Privacy Policy
How Imara Africa Safaris collects, uses and protects your personal data. This notice is written to comply with the GDPR, the UK GDPR, and the Kenya Data Protection Act 2019.
This privacy notice for Imara Africa Safaris (“Company,” “we,” “us,” or “our”) describes how and why we might collect, store, use, and/or share (“process”) your information when you use our services (“Services”), such as when you:
- Visit our website at imaraafricasafaris.com, or any website of ours that links to this notice.
- Make a safari enquiry, booking or payment with us.
- Engage with us in other ways — sales conversations, marketing or events.
Questions or concerns? Reading this notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. Still have questions? Email us at info@imaraafricasafaris.com.
At a glance
Summary of key points
This summary provides the key points from our privacy notice. You can find more detail on each topic in the full sections below.
What personal information do we process?
When you visit, use or navigate our Services, we may process personal information depending on how you interact with Imara Africa Safaris, the choices you make, and the products and features you use.Do we process any sensitive personal information?
We do not process sensitive personal information (e.g. genetic, biometric or health data) as part of regular safari planning.Do we receive any information from third parties?
We may receive information from public databases, marketing partners, social media platforms and other outside sources to enhance the safari planning experience we offer you.How do we process your information?
To provide, improve and administer our Services, communicate with you, manage your safari logistics, and comply with law. We may also process your information for other purposes with your consent.Who do we share personal information with?
Carefully selected safari service providers — lodges, camps, ground transport, domestic flight operators — strictly as needed to deliver your booked itinerary. Plus payment processors and government bodies where legally required.How do we keep your information safe?
Encryption in transit (TLS/SSL), access controls, regular security assessments, and secure data-storage infrastructure. No internet transmission can be guaranteed 100% secure, but we follow industry best practice.What are your rights?
Depending on where you are located, applicable privacy law (GDPR, UK GDPR, Kenya DPA) gives you rights of access, rectification, erasure, restriction, portability, objection and the right to withdraw consent. See section 08 for the full list.How do you exercise your rights?
The easiest way is by contacting our Data Protection Officer. We act on every request in accordance with applicable data protection laws — usually within 30 days.
01What information do we collect?
In short · We collect personal information you provide to us, plus device + usage data collected automatically when you visit our Services.
Personal information you disclose to us
We collect personal information that you voluntarily provide to us when you express interest in our products and Services, participate in activities on the Services, or otherwise contact us. The information we collect may include:
- Names (lead traveller + group)
- Phone numbers (incl. WhatsApp)
- Email addresses
- Country of residence
- Travel dates & destination preferences
- Group size & special requirements
- Passport details (when required for booking)
- Dietary, medical & accessibility preferences
Sensitive information. We do not process sensitive personal information (e.g. biometric or genetic data). Health-related dietary or accessibility prefs are handled with extra care and only shared with the on-trip suppliers who need them.
Payment data. We collect the data necessary to process your payment (payment instrument number, security code). All payment data is stored by our secure payment processor — Imara Africa Safaris does not store full payment-card details on our servers.
All personal information you provide must be true, complete and accurate, and you must notify us of any changes.
Information automatically collected
Some information — such as your IP address and/or browser and device characteristics — is collected automatically when you visit our Services. This information does not reveal your specific identity but may include device and usage information, operating system, language preferences, referring URLs, country, and information about how and when you use our Services.
This information is primarily needed to maintain the security and operation of our Services, and for internal analytics and reporting. Categories we collect:
- Log & usage data. Service-related, diagnostic and performance information our servers automatically collect when you access or use our Services.
- Device data. Information about your computer, phone, tablet or other device used to access the Services.
- Location data. Precise or imprecise location of your device — you can opt out via your device settings, but some features will be reduced.
Information from other sources
To enhance our ability to provide relevant marketing, offers and Services to you and to update our records, we may obtain information about you from public databases, joint marketing partners, affiliate programmes, data providers and other third parties — including mailing addresses, email addresses, phone numbers, intent / behaviour data, IP addresses, and social-media profiles.
02How do we process your information?
In short · To provide, improve and administer our Services, communicate with you, manage your safari logistics, and comply with law — plus other purposes with your consent.
We process your personal information for a variety of reasons, depending on how you interact with our Services:
- To deliver and facilitate Services. Booking confirmations, supplier coordination, trip documents, on-trip support.
- To respond to enquiries & offer support. So we can resolve questions about quotes, itinerary changes or logistics quickly.
- To send administrative information. Receipts, payment reminders, changes to our terms or policies, and other operational notices.
- To fulfil and manage your orders. Payments, refunds, supplier-side amendments.
- To send marketing and promotional communications. Only with your consent. You can opt out at any time via the unsubscribe link in our emails.
- To protect our Services. Fraud monitoring, abuse prevention, security incident response.
- To save or protect vital interests. For example, contacting emergency contacts during an on-trip medical situation.
03What legal bases do we rely on?
In short · We only process your personal information when we have a valid legal reason under applicable law — consent, contract, legal obligation, legitimate interest or vital interest.
If you are located in the EU, UK, or Kenya, this section applies to you.
The General Data Protection Regulation (GDPR), the UK GDPR, and the Kenya Data Protection Act 2019 require us to explain the valid legal bases we rely on in order to process your personal information. As such, we may rely on the following legal bases:
- Consent. Where you have given us permission for a specific purpose (e.g. marketing emails). You can withdraw your consent at any time.
- Performance of a contract. Where it is necessary to fulfil our contractual obligations — booking, payments, supplier coordination — or at your request before entering a contract.
- Legitimate interests. Where it is reasonably necessary to achieve our legitimate business interests, and those interests do not outweigh your fundamental rights and freedoms (e.g. site analytics, fraud prevention).
- Legal obligations. Where we must process your information to comply with our legal obligations — tax records, law-enforcement requests, regulatory disclosures.
- Vital interests. Where processing is necessary to protect your vital interests or those of a third party, such as a medical emergency on safari.
06How long do we keep your information?
In short · As long as necessary to fulfil the purposes in this notice, unless a longer retention is required by law (tax, accounting, regulatory).
- Booking & transaction records7 years
Required by Kenyan tax law for financial records.
- Marketing consent recordsUntil you withdraw
Removed promptly when you unsubscribe or notify us in writing.
- Website analytics data26 months
Anonymised aggregate data for site-improvement analytics.
- Enquiry correspondence3 years
From last contact, to honour planning conversations.
When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymise it. If that is not immediately possible (e.g. because it has been stored in backup archives), we will securely store it and isolate it from any further processing until deletion is possible.
07How do we keep your information safe?
In short · A layered set of organisational and technical security measures — but no internet transmission can be guaranteed 100% secure.
Encryption in transit
TLS/SSL on every request, including form submissions and payment flows.
Access controls
Role-based access, least-privilege principle, audit logging on sensitive operations.
Regular assessments
Periodic security reviews and dependency audits to catch issues early.
Secure data storage
Hardened infrastructure, encrypted backups, and isolated production environments.
Despite our safeguards, transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment.
08What are your privacy rights?
In short · Under GDPR, UK GDPR and the Kenya DPA you have rights of access, rectification, erasure, restriction, portability, objection and the right to withdraw consent. We act within 30 days.
In some regions — the European Economic Area (EEA), the United Kingdom (UK), Canada and Kenya — you have rights under applicable data protection laws. To exercise any of these rights, please contact our Data Protection Officer.
Right of access
Request a copy of the personal data we hold about you, with context for why and how long we hold it.
Right to rectification
Request correction of inaccurate or incomplete data — we update records within 30 days.
Right to erasure
Request deletion of your personal data — the 'right to be forgotten' — subject to legal retention obligations.
Right to restrict processing
Request that we limit how we use your data while a query, dispute or accuracy check is open.
Right to data portability
Receive your data in a structured, machine-readable format that you can carry to another service.
Right to object
Object to processing based on legitimate interests or for direct marketing — we honour opt-outs immediately.
Right to withdraw consent
Where processing is based on consent (e.g. marketing), you may withdraw it at any time without affecting lawful processing carried out before withdrawal.
Opting out of marketing. You can unsubscribe at any time via the link in our emails. We may still send service-related messages necessary for the administration of your booking.
If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) in Kenya, or with your local data-protection authority.
09Children's privacy
In short · Our Services are not directed at individuals under 16. Family safaris are booked by a parent or legal guardian.
We do not knowingly collect personal data from children. If we become aware that a child under 16 has provided us with personal data without parental consent, we will take steps to delete that information promptly. Bookings that include children as travellers must be made by a parent or legal guardian.
10Controls for Do-Not-Track features
Most web browsers, and some mobile operating systems and applications, include a Do-Not-Track (“DNT”) feature or setting you can activate to signal your preference not to have data about your online browsing activities monitored and collected. At this stage no uniform technology standard for recognising and implementing DNT signals has been finalised. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this notice.
11Do we make updates to this notice?
In short · Yes — we will update this notice as necessary to stay compliant with relevant laws. Material changes are communicated by email and on the website.
The updated version will be indicated by an updated “Last updated” date and will be effective as soon as it is accessible. If we make material changes we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this notice frequently.
12How can you contact us?
For privacy-related questions, data-access requests, or concerns, please contact our Data Protection Officer:
Imara Africa Safaris — Data Protection Officer
Nairobi, Kenya
General enquiries: info@imaraafricasafaris.com, or reach us via our contact page.
FAQPrivacy FAQ
What personal data does Imara Africa Safaris collect?+
We collect the details you give us to plan and deliver your safari — name, contact details, travel dates, passport and traveller information, payment details processed by our gateways, and any preferences — plus standard technical data (such as cookies and analytics) when you use our website.
Does Imara sell my personal data?+
No. We do not sell your personal data. We share it only with the suppliers needed to deliver your safari (lodges, parks, airlines), our payment processors, and service providers acting on our instructions, under appropriate safeguards.
How do I access, correct or delete my data?+
Email info@imaraafricasafaris.com with your request. Under the Kenya Data Protection Act and GDPR you can request access, correction, deletion, restriction or portability of your data, and object to certain processing. We respond within the timeframes required by law.
How long do you keep my data?+
We keep personal data only as long as needed for the purpose it was collected, including legal, accounting and tax obligations. Booking records are retained for the statutory period; marketing data is kept until you unsubscribe.
Is my payment information secure?+
Yes. Payments are processed by PCI-DSS compliant gateways (such as Pesapal and DPO) over encrypted connections. We never store your full card details and never request card details by email or chat.
Imara Africa Safaris reserves the right to update or amend this Privacy Policy at any time. By continuing to use our Services, you acknowledge that you have read, understood and agreed to this policy.
Want the booking-side terms? See our Safari Booking Terms.
Last updated · March 2026