Privacy Policy - Zuri Eagles Safaris

Last Updated: July 26, 2026

1. Introduction

Zuri Eagles Safaris (“we,” “our,” “us”) is committed to protecting the privacy and personal data of our clients, website visitors, and all individuals who interact with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website (https://zurieaglesafaris.com/), book our safari services, or otherwise communicate with us.

We are dedicated to complying with the Kenya Data Protection Act, 2019 (DPA) and the General Data Protection Regulation (GDPR) (EU) 2016/679 , ensuring that your personal data is processed lawfully, fairly, and transparently.

Data Controller:

Zuri Eagles Safaris
Karen, Zamani Business Park, Nairobi, Kenya
Email: info@zurieaglesafaris.org
Phone: +254 759 097 912 | +254 701 375 003

2. Personal Data We Collect

We collect various categories of personal data to provide you with exceptional safari experiences. The nature of data collected depends on your interaction with us.

2.1 Identity and Contact Data

Full name, title, country of residence
Email address, phone number
Postal address (for invoicing and physical communications)

2.2 Travel and Booking Data

Passport/ID number and expiry date
Travel dates, destinations, and accommodation preferences
Special requirements (e.g., dietary needs, accessibility requests)
For Halal Safaris, we collect information about dietary and religious preferences to tailor your experience

2.3 Financial and Transaction Data

Payment details (credit/debit card information, bank account details for wire transfers)
Billing address and invoice history

2.4 Technical and Usage Data

IP address, browser type and version, operating system
Device information and browsing activity on our website
Cookies and tracking technologies

2.5 Communication Data

Records of correspondence via email, contact forms, phone calls, or WhatsApp
Feedback and survey responses

2.6 Sensitive Personal Data
Under the Kenya Data Protection Act, sensitive data includes information revealing race, health status, ethnic social origin, conscience, belief, biometric data, and sexual orientation . We only collect such data when:

You voluntarily provide it (e.g., dietary restrictions indicating religious or health considerations)
It is necessary for delivering our services (e.g., Halal Safaris)
We have obtained your explicit consent

3. How We Collect Your Personal Data

We collect personal data through the following channels :

Directly from you:

When you make a booking or inquiry via our website, email, phone, or WhatsApp
When you fill out contact forms or subscribe to newsletters
When you provide feedback or participate in surveys

Indirectly:

From third-party service providers (e.g., payment processors, travel partners)
Through website cookies and analytics tools
From publicly available sources or referrals

4. How We Use Your Personal Data and Legal Basis

We process your data only for specified, legitimate purposes. The table below outlines our processing activities and the legal basis under both the Kenyan DPA and GDPR .

Purpose	Data Categories Used	Legal Basis
Booking and Service Delivery	Identity, Contact, Travel/Booking, Financial	Contractual Necessity – Processing is necessary to fulfill our contract with you (DPA Section 30(1)(b); GDPR Art. 6(1)(b))
Communication and Customer Support	Identity, Contact, Communication	Contractual Necessity / Legitimate Interest – To respond to inquiries and provide service updates (DPA Section 36; GDPR Art. 6(1)(f))
Marketing and Promotional Communications	Identity, Contact, Travel Preferences	Consent – You have provided explicit consent to receive marketing materials. You can opt out at any time (DPA Section 37; GDPR Art. 6(1)(a))
Personalization of Services	Travel/Booking, Special Requirements	Legitimate Interest – To tailor experiences to your preferences and enhance satisfaction
Legal and Regulatory Compliance	Identity, Financial, Travel	Legal Obligation – To comply with tax, immigration, and other legal requirements (GDPR Art. 6(1)(c))
Website Improvement and Analytics	Technical/Usage Data	Consent – For non-essential cookies and analytics (DPA Section 37; GDPR Art. 6(1)(a))

Commercial Use of Personal Data: We do not commercialize or sell your personal data without your explicit consent. If we intend to use your data for commercial purposes (e.g., sharing with third-party partners for marketing), we will obtain your clear, unambiguous consent .

5. Cookies and Tracking Technologies

Our website uses cookies to enhance your browsing experience. Cookies are small text files stored on your device that help us remember your preferences and analyze website traffic .

Types of Cookies We Use:

Essential Cookies: Necessary for website functionality and security
Analytical Cookies: Help us understand how visitors interact with our site (e.g., Google Analytics)
Functionality Cookies: Remember your preferences and settings

Managing Cookies:
You can manage your cookie preferences through our cookie consent banner upon first visit. You can also adjust your browser settings to block or delete cookies. However, disabling certain cookies may affect website functionality.

We do not respond to “Do Not Track” signals at this time.

6. Data Sharing and Disclosure

We may share your personal data with selected third parties to facilitate our services:

Service Providers and Subcontractors:
- Payment processors
- Airlines, hotels, lodges, and ground transport operators
- IT service providers and website hosting
- Email marketing platforms (e.g., for newsletters)
- Travel insurance providers
Legal and Regulatory Authorities:
- When required by law or to protect the rights, property, or safety of Zuri Eagles Safaris, our clients, or others
Professional Advisors:
- Lawyers, auditors, and insurers

We ensure that all third-party recipients are bound by contractual obligations to protect your data and use it only for the specified purposes .

7. International Data Transfers

As a safari operator, we may need to transfer your personal data to countries outside Kenya and the European Economic Area (EEA) to fulfill bookings (e.g., lodges in Tanzania, payment processors in the UK).

We ensure that such transfers comply with legal requirements by:

Transferring only to countries with an adequacy decision by the EU Commission or Kenya’s Data Commissioner
Using Standard Contractual Clauses (SCCs) approved by the EU for data transfers to third countries
Ensuring that recipients implement appropriate technical and organizational measures to protect your data

You have the right to request information about the safeguards we use for international data transfers .

8. Data Security

We are committed to protecting your personal data against unauthorized access, alteration, disclosure, or destruction. Our security measures include:

Technical Measures: Encryption of data in transit and at rest, firewalls, secure servers, and regular security audits
Organizational Measures: Access controls limiting data access to authorized personnel only, staff training on data protection, and clear data handling procedures

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the Office of the Data Protection Commissioner (ODPC) within 72 hours and inform you without undue delay .

9. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes for which it was collected, or as required by law .

Retention Periods:

Booking and Financial Records: Up to 7 years to comply with tax and accounting requirements
Contact and Marketing Data: Until you withdraw consent or object to processing
Website Analytics Data: For a maximum of 3 years, anonymized where possible

Upon expiration of the retention period, we securely delete, anonymize, or pseudonymize your data .

10. Your Data Protection Rights

Under the Kenya Data Protection Act, 2019, and the GDPR, you have the following rights regarding your personal data :

Right	Description	How to Exercise
Right to Access	Request a copy of the personal data we hold about you	Submit a request via email to support@zurieaglesafaris.com
Right to Rectification	Correct inaccurate or incomplete data	Provide corrected information
Right to Erasure (“Right to be Forgotten”)	Request deletion of your data under certain conditions	Submit a request; we will respond within 14 days
Right to Restrict Processing	Limit how we use your data	Request restriction; we will pause processing where applicable
Right to Data Portability	Receive your data in a structured, machine-readable format	Submit a request for data export
Right to Object	Object to processing for marketing or legitimate interests	Opt out or submit an objection
Right to Withdraw Consent	Withdraw consent at any time where consent is the legal basis	Email dpo@zurieaglesafaris.com
Right to Complain	Lodge a complaint with the Office of the Data Protection Commissioner (ODPC)	Contact ODPC at https://www.odpc.go.ke

Exercising Your Rights:
To exercise any of these rights, please contact our Data Protection Officer (DPO) at:

Email: support@zurieaglesafaris.com
Subject Line: Data Subject Request – [Your Name]

We will verify your identity before processing requests and respond within the statutory timeframes (generally 7–14 days under Kenyan law) .

11. Children’s Privacy

Our services are not directed to children under the age of 16. We do not knowingly collect personal data from minors without parental or guardian consent. If you are a parent or guardian and believe your child has provided us with personal data, please contact us, and we will take steps to delete such data .

12. Updates to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or operational needs. The latest version will always be available on our website with the “Last Updated” date at the top.

We will notify you of significant changes via email or a prominent notice on our website.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact us:

Technology Officer:
Zuri Eagles Safaris
Karen, Zamani Business Park, Nairobi, Kenya
Email: support@zurieaglesafaris.com
Phone: +254 759 097 912 | +254 701 375 003

For complaints: You have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) at:

Website: https://www.odpc.go.ke
Address: P.O. Box 45058 – 00100, Nairobi, Kenya