Effective date: 2 October 2026
Last reviewed: 2 October 2026
This Privacy Policy explains how Greatlink Safaris collects, uses, stores, shares and protects personal data relating to prospective travellers, clients, website visitors and people who communicate with us. It is designed to reflect the privacy principles and data subject rights established by Kenya's Data Protection Act, 2019 and applicable regulations.
1. Who we are
Greatlink Safaris is a Kenya based safari operator. For personal data that we decide how and why to process, Greatlink Safaris acts as the data controller. You can contact us through the official details on our Contact Us page.
2. What personal data we may collect
Depending on how you interact with us, we may collect the following categories of information:
- Identity information: name, title, date of birth, age, gender where relevant to a supplier requirement, nationality and residency category.
- Contact information: email address, telephone or WhatsApp number, postal address and emergency contact information where needed.
- Travel information: intended travel dates, destination preferences, accommodation preferences, itinerary choices, traveller numbers, rooming requirements and activity interests.
- Travel document information: passport or identification details only where reasonably required for a flight, permit, park, accommodation or other confirmed service.
- Special assistance information: dietary requirements, allergies, mobility needs, accessibility requests or health related information you choose to provide where it is necessary to plan or safely deliver the requested travel service.
- Booking and financial records: quotations, invoices, receipts, booking references, payment status, transaction references and limited payment information. We do not intentionally store full payment card numbers unless a compliant payment service specifically requires and lawfully processes them.
- Communication records: email, website forms, telephone notes, WhatsApp or other messages exchanged with our team.
- Website and technical information: IP address, browser, device type, pages visited, referral information, session information, cookie choices and website analytics where enabled.
- Feedback and media: reviews, testimonials, photographs or video where you submit them or give permission for their use.
3. How we collect personal data
We may collect information directly from you when you complete an enquiry, request a quotation, make a booking, pay an invoice, contact our team, create an account or submit a review. We may also receive relevant information from a lead traveller, travel companion, authorised representative, payment provider or supplier involved in your requested travel arrangements.
If you provide personal data about another traveller, you should have authority to provide it and should make that person aware that the information may be used to arrange the requested travel services.
4. Why we use personal data
We may process personal data for the following purposes:
- Responding to enquiries and preparing safari proposals and quotations.
- Creating, confirming and managing bookings.
- Arranging accommodation, transport, park access, flights, activities and related travel services.
- Communicating itinerary, payment, operational and safety information.
- Processing payments, issuing invoices and receipts, and maintaining accounting records.
- Providing traveller support before, during and after a safari.
- Managing changes, cancellations, refunds, complaints and claims.
- Meeting tax, accounting, legal, regulatory, security and record keeping obligations.
- Protecting our website, systems, clients, staff and business from misuse or fraud.
- Improving our website, services, safari planning and client experience through proportionate analytics.
- Sending marketing communications where you have consented or where another lawful basis permits them, with the ability to opt out.
5. Our legal grounds for processing
Depending on the circumstances, we may process information because it is necessary to take steps at your request before entering a contract, to perform a confirmed travel contract, to comply with a legal obligation, to pursue a legitimate business interest that does not override your rights, or because you have provided valid consent.
Where information is sensitive, including certain health information, we will only process it where a lawful condition permits and where it is reasonably necessary for the requested service or another legitimate purpose recognised by applicable law.
6. Booking services for children
Where a booking includes a child, relevant personal information should normally be supplied by a parent, guardian or authorised adult. We only request information about a child that is reasonably necessary for the travel arrangement, safety, supplier requirement or legal obligation.
7. Who we may share information with
We do not sell traveller personal data. To arrange and operate a safari, we may share only the information reasonably required with recipients such as:
- Hotels, lodges, camps and other accommodation providers.
- Airlines, air charter companies, transport companies, guides and activity operators.
- National parks, reserves, conservancies, government authorities or permit systems where traveller details are required.
- Banks, mobile money providers, payment gateways and other payment processors.
- Emergency assistance, insurance or medical service providers where relevant to the requested service or an emergency.
- Email, hosting, cloud, software, communications, security and other technology service providers acting for our business.
- Professional advisers, auditors, insurers or legal representatives where reasonably necessary.
- Law enforcement, courts, regulators or government bodies where disclosure is legally required or necessary to establish, exercise or defend a legal claim.
8. International and cross border transfers
Some travel or technology suppliers may process information outside Kenya. Where personal data is transferred outside Kenya, we will take reasonable steps to ensure that the transfer uses an appropriate legal basis and safeguards required by applicable Kenyan data protection law. Where consent is the appropriate basis, we will seek the required consent.
9. Data minimisation
We aim to collect only information that is relevant and reasonably necessary for the stated purpose. Please do not send full payment card numbers, passwords or unrelated sensitive information through ordinary website forms, email or WhatsApp.
10. Data accuracy
Please tell us if your contact, passport, traveller or booking information changes. Accurate information is particularly important where suppliers issue tickets, permits, accommodation records or other services in a traveller's name.
11. How long we keep information
We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including providing travel services, maintaining accounting and transaction records, meeting legal obligations, resolving disputes and establishing or defending legal claims. Retention periods may differ according to the type of record and the legal or operational reason for keeping it.
When information is no longer reasonably required, we will take appropriate steps to delete, anonymise or securely dispose of it, subject to lawful backup and record retention processes.
12. Security
We use reasonable organisational and technical safeguards appropriate to the nature of the information we handle. These may include access controls, authentication, software updates, secure hosting practices, backups and limiting access to people who need information for their role.
No internet or electronic storage method can be guaranteed to be completely secure. If we become aware of a personal data breach, we will assess and handle it in accordance with applicable legal requirements.
13. Website cookies and analytics
Our website may use necessary cookies or similar browser storage for functions such as sessions, security, forms, language preferences and account features. Where optional analytics or external media technologies require consent, they should only be used in accordance with the applicable consent requirements and your available choices.
You can also control or delete cookies through your browser, although blocking necessary cookies may affect website functions.
14. Website analytics
Where analytics is enabled, we may use aggregated or device related information to understand how visitors find and use the website, which pages are useful, and where performance or navigation can be improved. We aim to use analytics proportionately and to avoid collecting information that is unnecessary for that purpose.
15. Marketing communications
If you subscribe to safari news, offers or other marketing, we may use your contact information for that purpose in accordance with applicable law. You may withdraw marketing consent or opt out of future marketing communications at any time. Opting out of marketing does not stop operational messages needed for an active enquiry or booking.
16. Reviews, testimonials and photographs
We may publish a testimonial, review, traveller photograph or similar material where we have an appropriate lawful basis, including consent where required. If you ask us to withdraw consent for future use, we will assess the request and stop future use where required by law, while recognising that material already lawfully distributed or independently republished may not always be fully retrievable.
17. Links to other websites
Our website contains links to destinations, suppliers, park authorities and other external websites. Greatlink Safaris is not responsible for the privacy practices of an external website. Review the privacy information provided by that service before submitting personal data to it.
18. Your data protection rights
Subject to the Data Protection Act, 2019 and applicable limitations, you may have rights to:
- Be informed about how your personal data is used.
- Request access to personal data held about you.
- Object to processing of all or part of your personal data in applicable circumstances.
- Request correction of false, inaccurate or misleading personal data.
- Request deletion of data where the applicable legal requirements are met.
- Request data portability where the law provides that right.
- Withdraw consent where processing depends on consent, without affecting processing that was lawful before withdrawal.
- Raise a complaint about how personal data has been handled.
19. Exercising your rights
To make a privacy request, contact Greatlink Safaris through our Contact Us page and clearly describe the request. We may need to verify your identity before disclosing, correcting or deleting personal information so that we do not provide data to the wrong person.
20. Complaints to the regulator
If you believe your personal data has been handled contrary to Kenyan data protection law, you may contact the Office of the Data Protection Commissioner. We encourage you to contact Greatlink Safaris first where appropriate so that we can investigate and try to resolve the concern promptly.
21. Automated decision making
Greatlink Safaris does not ordinarily rely on solely automated decision making that produces legal or similarly significant effects for safari enquiries or bookings. If this changes, we will provide information and safeguards required by applicable law.
22. Changes to this Privacy Policy
We may update this Privacy Policy when our systems, suppliers, legal obligations or processing activities change. The current version will be published on this page with its effective or review date.
23. Contact us
For privacy questions, access requests or concerns about personal data handled by Greatlink Safaris, use the official details on our Contact Us page.