01Who we are
Nostalgia Safaris is a safari travel company based in Nairobi, Kenya. We design and operate private safaris and tailor-made journeys, and we are the data controller responsible for the personal information described in this policy.
You can reach us about anything in this policy at info@nostalgiasafaris.co.ke or +254 737 555 220.
02Information we collect
We only ask for what we need to answer your enquiry and to arrange your trip.
- Enquiry details — your name, email address, phone number, the destination or package you are interested in, travel dates, group size and anything you write in the message field.
- Booking details — when you confirm a trip we also need traveller names as they appear on passports, dates of birth, nationality, passport details where suppliers require them, dietary requirements, and any medical or mobility information that affects your safety or comfort.
- Correspondence — emails, WhatsApp messages, call notes and documents you send us while we plan your journey.
- Payment information — we record the fact and amount of a payment and the reference your bank provides. We do not store full card numbers; card payments are handled by our payment provider.
- Technical information — our hosting provider logs IP address, browser type, device type, pages requested and timestamps for security and reliability. This data is aggregated and is not used to build advertising profiles.
03How we use your information
- To reply to your enquiry and prepare a quotation or itinerary.
- To make and manage reservations with lodges, camps, airlines, ground handlers and other suppliers who deliver your trip.
- To process payments, issue receipts and keep the accounting records the law requires.
- To contact you about your booking before, during and shortly after travel — including changes, safety information and emergency contact.
- To send occasional offers and travel inspiration, but only where you have asked for them or agreed at the time of enquiry. You can opt out at any time.
- To meet legal, tax, insurance and regulatory obligations, and to establish or defend legal claims.
04Our lawful basis
We process personal data under the Kenya Data Protection Act, 2019, and, where it applies to you, the EU/UK General Data Protection Regulation. Our bases are: performance of a contract (arranging and delivering your trip), consent (marketing and any sensitive information you choose to share with us), compliance with legal obligations (tax and accounting records), and our legitimate interests (responding to enquiries, securing our services and improving how we work).
06International transfers
Some suppliers and service providers are located outside Kenya, so your information may be transferred to and processed in other countries. Where that happens we take reasonable steps to ensure the recipient applies protections consistent with this policy and applicable data protection law.
07How long we keep it
- Enquiries that do not become bookings — up to 24 months after our last contact, so we can pick up the conversation where you left it.
- Booking and payment records — up to 7 years after travel, as required for tax and accounting purposes.
- Marketing contact details — until you unsubscribe or ask us to delete them.
- Website server logs — a short retention period set by our hosting provider, typically no more than 90 days.
09Your rights
Subject to the conditions in applicable law, you may ask us to:
- confirm whether we hold information about you and give you a copy of it;
- correct information that is inaccurate or incomplete;
- delete information we no longer need;
- restrict or object to certain processing, including direct marketing;
- provide your information in a portable format;
- withdraw consent you previously gave, without affecting processing that already took place.
10Complaints
If you are unhappy with how we have handled your information, please contact us first at info@nostalgiasafaris.co.ke so we can put it right. You also have the right to complain to the Office of the Data Protection Commissioner in Kenya (odpc.go.ke), or to your local supervisory authority if you are in the EU or UK.
11How we protect your information
Access to booking and enquiry records is limited to the team members who need it. Data is transmitted over encrypted connections, stored on access-controlled systems, and shared with suppliers only over secure channels. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we review our practices and will notify you and the relevant authority of a breach where the law requires it.
12Children
Our services are arranged by adults. We do not knowingly collect information from anyone under 18 except as part of a family booking made by a parent or guardian, and we ask that children do not submit the enquiry form themselves.
13Changes to this policy
We may update this policy when our services or the law change. The version published here is the current one, and the date at the top of the page shows when it last changed. If a change materially affects how we use information you have already given us, we will contact you directly.