Privacy Policy

Beevans Safaris & Tours, Kasarani Ruaraka, Nairobi, Kenya, is responsible for the personal information described in this policy (the “data controller”). We handle personal data in line with Kenya's Data Protection Act, 2019. You can contact us about privacy at any time at ekiptoo@beevanssafaris.com.

• Enquiries and bookings: your name, email address, phone or WhatsApp number, travel dates, number of adults and children, the safari you are interested in and any notes you send us.
• Travel details we need to run your trip: for example names as they appear on passports, nationality, dietary or medical needs you choose to share, and flight details.
• Payments: the amount, currency, date, payment method, a masked card number or phone number and the confirmation code returned by our payment provider. We never receive or store your full card number or security code.
• Newsletter: your email address, if you subscribe.
• Technical data: your IP address and browser information, used for security and spam protection.

• To reply to your enquiry, prepare quotes and itineraries, and arrange your safari (the lawful basis is taking steps at your request to enter into, and perform, a contract).
• To take payments, send receipts and keep financial records (contract and legal obligation).
• To send safari news and offers, only if you subscribed (consent). Every email has an unsubscribe option.
• To protect our website from spam and abuse (our legitimate interests).

We do not sell your personal information, and we do not use it for automated decision-making.

We only share what is needed, with:

• Lodges, hotels, airlines, park authorities and local partners who provide parts of your trip, for example names and dietary needs for room and permit bookings.
• Pesapal, our payment provider, which processes card and mobile-money payments securely under its own privacy policy and the card industry's PCI DSS security standard.
• Service providers that help us run the website and email, such as our web host, Cloudflare (security and spam protection) and our email provider.
• Authorities, where the law requires it.

Some of these providers may process data outside Kenya. Where they do, we rely on providers that keep appropriate safeguards in place, as the Data Protection Act requires.

Our website uses only the cookies it needs to work and to stay secure, for example Cloudflare's security cookies and its Turnstile check on our forms, which tells people and spam bots apart. We do not use advertising cookies. Embedded content such as maps or reviews may set cookies from their providers when you use them.

• Enquiries that do not lead to a booking: up to 2 years, so we can help if you get in touch again.
• Booking and payment records: 7 years after your trip, as required for tax and accounting.
• Newsletter subscriptions: until you unsubscribe.

Our website is served over encrypted connections (HTTPS), access to our admin system is limited to authorised staff with individual accounts, and payments are handled entirely on Pesapal's secure pages. No system is completely secure, but we work to protect your information and will notify you and the Data Commissioner of any breach as the law requires.

Under the Data Protection Act, 2019 you have the right to:

• be told how your data is used, and get a copy of the data we hold about you;
• have inaccurate data corrected, or data we no longer need deleted;
• object to processing, including withdrawing consent to marketing at any time;
• ask for your data in a portable format.

Email ekiptoo@beevanssafaris.com to use any of these rights; we will reply within the time the law allows. If you are unhappy with how we handle your data, you can complain to the Office of the Data Protection Commissioner (odpc.go.ke).

We may update this policy from time to time. The date at the top shows when it last changed; significant changes will also be shown on our website.