Privacy Policy

This Privacy Policy explains how Intra Africa Tours handles personal information when you visit intraafricatours.com, send a safari enquiry, subscribe to our newsletter or correspond with us about a trip.

It applies to this website and to the safari planning conversations that follow from it. By using the website you can see exactly what we collect, why we collect it and what choices you have.

Intra Africa Tours is an East African safari company based in Nairobi, Kenya · East Africa. It was founded and is led by John Gitiri, a professional wildlife guide and ornithology-trained naturalist. We run mammal-focused wildlife safaris under the Intra Africa Tours name and specialist birding expeditions under our Birding Around-Africa sub-brand, across Kenya, Uganda and Tanzania.

For the purposes of data protection law, Intra Africa Tours is the data controller for the information described in this policy. You can reach us at info@intraafricatours.com or on WhatsApp at +254 711 743 727.

We keep collection deliberately narrow. Depending on how you use the site, we hold:

• Enquiry details you type into a safari enquiry or custom planning form: your name, email address, an optional phone or WhatsApp number, and the trip details you choose to share such as preferred dates, group size, interests, destinations and any message you write.
• Newsletter details: the email address you submit in the footer sign-up.
• Correspondence: the content of emails and WhatsApp messages you send us, and our replies, so we can continue planning your safari.
• Website usage records: the page path you viewed, a broad device category (mobile, tablet or desktop), the host name of the site that referred you where one exists, and a random per-tab identifier held only for the duration of your browser tab.
• Administrator account details, for our own staff only: name, email address, an optional phone number and account status. Public visitors never create accounts.

We do not ask for passport data, payment card data, financial account details or special category data through this website. If a trip later needs travel document details, that is handled directly with you outside the website.

• Directly from you, when you complete an enquiry or planning form, subscribe to the newsletter, or write to us by email or WhatsApp.
• Automatically, in a limited first-party way, when a page is viewed: our own analytics records the page path, device category and referring host as described above.
• From our own records, when we note preferences and requirements you have already told us about while planning a trip.

• To answer your enquiry and prepare an itinerary, quotation or planning suggestion.
• To communicate with you about a safari you are considering or have agreed.
• To arrange the practical parts of a confirmed trip with the guides, accommodation and transport providers involved.
• To send newsletter updates and new articles, where you asked for them.
• To understand which pages and itineraries are read most, so we can improve the website.
• To keep the website and our administrative area secure, including recording administrative actions in an internal audit log.
• To meet our legal, accounting and record-keeping obligations.

Where data protection law requires a lawful basis, we rely on the following:

• Your consent, for newsletter subscriptions. You may withdraw it at any time.
• Performance of a contract, or steps taken at your request before a contract, when we respond to an enquiry, prepare a quotation and deliver an agreed safari.
• Our legitimate interests, for aggregate website analytics, security monitoring and keeping accurate business records, balanced against your privacy.
• Compliance with legal obligations, where a law requires us to keep or disclose information.

This website does not use advertising cookies, tracking cookies, social media pixels or third-party analytics cookies. We do not set any cookie for marketing or profiling purposes on the public site.

The only browser storage the site relies on is strictly necessary:

• A random identifier held in your browser's sessionStorage so a single visit is not counted repeatedly. It is deleted when you close the tab and is not linked to your name or email.
• Sign-in storage used only by our administrative area, so signed-in staff stay authenticated between pages. It is never created for public visitors.
• Small preference values used by the administrative area to remember interface choices such as which navigation groups are open.

You can clear this storage at any time through your browser settings. Doing so does not prevent you from reading or using any public part of the website.

Because the public website sets no optional, analytics or advertising cookies, there is nothing that requires your prior consent, and we therefore do not show a consent banner that would have no effect. We consider it clearer to explain the position here than to ask for permission we do not need.

You remain in control: browser settings let you block or delete site storage, and every public page continues to work fully if you do. If we ever introduce optional cookies or a third-party analytics or advertising technology, we will publish a consent mechanism offering Accept All, Reject Optional and Manage Preferences, we will not activate the optional technology before consent is given, and we will let you change your choice afterwards. This policy will be updated before any such change takes effect.

Our analytics is entirely first-party and runs on our own infrastructure. No third-party analytics service, advertising network or data broker receives your browsing data from this website.

Each page view is recorded as a path, a device category, a referring host where one exists and a per-tab identifier. We use these records to see which itineraries and articles are read, and we report them as totals. They are not used to build a profile of you or to follow you across other websites.

An enquiry is a request for information and planning, not a booking. The details you submit are stored so John and the planning team can reply, propose an itinerary and refine it with you.

You choose how much to share. The more you tell us about dates, interests and target species, the more precise the proposal can be, but only your name, a way of contacting you and a short description of what you want are needed to start.

We do not sell personal information and we do not share it for advertising. We disclose it only where it is needed for the purposes above:

• With the guides, lodges, camps, transport operators and permit or park authorities involved in a trip you have agreed, and only the details they need to deliver it.
• With the technology providers that host this website and our database, described in the next sections.
• With professional advisers, or with authorities, where a legal obligation or the defence of a legal claim requires it.

Delivering a safari involves independent suppliers. Once a trip is agreed, we pass on only what each supplier needs, for example a guest name and group size to a camp, or pick-up details to a driver.

These suppliers use the information to provide their own service and are responsible for their own handling of it. We share supplier details with you as part of your itinerary so you always know who is involved in your trip.

The website, its database, its file storage and its authentication for our administrators run on managed cloud infrastructure operated on our behalf. These providers process data only on our instructions and only to keep the service running.

Email correspondence is handled through our business email. We do not use a third-party marketing automation platform, advertising platform or payment processor on this website.

We are based in Kenya and our guests come from many countries, so information may be accessed from, or stored on servers located in, countries other than your own. Where information moves across borders, we take reasonable steps to keep the protection consistent with this policy and with applicable data protection law, including relying on appropriate safeguards in our agreements with providers.

We keep information only as long as it serves the purpose it was collected for, and then for as long as a legal, accounting or record-keeping obligation requires.

• Enquiries that do not lead to a trip are kept while the conversation may realistically continue, then deleted or reduced to anonymous totals.
• Records of trips we have delivered are kept for our business and accounting records.
• Newsletter subscriptions are kept until you unsubscribe or ask us to remove you.
• Page view records are kept as operational analytics and can be cleared by us at any time.

We do not publish fixed retention periods we cannot honour. If you want to know how long we hold something specific to you, ask us and we will tell you.

We protect information with practical technical and organisational measures:

• Encrypted connections for every page and every form submission.
• Row level security on the database, so stored records are not readable through the public interface.
• Authentication and role-based permissions for our administrative area, enforced on the server rather than by hiding parts of the interface.
• An internal audit log of significant administrative actions.
• Validation of what forms accept, and restrictions on the type and size of files that can be uploaded.
• Access limited to the people who need it to do their work.

No system can be guaranteed completely secure, but we review these measures as the site changes.

If a personal-data breach occurs, we investigate it, take steps to contain it and record what happened. Where a breach is likely to cause a risk to your rights and freedoms, we will notify the relevant supervisory authority and affected individuals within the timeframes required by applicable law, and explain what happened and what you can do.

Subject to applicable law, you may ask us to:

• confirm whether we hold information about you, and give you a copy;
• correct information that is inaccurate or incomplete;
• delete information we no longer have a reason to keep;
• restrict or object to a particular use, including profiling, which we do not carry out;
• transfer information you gave us to another provider, where that right applies;
• withdraw consent, for example to the newsletter, at any time.

Write to info@intraafricatours.com and tell us what you would like. We will respond within the period required by applicable law and may need to confirm your identity first so we do not disclose information to the wrong person. Exercising these rights is free, and we will explain our reasons if we cannot act on part of a request.

We only send newsletter updates to people who asked for them, and we do not pass email addresses to other companies for marketing. Every newsletter tells you how to stop, and you can also email info@intraafricatours.com to be removed. Withdrawing from marketing does not affect the replies we send about a safari you are actively planning.

This website is intended for adults planning travel. We do not knowingly collect information directly from children. Where a family safari involves children, the details we need are provided by the adult making the arrangements. If you believe a child has sent us personal information directly, contact info@intraafricatours.com and we will delete it.

Our pages link to places such as WhatsApp and our social media profiles. Once you follow a link, the destination is governed by its own privacy policy and not by this one. We encourage you to read the policy of any site you visit from here.

We update this Privacy Policy when the website or our practices change. The effective date and last updated date at the top of this page always show the current version. Where a change materially affects how we use your information, we will make that clear before it takes effect.

For any privacy question, or to exercise a right described above, contact us at info@intraafricatours.com or on WhatsApp at +254 711 743 727. We are based in Nairobi, Kenya · East Africa and reply within one working day (eat, gmt+3). You can also use the contact page.

If you are not satisfied with how we have handled your personal information, please raise it with us first so we can put it right. You also have the right to complain to the Office of the Data Protection Commissioner of Kenya, the supervisory authority for data protection in our home jurisdiction, through the contact and complaint channels published on its official website. If you are in another jurisdiction, you may instead be able to complain to your local supervisory authority.