Privacy Policy

Last updated: August 2026

1. Introduction

Explore Kibera Tours ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you book a tour, visit our website, or interact with us via WhatsApp or other channels.

By using our services, you consent to the collection and use of information as described in this policy.

2. Information We Collect

We may collect the following types of personal information:

  • Contact details: Name, email address, phone number, and WhatsApp number.
  • Booking information: Tour preferences, dates, group size, special requests, and dietary requirements.
  • Payment information: Transaction details processed through secure third-party payment providers (we do not store full credit card numbers).
  • Communication records: Messages, inquiries, and feedback sent via email, WhatsApp, or our website.
  • Device information: IP address, browser type, and device details when you visit our website.

3. How We Use Your Information

We use your personal information for the following purposes:

  • Booking management: To process your booking, confirm reservations, and communicate tour details.
  • Communication: To respond to your inquiries, send booking confirmations, and provide pre-tour information.
  • Service improvement: To analyze usage patterns and improve our tours, website, and customer experience.
  • Marketing: With your explicit consent, to send promotional materials about our tours and special offers. You may opt out at any time.
  • Legal compliance: To comply with applicable laws, regulations, and legal processes.

4. Data Sharing

We do not sell or rent your personal information to third parties. We may share your information with:

  • Tour guides and staff: To facilitate your tour experience.
  • Service partners: Such as transport providers or restaurants, only as necessary to fulfill your booking.
  • Payment processors: To process payments securely.
  • Legal authorities: When required by law or to protect our rights and safety.

All third parties with whom we share data are contractually obligated to protect your information and use it only for the purposes specified by Explore Kibera Tours.

5. Cookies & Tracking

Our website uses cookies and similar technologies to enhance your browsing experience:

  • Session cookies: To maintain your session state and preferences while browsing.
  • Analytics cookies: To understand how visitors interact with our website (e.g., Google Analytics). This data is aggregated and anonymized.
  • Functional cookies: To remember your preferences and settings.

You can control cookie settings through your browser preferences. Disabling certain cookies may affect website functionality.

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws. Booking records are retained for 5 years for legal and tax compliance. Communication records are retained for 2 years. Analytics data is aggregated and anonymized after 26 months.

7. Your Rights

Under applicable data protection laws, you have the right to:

  • Access: Request a copy of the personal information we hold about you.
  • Rectification: Request correction of inaccurate or incomplete data.
  • Erasure: Request deletion of your personal data, subject to legal retention requirements.
  • Objection: Object to the processing of your data for marketing purposes.
  • Portability: Request transfer of your data to another service provider in a structured, machine-readable format.
  • Withdraw consent: Withdraw consent for data processing at any time where processing is based on consent.

To exercise any of these rights, please contact us using the details below.

8. GDPR Compliance

For guests from the European Economic Area (EEA), we comply with the General Data Protection Regulation (GDPR). We process your data based on the legal grounds of contract performance, legitimate interest, consent, and legal obligation as applicable. You may exercise your GDPR rights by contacting us at the details provided below.

9. Kenya Data Protection Act 2019

As a data controller registered in Kenya, we comply with the Kenya Data Protection Act, 2019 (DPA). We process personal data in accordance with the principles of lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, confidentiality, and accountability. You may file complaints with the Office of the Data Protection Commissioner of Kenya (ODPC) if you believe your data protection rights have been violated.

10. Contact for Data Requests

For any questions, requests, or complaints regarding your personal data, please contact:

Data Protection Officer

Explore Kibera Tours

Email: explorekiberatours@gmail.com

Phone: +254 718 633 224

Address: Nairobi, Kenya

We aim to respond to all data requests within 30 days.

© 2026 Explore Kibera Tours. All rights reserved.