Privacy Policy

1. Introduction

Karmasky Travels Ltd (“we,” “us,” “our”) is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, store, and share your personal data when you interact with our website, make a booking, or communicate with our team.

We are registered in Kenya (Registration No. [XXXXX]) with offices at Karen Road, Nairobi, Kenya, and operate in accordance with the Kenya Data Protection Act 2019 and, where applicable, the European Union General Data Protection Regulation (GDPR).

2. Data We Collect

We collect the following categories of personal data:

• Identity Information: Full name, date of birth, nationality, passport number and expiry date.
• Contact Information: Email address, telephone number, postal address.
• Booking Information: Travel dates, destination preferences, accommodation choices, dietary requirements, medical notes relevant to travel.
• Payment Information: Payment card details (processed securely via our payment provider — we do not store full card numbers), M-Pesa transaction references, bank transfer details.
• Communication Data: Records of correspondence with our team by email, telephone, or contact form.
• Technical Data: IP address, browser type, device information, pages visited, and time spent on our website (collected via cookies and analytics tools).
• Marketing Preferences: Your preferences regarding receiving marketing communications from us.

3. How We Use Your Data

We use your personal data for the following purposes:

• —To process and manage your travel booking and communicate with you about it
• —To comply with legal requirements, including those of aviation, immigration, and travel authorities in the countries you visit
• —To process payments and prevent fraudulent transactions
• —To provide you with pre-departure documentation, itineraries, and travel information
• —To respond to your enquiries and provide customer support
• —To send marketing communications (only with your consent, and you may opt out at any time)
• —To improve our website and services through analytics
• —To comply with our legal obligations as a travel business

4. Cookies

Our website uses cookies to improve your browsing experience and to analyse website traffic. We use:

• Essential Cookies: Required for the website to function correctly. Cannot be disabled.
• Analytics Cookies: Help us understand how visitors use our website (e.g., Google Analytics). Used anonymously.
• Marketing Cookies: Used to display relevant advertising. Only set with your explicit consent.

You can control cookie settings through your browser. Disabling certain cookies may affect website functionality.

5. Data Sharing

We share your personal data only with third parties who are essential to delivering your travel experience:

• —Safari camps, hotels, and lodges as part of your booking confirmation
• —Domestic airlines and charter services for seat reservations
• —Ground transfer operators for your pick-up arrangements
• —Payment processors (Stripe, Flutterwave, or similar) for secure payment processing
• —Kenya Tourism Board and relevant regulatory authorities as required by law
• —Emergency services in the event of a medical or safety emergency

We never sell your personal data to third parties for marketing purposes.

6. International Data Transfers

As an international travel company, your data may be transferred to and processed in countries outside your home jurisdiction, including Kenya, Tanzania, and the United Kingdom. Where such transfers occur, we take appropriate safeguards to ensure your data is protected to an equivalent standard.

For clients in the European Economic Area (EEA), transfers are made in compliance with GDPR requirements, including the use of Standard Contractual Clauses where necessary.

7. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes described in this policy. Booking records are retained for seven years following the completion of your travel to comply with financial and legal obligations. Marketing data is retained until you withdraw your consent.

8. Your Rights

Under applicable data protection law, you have the right to:

• —Access the personal data we hold about you
• —Correct inaccurate personal data
• —Request deletion of your personal data (where no legal obligation to retain it exists)
• —Object to processing of your data for marketing purposes
• —Withdraw consent for marketing communications at any time
• —Lodge a complaint with your national data protection supervisory authority

To exercise any of these rights, please contact us at privacy@Karmaskytravels.com.

9. Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, or destruction. Our website uses SSL encryption. Payment processing is handled by PCI-DSS compliant payment providers.

10. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact: