East Africa Guide™

    Privacy Policy

    Last updated: March 2026

    1. Information We Collect

    We collect information you provide directly, such as your name, email address, and travel preferences when you create an account or use our journey builder. We also collect:

    • Device and browser information (type, operating system, IP address)
    • Usage data such as pages visited, time spent, and interactions
    • Location data where you have granted permission
    • Communications you send to us via email or contact forms

    2. How We Use Your Information

    We use collected information to:

    • Provide, maintain, and improve our services
    • Personalise your experience and recommend relevant destinations
    • Communicate with you about trips, bookings, and platform updates
    • Analyse usage trends to improve platform performance
    • Comply with legal obligations under Kenyan law

    3. Legal Basis for Processing

    Under the Data Protection Act, 2019 (Act No. 24 of 2019), we process your personal data based on:

    • Consent — where you have given clear consent for a specific purpose
    • Contract — where processing is necessary to fulfil our service to you
    • Legitimate interest — where processing is necessary for our legitimate business interests, provided your rights are not overridden
    • Legal obligation — where we are required to process data by Kenyan law

    4. Data Retention

    We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

    • Account data — retained for the duration of your account plus 12 months after deletion
    • Transaction records — retained for 7 years as required by the Kenya Revenue Authority
    • Usage analytics — aggregated and anonymised after 24 months
    • Communications — retained for 36 months from the date of correspondence

    After the retention period expires, data is securely deleted or irreversibly anonymised.

    5. Third-Party Sharing

    We do not sell your personal data. We may share information with:

    • Service providers — hosting, analytics, and email delivery partners who process data on our behalf under strict contractual obligations
    • Tour operators — only the information necessary to fulfil a booking you have initiated
    • Legal authorities — where required by Kenyan law, court order, or to protect our legal rights
    • Business transfers — in the event of a merger, acquisition, or sale of assets, with prior notice to you

    All third-party recipients are required to protect your data in accordance with the Data Protection Act, 2019.

    6. International Data Transfers

    Where your data is transferred outside Kenya, we ensure adequate safeguards are in place as required by Section 48 of the Data Protection Act, 2019, including ensuring the receiving country has comparable data protection standards or that appropriate contractual clauses are in effect.

    7. Your Rights

    Under the Data Protection Act, 2019, you have the right to:

    • Access — request a copy of your personal data held by us
    • Rectification — request correction of inaccurate or incomplete data
    • Erasure — request deletion of your personal data where there is no compelling reason for continued processing
    • Restriction — request limitation of processing in certain circumstances
    • Data portability — receive your data in a structured, commonly used format
    • Object — object to processing based on legitimate interests or for direct marketing
    • Withdraw consent — withdraw consent at any time without affecting the lawfulness of prior processing

    To exercise any of these rights, contact us at privacy@eastafrica.guide. We will respond within 30 days.

    8. Data Security

    We implement industry-standard security measures to protect your personal information, including encryption in transit (TLS 1.2+) and at rest, access controls, regular security audits, and secure data backup procedures.

    9. Children's Privacy

    Our services are not directed at individuals under 18 years of age. We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal information, we will take steps to delete it promptly.

    10. Complaint Procedures

    If you believe your data protection rights have been violated, you may:

    1. Contact our Data Protection Officer at privacy@eastafrica.guide
    2. If unresolved within 30 days, lodge a formal complaint with the Office of the Data Protection Commissioner (ODPC) of Kenya

    Office of the Data Protection Commissioner
    P.O. Box 2440-00202, Nairobi, Kenya
    Website: www.odpc.go.ke

    11. Governing Law

    This Privacy Policy is governed by and construed in accordance with the laws of the Republic of Kenya, including the Data Protection Act, 2019 (Act No. 24 of 2019). Any disputes arising from this policy shall be subject to the exclusive jurisdiction of the courts of Kenya.

    12. Changes to This Policy

    We may update this policy from time to time. Material changes will be communicated via email or a prominent notice on our platform at least 14 days before taking effect.

    13. Contact

    For privacy-related enquiries, please contact us at privacy@eastafrica.guide.