This Cookie Policy explains what cookies are, which cookies PropertyDuka uses, why we use them, and how you can control them. It should be read alongside our Privacy Policy and Terms and Conditions, both available at propertyduka.com.
2. How We Obtain Your Consent
When you first visit the PropertyDuka website or open the PropertyDuka mobile application, you will be presented with a cookie banner. At present, this banner allows you to accept cookies.
Important: We are in the process of upgrading our cookie consent banner to provide you with full Accept, Reject, and Manage Preferences options for non-essential cookies. Until this upgrade is live, you can manage non-essential cookies through your browser or device settings as described in Section 8. We apologise for any inconvenience and are committed to full compliance with the Data Protection Act, 2019.
Strictly necessary cookies do not require your consent as they are essential for the Platform to function. All other cookies — analytics, functional, and marketing — require your consent, which you can give, refuse, or withdraw at any time.
Your consent preferences are stored and associated with your device. If you use PropertyDuka on multiple devices, you will need to set your preferences on each device separately.
3. Categories of Cookies We Use
We use four categories of cookies on the PropertyDuka Platform:
3.1 Strictly Necessary Cookies
These cookies are essential for the Platform to function and cannot be switched off. They are set in response to actions you take, such as logging in, filling in forms, or setting your privacy preferences. Without these cookies, the Platform would not work correctly.
Consent required: No
Can be disabled: No — disabling these cookies will prevent the Platform from functioning correctly.
| Cookie Name | Provider | Purpose | Duration | Consent |
|---|---|---|---|---|
| session_id | PropertyDuka | Maintains your login session so you remain signed in as you navigate the Platform. | 30 minutes | No |
| csrf_token | PropertyDuka | Protects against Cross-Site Request Forgery (CSRF) security attacks. | Session | No |
| auth_token | PropertyDuka | Authenticates your identity across the Duka Marketplaces Ecosystem single sign-on (SSO) system. | 7 days | No |
| cookie_consent | PropertyDuka | Stores your cookie consent preferences so we do not ask you again on every visit. | 12 months | No |
3.2 Analytics Cookies
These cookies help us understand how visitors interact with the Platform — which pages are visited most, how long users stay, where they come from, and which features are used. This information is used in aggregate and anonymised form to improve the Platform.
Consent required: Yes
Providers: Google Analytics, Google Firebase
| Cookie Name | Provider | Purpose | Duration | Consent |
|---|---|---|---|---|
| _ga | Google Analytics | Distinguishes unique users by assigning a randomly generated number as a client identifier. Used to calculate visitor, session, and campaign data for analytics reports. | 2 years | Yes |
| _gid | Google Analytics | Distinguishes users. Used to throttle request rate and store and count page views. | 24 hours | Yes |
| _gat | Google Analytics | Used to throttle request rate to Google's servers. Limits the collection of data on high-traffic sites. | 1 minute | Yes |
| _ga_[ID] | Google Analytics 4 | Persists session state across page requests for Google Analytics 4 measurement. | 2 years | Yes |
| firebase_id | Google Firebase | Assigns a unique identifier to your app installation for Firebase Analytics. Used to track app usage, engagement, and crash reporting. | Until app uninstalled | Yes |
| FPLC | Google Firebase | Used by Firebase Performance Monitoring to store a session cookie for throttling requests. | 1 hour | Yes |
Google Analytics data is processed in accordance with Google's Privacy Policy (policies.google.com/privacy). We have enabled IP anonymisation on Google Analytics so that your full IP address is never stored. Data collected by Google Analytics may be transferred to Google's servers outside Kenya — this transfer is covered by our Cross-Border Data Transfer safeguards described in the Privacy Policy.
3.3 Session Recording Cookies (Microsoft Clarity)
PropertyDuka uses Microsoft Clarity, a user experience analytics tool, to record anonymised user sessions on the Platform. This helps us understand how users navigate the Platform, identify usability issues, and improve the user experience. Microsoft Clarity may record mouse movements, clicks, scrolling behaviour, and page interactions.
Consent required: Yes
Provider: Microsoft Corporation (clarity.microsoft.com)
Important — Data Masking:
Microsoft Clarity is configured to automatically suppress and mask all sensitive input fields, including National ID fields, phone number fields, password fields, and any field containing personal verification data. This means the content of these fields is never captured by Microsoft Clarity. If you believe a sensitive field has not been masked, please report it immediately to hello@propertyduka.com.
| Cookie Name | Provider | Purpose | Duration | Consent |
|---|---|---|---|---|
| _clsk | Microsoft Clarity | Stores a unique session ID to connect page views within the same visit and record user behaviour during that session. | 1 year | Yes |
| _clck | Microsoft Clarity | Stores a unique user identifier and site visit count. Used to identify returning users and attribute sessions to the same user over time. | 1 year | Yes |
| CLID | Microsoft Clarity | Stores the Microsoft Clarity user identifier. Used to link session data to a persistent user profile for analytics purposes. | 30 minutes | Yes |
| _cltk | Microsoft Clarity | Identifies a new user's first session on the Platform. | Session | Yes |
| clarity_s | Microsoft Clarity | Stores session-level data including the session ID and page visit counter within the current session. | 2 minutes | Yes |
| clarity_c | Microsoft Clarity | Stores configuration and consent state for the Microsoft Clarity tracking script. | Session | Yes |
Microsoft Clarity processes data in accordance with its Privacy Policy available at privacy.microsoft.com/privacystatement. Microsoft is certified under the EU-U.S. Data Privacy Framework and operates under Standard Contractual Clauses for international data transfers. Our use of Microsoft Clarity is subject to a Data Processing Agreement that restricts Microsoft's use of data to providing the session recording service to PropertyDuka only.
3.4 Functional Cookies
These cookies enable enhanced functionality and personalisation. They may be set by PropertyDuka or by third-party providers whose services we have added to the Platform. If you do not allow these cookies, some features may not work as intended.
Consent required: Yes
| Cookie Name | Provider | Purpose | Duration | Consent |
|---|---|---|---|---|
| pd_prefs | PropertyDuka | Stores your search filter preferences (e.g. preferred property type, price range, number of bedrooms, location) so they are remembered between sessions. | 6 months | Yes |
| pd_recent | PropertyDuka | Stores your recently viewed listings so they can be displayed on your homepage and search results. | 30 days | Yes |
| pd_locale | PropertyDuka | Remembers your language and regional settings. | 12 months | Yes |
| pd_map | PropertyDuka | Remembers your last map view position and zoom level for property search. | 30 days | Yes |
| pd_theme | PropertyDuka | Remembers your display preferences (e.g. light or dark mode where applicable). | 12 months | Yes |
4. Advertising Cookies (Google AdSense)
PropertyDuka displays advertisements on the Platform served through Google AdSense on both the website and the mobile application. These advertisements are currently served as contextual ads only — meaning ads are matched to the content of the page you are viewing, not to your personal profile or browsing history across other websites.
Personalised or interest-based advertising — which involves profiling your behaviour across websites to target ads — is not currently enabled on PropertyDuka. If this changes in the future, we will update this Cookie Policy, obtain your consent through a clear consent mechanism before enabling personalised ads, and notify you in accordance with Section 10.
Consent required: No (contextual ads only — no profiling)
Provider: Google LLC (AdSense)
| Cookie Name | Provider | Purpose | Duration | Consent |
|---|---|---|---|---|
| test_cookie | Google AdSense | Checks whether the browser supports cookies, required for AdSense to function. Deleted immediately after the check. | Session | No |
| __gads | Google AdSense | Registers information about ads displayed to the user. Used for ad frequency capping and reporting. Does not contain personal profile data when contextual-only mode is active. | 13 months | No |
| __gpi | Google AdSense | Google Publisher Identity cookie. Used alongside __gads to track user state across ad requests for frequency capping and fraud prevention. | 13 months | No |
5. Cookies We Do Not Use
PropertyDuka does not currently use the following types of cookies:
- (a)Social media tracking cookies (e.g. Meta/Facebook Pixel, LinkedIn Insight Tag, Twitter/X Pixel) — we do not run paid social media retargeting campaigns that place tracking pixels on the Platform;
- (b)Remarketing or retargeting cookies — personalised advertising based on your browsing history across other websites is not currently enabled; and
- (c)Fingerprinting technologies — we do not use browser fingerprinting as a substitute for cookies.
If any of the above changes in the future, this Cookie Policy will be updated and you will be notified in accordance with Section 10.
6. Cookies and the Mobile Application
The PropertyDuka mobile application (iOS and Android) uses equivalent technologies to cookies, including:
- (a)Firebase Analytics SDK — for app usage analytics, crash reporting, and performance monitoring, equivalent to the Google Analytics cookies used on the website;
- (b)Microsoft Clarity SDK — where session recording is implemented within the mobile application, subject to the same data masking rules described in Section 3.3;
- (c)Device identifiers — including advertising identifiers (IDFA on iOS, GAID on Android), which function similarly to persistent cookies for cross-session identification; and
- (d)Local storage — used to store your session credentials, preferences, and recently viewed property listings on-device.
You can reset your device advertising identifier or opt out of interest-based advertising through your device settings:
- (a)iOS: Settings > Privacy & Security > Tracking > Allow Apps to Request to Track (toggle off)
- (b)Android: Settings > Google > Ads > Delete advertising ID (Android 12+) or Opt out of Ads Personalisation
7. Third-Party Cookies — Your Relationship With Third Parties
Where cookies are set by third parties (Google, Microsoft Clarity), those third parties have their own privacy policies that govern their use of information collected through those cookies. PropertyDuka is not responsible for the content of third-party privacy policies.
We encourage you to review the privacy policies of our third-party cookie providers:
| Provider | Privacy Policy URL |
|---|---|
| Google Analytics | policies.google.com/privacy |
| Google Firebase | firebase.google.com/support/privacy |
| Microsoft Clarity | clarity.microsoft.com/privacy |
| Google AdSense | policies.google.com/technologies/ads |
8. How to Manage and Disable Cookies
You have several options for managing cookies:
8.1 Through Your Browser
Most web browsers allow you to control cookies through their settings. You can set your browser to refuse all cookies, to notify you when a cookie is set, or to delete cookies after your session. The following links provide guidance for common browsers:
- (a)Google Chrome: chrome://settings/cookies
- (b)Mozilla Firefox: support.mozilla.org/kb/enhanced-tracking-protection-firefox-desktop
- (c)Safari: support.apple.com/guide/safari/manage-cookies-sfri11471
- (d)Microsoft Edge: support.microsoft.com/microsoft-edge/delete-cookies
Please note that restricting cookies may affect the functionality of the PropertyDuka Platform. In particular, disabling strictly necessary cookies will prevent you from logging in or using core Platform features.
8.2 Through Google Analytics Opt-Out
You can prevent Google Analytics from collecting your data by installing the Google Analytics Opt-out Browser Add-on, available at tools.google.com/dlpage/gaoptout. This add-on prevents the Google Analytics JavaScript from sharing information with Google Analytics about visit activity.
8.3 Through Microsoft Clarity Opt-Out
You can opt out of Microsoft Clarity session recording at any time by visiting clarity.microsoft.com/opt-out. This will set a persistent opt-out cookie on your device that prevents Microsoft Clarity from recording your sessions.
8.4 Through Google AdSense Ad Settings
PropertyDuka currently serves contextual ads only, which do not require consent. However, Google AdSense may still set operational cookies (such as __gads and __gpi) for ad frequency capping and fraud prevention. You can review and manage your Google ad settings, including opting out of ad personalisation across Google's network, at adssettings.google.com. You can also opt out of interest-based advertising from participating companies through the Digital Advertising Alliance at youradchoices.com.
8.5 Through Your Device Settings (Mobile App)
On mobile devices, you can manage tracking through your device's advertising settings as described in Section 6. You can also disable analytics data collection through the PropertyDuka app under Account Settings > Privacy > Analytics Preferences.
8.6 Through the PropertyDuka Cookie Preference Centre
A full cookie preference centre — allowing you to accept, reject, or granularly manage cookies by category — is being implemented on the PropertyDuka Platform. Until it is live, please use the browser and device options described above.
9. Cookies and the Data Protection Act, 2019
Under the Data Protection Act, 2019 of Kenya and related regulations, the use of cookies that process personal data requires a lawful basis. The lawful bases we rely on for cookie use are:
- (a)Strictly Necessary Cookies — Lawful basis: Contract (processing necessary to provide the service you have requested) and Legitimate Interest (platform security).
- (b)Analytics Cookies (Google Analytics, Firebase) — Lawful basis: Consent. You can withdraw consent at any time.
- (c)Session Recording Cookies (Microsoft Clarity) — Lawful basis: Consent. You can withdraw consent at any time using the Microsoft Clarity opt-out link in Section 8.3.
- (d)Advertising Cookies (Google AdSense) — Lawful basis: Legitimate Interest (operational cookies for ad delivery, frequency capping, and fraud prevention in contextual-only mode, which does not involve profiling). No consent is required for contextual advertising. If personalised advertising is introduced in future, the lawful basis will be Consent and a separate consent mechanism will be implemented before activation.
- (e)Functional Cookies — Lawful basis: Consent. You can withdraw consent through your browser settings or the Cookie Preference Centre once live.
Withdrawal of consent for non-essential cookies will not affect the lawfulness of processing carried out before withdrawal. It will also not affect your ability to use the core features of the PropertyDuka Platform, which rely only on strictly necessary cookies.
10. Updates to This Cookie Policy
We may update this Cookie Policy from time to time to reflect changes in the cookies we use, the technologies we deploy, or applicable legal requirements. When we make material changes, we will:
- (a)update the Effective Date and Version number at the top of this Policy;
- (b)notify you through a banner on the Platform or by email where the change affects how we process your personal data; and
- (c)where new consent-requiring cookies are introduced, present you with a fresh consent request before those cookies are set.
11. Contact Us
If you have any questions about this Cookie Policy or our use of cookies, please contact us:
| Data Protection Officer | dpo@ncbagroup.com |
| Platform Support | hello@propertyduka.com |
| Registered Office | NCBA Leasing LLP, c/o NCBA Group PLC, NCBA Centre, Mara Road, Upper Hill, P.O. Box 44599-00100, Nairobi, Kenya |
If you are not satisfied with how we handle your cookie preferences or personal data, you may lodge a complaint with the Office of the Data Protection Commissioner (ODPC) at odpc.go.ke.
© 2026 PropertyDuka (NCBA Leasing LLP, a subsidiary of NCBA Group PLC). All rights reserved.