Data Controller: Arosy Safaris
Jurisdiction: Republic of Kenya
Welcome to Arosy Safaris ("we," "us," or "our"). We are committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, process, store, and safeguard your personal data when you visit our website, request a quotation, book a safari, or use our travel and tourism services.
This Privacy Policy is intended to comply with the Data Protection Act, 2019 of Kenya and the Data Protection (General) Regulations, 2021. By using our website or engaging our services, you acknowledge the practices described in this Privacy Policy.
We may collect information that you provide directly to us as well as information collected automatically when you use our website.
When you request a quotation, make a booking, contact us, or subscribe to our communications, we may collect:
Identity Data: First name, last name, username, date of birth, and nationality.
Contact Data: Email address, telephone number, residential or billing address, and other contact details.
Travel Documentation: Passport details, including passport number, date of issue and expiry, nationality, place of issue, visa information, and other documentation required for travel arrangements.
Financial Data: Payment information, transaction details, and bank account information where required for refunds. Payment card information may be processed directly by secure third-party payment providers.
Travel and Preference Data: Travel dates, destinations, accommodation preferences, dietary requirements, special requests, and itinerary information.
Sensitive Personal Data: Where necessary for the provision of travel services, we may collect information relating to allergies, dietary requirements, mobility requirements, medical considerations, or other special assistance needs.
Emergency Contact Information: Name, telephone number, and relationship of your nominated emergency contact or next of kin.
When you visit our website, we may automatically collect certain technical information, including:
IP address;
Browser type and version;
Device type and operating system;
Pages visited and website interactions;
Date, time, and duration of visits; and
Other technical information required to maintain website security and performance.
We process personal data on one or more lawful bases permitted under applicable Kenyan data protection law, including:
Performance of a Contract: To process bookings and provide the travel services you have requested.
Legal Obligation: To comply with applicable tax, immigration, tourism, aviation, wildlife, and other legal or regulatory requirements.
Consent: Where you have voluntarily provided consent, including for certain marketing communications or optional processing activities.
Legitimate Interests: Where processing is necessary for legitimate business purposes, provided that such interests do not override your data protection rights.
Vital Interests: Where processing is necessary to protect your life or the life of another person, particularly during travel emergencies.
We may use your personal information to:
Provide Travel Services: Process bookings, prepare itineraries, arrange accommodation, transportation, excursions, safaris, and other travel services.
Communicate With You: Send booking confirmations, quotations, invoices, travel documents, itinerary updates, and service-related communications.
Process Payments: Facilitate payments, refunds, accounting, and fraud prevention.
Meet Legal Requirements: Provide information to government authorities, regulators, immigration authorities, wildlife authorities, or other relevant bodies where legally required.
Improve Our Services: Understand customer preferences and improve our website, products, and travel services.
Marketing: Send newsletters, special offers, promotions, and other marketing communications where permitted and, where required, with your consent. You may opt out of marketing communications at any time.
Arosy Safaris does not sell or rent your personal information.
We may share relevant personal information with trusted third parties where necessary to provide our services or comply with legal obligations. These may include:
Hotels, lodges, camps, resorts, and accommodation providers;
Airlines and other transportation providers;
Safari guides, drivers, and ground transportation providers;
Tour operators and activity providers;
Secure payment processors and financial institutions;
Government authorities and regulatory bodies;
Immigration and border-control authorities where required;
Trusted international travel partners where necessary to fulfill your itinerary; and
Professional advisers and technology or service providers who assist us in operating our business.
Where personal information is transferred outside Kenya, we will take appropriate steps to ensure that such transfers are handled in accordance with applicable data protection requirements.
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to meet legal, accounting, tax, contractual, and regulatory requirements.
Generally:
Financial and transaction records: May be retained for the period required under applicable Kenyan tax and accounting laws.
Booking and travel information: Retained for the duration of the booking relationship and for a reasonable period afterwards where required for legitimate business, legal, or dispute-resolution purposes.
Marketing information: Retained until you withdraw your consent or opt out, unless another lawful basis permits continued retention.
When personal information is no longer required, we will take reasonable steps to securely delete, anonymize, or otherwise dispose of it.
We implement reasonable technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, disclosure, or destruction.
These measures may include:
Encryption: Use of appropriate encryption and secure connections when transmitting sensitive information.
Access Controls: Restricting access to personal information to authorized personnel and service providers who require it.
Secure Systems: Maintaining reasonable safeguards for our website, databases, and other information systems.
Staff Awareness: Ensuring personnel handling personal information understand their responsibilities regarding data protection.
Incident Management: Taking appropriate steps to investigate and respond to suspected personal data breaches and making notifications to the relevant authorities and affected individuals where required by law.
Subject to applicable legal conditions and limitations, you have rights in relation to your personal data, including the right to:
Request access to personal information we hold about you;
Request correction or updating of inaccurate or incomplete information;
Request deletion of personal information where there is no lawful reason for us to continue processing it;
Object to certain forms of processing;
Request restriction of processing in appropriate circumstances;
Withdraw consent where processing is based on consent;
Request information about how your personal data is being processed; and
Lodge a complaint with the Office of the Data Protection Commissioner (ODPC) where you believe your data protection rights have been violated.
To exercise your rights, please contact Arosy Safaris using the contact details provided on our website.
Our website may use cookies and similar technologies to improve functionality, security, performance, and user experience.
These may include:
Essential Cookies: Necessary for core website functionality and security.
Analytics Cookies: Used to understand how visitors use our website and help us improve its performance.
Functionality Cookies: Used to remember preferences and improve your experience.
You may control or disable cookies through your browser settings. Disabling certain cookies may affect the functionality of parts of our website.
Our services may involve travel arrangements for families and minors. Where personal information relating to a child is required for a booking or travel arrangement, we will seek appropriate consent or authorization from a parent or legal guardian where required by applicable law.
We do not knowingly collect children's personal information for unrelated purposes or marketing without appropriate consent.
We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal requirements, or data protection practices.
Any updated version will be published on our website with the revised effective date. We encourage you to review this Privacy Policy periodically.
If you have questions about this Privacy Policy, wish to exercise your data protection rights, or have concerns about how we handle your personal information, please contact Arosy Safaris through the contact details provided on our website.
You may also lodge a complaint with:
Office of the Data Protection Commissioner (ODPC)
Britam Towers, 12th Floor
Hospital Road, Upper Hill
Nairobi, Kenya
Email: info@odpc.go.ke
Website: www.odpc.go.ke