Privacy policy
This policy has not yet been written. It matters more here than on most travel sites, because booking a gorilla permit requires passport data.
Not yet written
A placeholder. This needs drafting properly, and it is not optional: enquiries come from the UK and EU, which brings UK GDPR and EU GDPR obligations regardless of where the business is registered.
What this page needs to cover
- Who the data controller is, with the registered address and a contact route
- What is collected through the enquiry form — name, email, travel dates, trip preferences
- What is collected at booking — passport numbers, dates of birth, nationality, which are required by the Uganda Wildlife Authority and the Rwanda Development Board to issue permits. This is the most sensitive data handled and needs explicit treatment
- Lawful basis for each purpose
- Who data is shared with — UWA and RDB for permits, lodges, airlines, ground operators — and that some of these are outside the UK and EEA
- International transfer arrangements
- Retention periods
- Data subject rights and how to exercise them
- Cookies and any analytics used, with a compliant consent mechanism if non-essential cookies are set
- Complaints, including the right to complain to a supervisory authority
Before launch
The enquiry form must not go live until this policy exists and the form carries an appropriate consent notice. Collecting passport data without a published policy is a compliance failure, not a formality.
This page needs expansion before launch
Privacy policy must be drafted, with particular attention to passport data collected for permit issuance and to UK/EU GDPR obligations. The enquiry form must not go live before this page is complete.
Plan your Kenya and gorilla safari
Tell us roughly when you want to travel and how long you have. We will send a written itinerary and a quotation.