Overview
Jadan Safaris Ltd ("Jadan", "we", "us", or "our") operates jadansafaris.com and related services. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website, make an inquiry, or book a safari with us.
By using our website or services, you agree to the collection and use of information in accordance with this policy. If you disagree, please do not use our services.
What data we collect
We collect information you provide directly to us and information generated automatically when you use our site.
Information you provide:
- Name, email address, phone number, and country of residence when you submit an inquiry or booking
- Travel details: intended travel dates, number of guests, destination preferences, and special requirements
- Payment-related billing information (processed directly by Pesapal — we never receive full card numbers)
- Communications: messages, reviews, and feedback you send us
- Newsletter subscription email if you opt in
Information collected automatically:
- Browser type, operating system, and device type
- Pages viewed, time on page, and referring URL
- IP address (used for approximate geographic location only)
- Cookie identifiers (see Cookies section below)
How we use your data
- Process bookings and payments — to create your booking, issue confirmation emails, and coordinate your safari itinerary
- Customer service — to respond to inquiries, complaints, and requests
- Operational improvements — to understand how visitors use our site and improve it
- Marketing communications — only with your explicit consent; you may opt out at any time
- Legal obligations — to comply with applicable Kenyan and international law
- Fraud prevention — to detect and prevent fraudulent transactions or suspicious activity
Sharing your data
We do not sell your personal data. We may share it with:
- Safari suppliers and lodges — only the information necessary to fulfil your booking (name, dietary requirements, arrival details)
- Payment processors — Pesapal processes payments; their privacy policy governs how they handle your payment data
- Email/communications providers — to send booking confirmations and itineraries
- Analytics tools — aggregated, anonymised usage data may be shared with analytics providers
- Legal requirements — where required by Kenyan law, court order, or government authority
All third-party service providers we use are contractually bound to process your data only as we direct and to maintain appropriate security measures.
Payments & financial data
We never store card numbers on our servers.
All payment card transactions are processed by Pesapal Ltd, a PCI-DSS-compliant payment gateway regulated in Kenya. When you enter card details on a Pesapal-hosted page, those details go directly to Pesapal — Jadan Safaris only receives a transaction reference and status confirmation.
M-Pesa payments are processed via the Pesapal gateway in compliance with Safaricom's data handling requirements.
Cookies
Our website uses essential cookies required for the site to function (session management, CSRF protection). We do not use advertising or tracking cookies without your consent.
You can control cookies through your browser settings. Disabling essential cookies may prevent certain site features from working correctly.
Your rights
Under the Kenya Data Protection Act 2019, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data (subject to legal retention requirements)
- Object to or restrict processing in certain circumstances
- Withdraw consent for marketing communications at any time
- Lodge a complaint with the Office of the Data Protection Commissioner (ODPC)
To exercise any of these rights, email us at info@jadansafaris.co.ke. We will respond within 30 days.
Data retention
We retain your personal data only as long as necessary for the purposes it was collected:
- Booking records: 7 years from the date of travel (required for tax and legal purposes)
- Inquiry data: 2 years from last contact if no booking resulted
- Marketing consent records: until you withdraw consent, plus 1 year thereafter
- Website analytics: 26 months (aggregated/anonymised data may be kept longer)
Security
We implement appropriate technical and organisational measures to protect your data, including HTTPS encryption on all pages, regular security assessments, restricted staff access on a need-to-know basis, and database access logging. No system is perfectly secure; if you believe your data has been compromised, contact us immediately at info@jadansafaris.co.ke.
Children's privacy
Our website and services are not directed to children under 16 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us personal data without parental consent, please contact us and we will delete it promptly.
Changes to this policy will be posted on this page with an updated effective date. Significant changes will be communicated by email to registered users.