At Kiboko Kenya Safaris, we are committed to protecting the privacy and personal data of all visitors to our website and clients who book our safari services. This Privacy Policy explains what information we collect, how we use it, how we protect it, and your rights in relation to your personal data.

This Policy applies to our website at https://kibokokenyasafaris.com and to all personal data collected in connection with our safari booking and communication activities, whether online or offline.

Kiboko Kenya Safaris operates in accordance with the Kenya Data Protection Act, 2019 and its associated regulations. Where clients are based in the European Union or European Economic Area, we also recognise applicable obligations under the General Data Protection Regulation (GDPR).

If you have any questions about this Policy, please contact us at info@kibokokenyasafaris.com.

1. Who We Are

Kiboko Kenya Safaris is a Kenya-registered safari and tour company. We are the data controller responsible for the personal information collected through our website and booking processes.

Contact details:

• Website: www.kibokokenyasafaris.com
• Email: info@kibokokenyasafaris.com
• Country of operation: Kenya, East Africa

2. Information We Collect

2.1 Information You Provide to Us

When you make an enquiry, submit a booking request, or communicate with us, we may collect the following personal information:

• Full name
• Email address and phone number (including WhatsApp)
• Nationality and country of residence
• Passport details (number, expiry date, country of issue) — required for park bookings and permits
• Date of birth — required for certain national park fee categories
• Dietary requirements and food allergies
• Medical conditions or physical limitations relevant to safari activities
• Emergency contact name and phone number
• Payment information (processed securely through our payment providers; we do not store card details)
• Any other information you voluntarily share with us during correspondence

2.2 Information Collected Automatically

When you visit our website, we automatically collect certain technical information, including:

• IP address and approximate location (country/city level)
• Browser type and version
• Device type (desktop, mobile, tablet)
• Pages visited and time spent on each page
• Referring website or source (e.g. Google search, social media link)
• Date and time of your visit

This information is collected via cookies, log files, and analytics tools and is used to improve our website and understand how visitors use it.

2.3 Information from Social Media & Third Parties

If you contact us via social media platforms (such as Facebook, Instagram, TikTok, or WhatsApp), we may receive and store the information you share in those messages. We may also receive referral information from travel agents or partner platforms that direct enquiries to us.

3. How We Use Your Information

We use the personal data we collect for the following purposes:

• To respond to your safari enquiries and provide quotes
• To process and confirm your booking
• To arrange park permits, accommodation, and other services included in your itinerary
• To share relevant information with accommodation providers, Kenya Wildlife Service (KWS), and other third-party service providers necessary to deliver your safari
• To communicate with you before, during, and after your trip (including booking updates, pre-departure information, and post-trip follow-up)
• To comply with Kenyan legal and regulatory requirements
• To send marketing communications, where you have given consent or where we have a legitimate interest to do so
• To improve our website, services, and customer experience
• To detect and prevent fraudulent activity

4. Legal Basis for Processing

We process your personal data on the following legal grounds under the Kenya Data Protection Act 2019:

• Contract performance: Processing is necessary to fulfil your booking and deliver our services
• Legitimate interests: We process data to operate and improve our business, prevent fraud, and communicate with past and prospective clients, provided this does not override your rights
• Legal obligation: We may process data to comply with applicable laws and regulations
• Consent: For marketing communications, we rely on your consent, which you may withdraw at any time

For EU/EEA clients, the equivalent GDPR legal bases apply: Article 6(1)(b) (contract), Article 6(1)(f) (legitimate interests), Article 6(1)(c) (legal obligation), and Article 6(1)(a) (consent).

5. Sharing Your Information

We do not sell your personal data to third parties. We may share your information with:

• Safari lodges, camps, and hotels — to confirm your accommodation
• Kenya Wildlife Service (KWS) and national park authorities — to process park permits
• Safari guides and drivers — to facilitate your game drives and activities
• Transfer and logistics providers — where transport is arranged on your behalf
• Payment processors — to securely handle transactions
• Analytics and marketing tools (e.g. Google Analytics, Google Ads, Meta Pixel) — to measure website performance and run marketing campaigns
• Legal or regulatory authorities — where required by law

All third parties who receive your data are required to handle it securely and only for the purposes for which it was shared.

6. Cookies

6.1 What Are Cookies?

Cookies are small text files placed on your device when you visit our website. They help us recognise your device, remember your preferences, and understand how you navigate our site.

6.2 Types of Cookies We Use

• Essential cookies: Necessary for the website to function correctly
• Analytics cookies: Help us understand how visitors use our site (e.g. Google Analytics)
• Marketing cookies: Used to deliver relevant advertisements and track campaign effectiveness (e.g. Google Ads, Meta/Facebook Pixel)

You can control or disable cookies through your browser settings at any time. Disabling certain cookies may affect the functionality of our website. For more information on managing cookies, refer to your browser’s help documentation.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to comply with legal, accounting, or reporting obligations.

• Booking and client records: Retained for a minimum of 7 years in line with Kenyan tax and business record-keeping requirements
• Enquiry records (non-booked): Retained for up to 2 years
• Marketing contact lists: Retained until you unsubscribe or request removal
• Website analytics data: Retained in aggregate form for up to 26 months

8. Data Security

We take the security of your personal data seriously. We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or disclosure, including:

• Secure (HTTPS) website connections
• Password-protected internal systems
• Restricted access to personal data on a need-to-know basis
• Secure payment processing through PCI-compliant payment providers

While we take all reasonable steps to protect your data, no method of transmission over the internet is 100% secure. If you have concerns about the security of your data, please contact us immediately.

9. International Data Transfers

As a Kenyan company serving international clients, your personal data may be transferred to and processed in countries outside Kenya, including within the East African region and internationally, in connection with third-party service providers and marketing tools. Where such transfers occur, we ensure appropriate safeguards are in place consistent with the Kenya Data Protection Act 2019.

10. Your Data Protection Rights

Under the Kenya Data Protection Act 2019, you have the following rights in relation to your personal data:

• The right to be informed — you have the right to know what personal data we hold about you and how we use it
• The right to access — you may request a copy of the personal data we hold about you
• The right to rectification — you may request correction of any inaccurate or incomplete data
• The right to erasure — you may request that we delete your personal data, subject to legal retention obligations
• The right to object — you may object to the processing of your data for marketing purposes at any time
• The right to restrict processing — you may request that we limit how we use your data in certain circumstances
• The right to data portability — you may request that your data be transferred to you or to another organisation in a commonly used format

EU/EEA residents enjoy equivalent rights under the GDPR (Articles 15–22).

To exercise any of these rights, please contact us in writing at info@kibokokenyasafaris.com. We will respond within 21 days as required under Kenyan law (or 30 days for GDPR requests). We may need to verify your identity before processing your request.

If you are not satisfied with how we handle your data or any request you make, you have the right to lodge a complaint with the Office of the Data Protection Commissioner of Kenya (www.odpc.go.ke).

11. Marketing Communications

With your consent, or where we have a legitimate interest in doing so, we may send you marketing communications about our safari packages, special offers, and travel inspiration. You may opt out of receiving these communications at any time by:

• Clicking the ‘unsubscribe’ link in any marketing email
• Contacting us directly at info@kibokokenyasafaris.com

Opting out of marketing communications will not affect communications necessary for the delivery of your booked services.

12. Third-Party Websites

Our website may contain links to third-party websites, including travel review platforms, payment portals, and social media channels. This Privacy Policy applies only to our website and services. We are not responsible for the privacy practices of any linked external sites and encourage you to read their privacy policies before providing any personal information.

13. Children’s Privacy

Our safari services are primarily directed at adults aged 18 and over. While children may participate in safari activities when accompanied by an adult guardian, we do not knowingly collect personal data directly from children under the age of 18 without verifiable parental or guardian consent.

If you believe we have inadvertently collected personal data from a minor without appropriate consent, please contact us immediately at info@kibokokenyasafaris.com and we will take prompt steps to remove such data.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Any updates will be posted on this page with a revised effective date. We encourage you to review this Policy periodically. Your continued use of our website following any changes constitutes your acceptance of the updated Policy.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact us:

Kiboko Kenya Safaris

• Website: www.kibokokenyasafaris.com
• Email: info@kibokokenyasafaris.com
• Country: Kenya, East Africa