Last updated: [DATE]
Go Round Africa (“we,” “us”) of [registered address, Kenya] operates goroundafrica.com. This policy explains how we collect, use and protect your personal data, in accordance with the Kenya Data Protection Act, 2019, the EU General Data Protection Regulation (GDPR) where it applies, and other applicable laws.
Data we collect: (a) information you provide — name, email, phone/WhatsApp, country, travel details, passport details where needed for bookings and park permits, dietary and medical information you choose to share for your safety, and payment details processed by our payment providers (we never store full card numbers); (b) information collected automatically — IP address, browser type, pages visited and cookies (see Cookie Policy).
Why we use it (lawful bases): to respond to enquiries and provide quotes (contract/legitimate interest); to arrange and deliver your trip, including sharing necessary details with hotels, parks and transport providers (contract); to process payments (contract); to send marketing emails only with your consent, which you may withdraw anytime via the unsubscribe link; to comply with legal obligations; and to improve our website (legitimate interest).
Sharing: we share data only with service providers needed to deliver your trip (accommodation, park authorities, insurers where you request it), payment processors, and IT providers (hosting, email, analytics) under appropriate safeguards. We never sell your personal data.
International transfers: as a Kenyan company serving international guests, data may be transferred between Kenya and your home country; we use reputable providers with appropriate protections.
Retention: enquiry data up to [24] months; booking and financial records as required by Kenyan tax law (typically 7 years); marketing data until you unsubscribe.
Your rights: you may request access to, correction of, or deletion of your data, object to or restrict processing, withdraw consent, and lodge a complaint with the Office of the Data Protection Commissioner (Kenya) or your local supervisory authority (EU/UK). Contact: [privacy@goroundafrica.com]. California residents have equivalent rights under the CCPA, including the right to know and delete; we do not sell personal information.
Children: our services are for adults; we collect minors’ data only from a parent/guardian for the purpose of a booking.
Security: SSL encryption, access controls, and reputable hosting. No system is 100% secure, but we take protection seriously and will notify you and regulators of any breach as required by law.