Privacy policy

Entonai Safaris is a Kenyan safari tour operator based in Nairobi. When you enquire with us or book a safari, we decide how your personal information is used, which makes us the data controller for it.

You can reach us about anything on this page at info@entonai-safaris.com.

We only ask for what we need to plan, book and run your safari. In practice that falls into four groups.

The special requirements field on our booking form is free text, and guests sometimes use it to tell us about dietary needs, allergies, mobility requirements or medical conditions.

Where you give us that kind of information we treat it as sensitive. We use it only to make your safari work — passing a dietary requirement to your camp, for example — and we share it only with the specific partner who needs it to look after you.

• To arrange the safari you asked for — this is necessary to perform our contract with you.
• To send booking confirmations, itineraries and trip reminders, which are part of delivering that service rather than marketing.
• To take payment and to investigate payment problems or disputes.
• To answer enquiries and quote for trips, on the basis of our legitimate interest in responding to people who contact us.
• To meet accounting and tax obligations under Kenyan law.

We do not sell your information, and we do not share it for advertising purposes. We do share it with the companies and partners below, each receiving only what it needs.

We are based in Kenya, and some of the services above store data in the European Union, the United Kingdom or the United States. That means your information may be transferred outside your own country.

Where we use these providers we rely on their standard contractual protections for international transfers. If you would like to know where specific information is held, please contact us.

• Booking records: seven years after your trip, because Kenyan tax and accounting rules require it.
• Enquiries that never became bookings: two years, after which we delete them.
• Sign-in sessions: seven days. One-time codes expire after ten minutes.
• Safari credit vouchers: until they are used or for 24 months, whichever comes first.

Under Kenya’s Data Protection Act, and under the GDPR if you are in the UK or EU, you can ask us to do any of the following. Write to info@entonai-safaris.com and we will respond within 30 days.

• Give you a copy of the personal information we hold about you.
• Correct anything that is wrong or out of date.
• Delete your information, where we are not required to keep it for tax or legal reasons.
• Restrict or object to how we use it.
• Provide it in a portable format so you can take it elsewhere.
• Complain to the Office of the Data Protection Commissioner in Kenya, or to your own national data protection authority.

The site runs entirely over HTTPS. Our database is not publicly reachable and administrative areas require a verified sign-in. Card details never touch our servers — they go straight to Stripe or PayPal.

No system can be guaranteed entirely secure. In the unlikely event of a breach affecting your information, we will notify you and the relevant regulator promptly.

Our services are booked by adults. We do collect the number and ages of children travelling, because camps price and prepare on that basis, but we do not knowingly collect information directly from a child.

If we change how we handle your information we will update this page and change the date at the top. Where a change is significant, we will notify affected customers by email.