Privacy Policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Chayim International Group - Partner (CIG-Patna)

Data Protection Officer

Email: privacy@cigpatna.co.ke

Address: [Company Address, Kenya]

14. Supervisory Authority (GDPR)

If you are located in the EEA and believe we have not addressed your concerns, you have the right to lodge a complaint with your local data protection supervisory authority.