Privacy Policy

1. Introduction

Cwetu Jambo Safaris ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website cwetusafaris.africa (the "Site") and use our virtual reality tourism services.

This Privacy Policy complies with the Data Protection Act, 2019 of Kenya, the EU General Data Protection Regulation (GDPR) where applicable, and other applicable data protection laws.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you voluntarily provide to us when you:

• Register for an account
• Purchase virtual experiences or subscriptions
• Contact us through forms or email
• Subscribe to newsletters
• Participate in surveys or promotions

Personal information may include: name, email address, phone number, billing address, payment information, and country of residence.

2.2 Automatically Collected Information

When you visit our Site, we may automatically collect certain information about your device, including:

• IP address and location data
• Browser type and version
• Operating system
• Access times and dates
• Pages viewed and interactions
• Device information for VR compatibility

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our services
• Process transactions and send related information
• Send administrative information and updates
• Respond to inquiries and offer support
• Improve user experience and service quality
• Send marketing and promotional communications (with consent)
• Comply with legal obligations under Kenyan law

4. Legal Basis for Processing (GDPR Compliance)

Under GDPR and Kenyan Data Protection Act, we process your personal data based on:

• Consent: When you have given clear consent for us to process your data
• Contract: Processing necessary for a contract with you
• Legal Obligation: Processing necessary to comply with Kenyan law
• Legitimate Interests: Processing necessary for our legitimate business interests

5. Data Sharing and Disclosure

We may share your information with:

• Service Providers: Payment processors, hosting providers, analytics services
• Business Partners: Local tour operators with your consent
• Legal Authorities: When required by Kenyan law or court order
• Business Transfers: In connection with merger, sale, or acquisition

We do not sell your personal information to third parties.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction, in accordance with Section 41 of the Kenyan Data Protection Act, 2019.

Security measures include: encryption, SSL/TLS protocols, regular security assessments, and access controls.

7. Your Data Protection Rights

Under the Kenyan Data Protection Act, 2019 and GDPR, you have the following rights:

• Right to Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Request limitation on data processing
• Right to Data Portability: Request transfer of data to another controller
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time

To exercise these rights, please contact us using the information provided below.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements under Kenyan law.

When data is no longer needed, we will securely delete or anonymize it in accordance with the Data Protection Act, 2019.

9. International Data Transfers

Your data may be transferred to and processed in countries outside Kenya. We ensure appropriate safeguards are in place in accordance with Section 58 of the Data Protection Act, 2019.

10. Children's Privacy

Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn we have collected such information, we will promptly delete it.

11. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance user experience. For detailed information, please see our Cookie Policy.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

13. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

You also have the right to lodge a complaint with the Office of the Data Protection Commissioner, Kenyaif you believe your data protection rights have been violated.