Privacy Policy - Day Safaris Adventures

Last updated: 5 October 2026

Day Safaris Adventures Ltd (“we”) respects your privacy. This policy explains what personal data we collect through daysafarisadventures.co.ke, why we use it, who we share it with and what rights you have under the Kenya Data Protection Act, 2019 and, where it applies to you, the EU/UK GDPR.

1. Who is responsible

The data controller is Day Safaris Adventures Ltd, 00200 Street RailWays, Nairobi, Kenya. Contact: info@daysafarisadventures.co.ke.

2. What we collect

Contact form: name, email address, subject and your message.
Booking and enquiry forms (safari, trekking, hotels): name, email, phone number, destination or package, travel dates, number of travellers and any special requests you write (which may include dietary or accessibility needs).
Account (if you register): name, email and password (stored hashed), saved destinations and your booking history.
Payments: payment status and references. Card, M-Pesa and bank details are handled by the payment provider you choose; we do not store full card numbers.
Quote pop-up: the name, phone number, trip of interest and short message you type into the "Get a Quote" form, which we store so we can reply, and which then opens a WhatsApp chat with us.
Technical data: IP address, browser type, pages visited and security logs, used to run and protect the site.

3. Why we use your data

To answer your enquiries and prepare quotations (necessary to take steps at your request).
To process and manage bookings, arrange suppliers, send confirmations, invoices and payment links (performance of a contract).
To protect the website against spam, abuse and fraud, including rate-limiting by IP address (our legitimate interest).
To meet legal, tax and accounting obligations.
To send marketing or newsletters only if you have asked for them; you can unsubscribe at any time.

4. Who we share it with

We share data only as needed to deliver your trip and run the site:

Travel suppliers such as lodges, camps, drivers, guides, airlines and park authorities, limited to what they need (for example traveller names and dates).
Email delivery: Brevo (Sendinblue), which sends our confirmations and replies.
Payment providers: Safaricom M-Pesa, Stripe, banks and crypto payment services, depending on the method you use.
Hosting and infrastructure providers that store the website and its data.
Authorities when required by law.

We do not sell your personal data.

5. International transfers

Some of the providers above are located outside Kenya. Where we transfer personal data abroad we do so only where the Data Protection Act permits it, for example to providers that apply appropriate safeguards.

6. How long we keep it

Enquiries that do not lead to a booking are kept for up to 24 months. Booking and payment records are kept for the period required by Kenyan tax and accounting law (generally seven years). Spam and security logs are kept only as long as needed to protect the site.

7. Your rights

You have the right to be informed, to access your data, to object to or restrict processing, to correct inaccurate data, to have it deleted where there is no lawful reason to keep it, and to data portability. To use any of these rights, email info@daysafarisadventures.co.ke; we will respond within the time required by law. You may also complain to the Office of the Data Protection Commissioner of Kenya (www.odpc.go.ke).

8. Security

We use HTTPS, access controls, spam and abuse protection and hashed passwords. No online service can be completely secure; please tell us immediately if you suspect misuse of your account.

9. Children

Our website is for adults. Bookings that include children must be made by a parent or guardian.

10. Cookies

See our Cookie Policy.

11. Changes to this policy

We may update this policy; the “last updated” date above shows the current version.