Privacy Policy

This Privacy Policy applies to Jambo African Safaris LLC, trading as Jambo African Safaris ("Jambo", "we", "us", "our"). Jambo operates guided safari packages in Kenya, Uganda, Tanzania, and Ethiopia, with day-to-day operations run from Nairobi, Kenya. Jambo is the data controller for personal data collected through this website and the booking process described below.

To create an account, request a quote, or complete a booking, we collect:

• Identity data: first and last name, date of birth where required for a booking.
• Contact data: email address and phone number.
• Travel data: nationality, gender, itinerary preferences, traveler count, accommodation and dietary requirements. Jambo does not collect passport numbers.
• Payment data: card payments are processed by Stripe; see Payments below.
• Account data: password (stored hashed, never in plain text), login history, and role.
• Communications: messages sent through the contact form, custom safari requests, and support tickets.
• Technical data: IP address, browser type, and pages visited, collected only with cookie consent for analytics (see Cookies).

• Contract: to create your account, process bookings, and deliver the safari package you purchased.
• Legal obligation: to keep financial and booking records for tax and regulatory purposes.
• Legitimate interests: to respond to inquiries, prevent fraud, and improve the site.
• Consent: for optional analytics or marketing cookies, and for marketing emails you opt into.

Jambo African Safaris is the data controller under the Kenya Data Protection Act, 2019 for personal data collected from this site and during booking. As a data subject, you have the right to access, correct, delete, object to processing of, and receive a portable copy of your personal data, as provided under the Act.

Jambo has not yet completed registration with the Office of the Data Protection Commissioner (ODPC). To exercise your rights, contact us using the details in the Contact Us section below.

If you are located in the European Union or United Kingdom, the General Data Protection Regulation (GDPR) or UK GDPR may apply to our processing of your personal data. Our lawful bases for processing mirror those described above (contract, legal obligation, legitimate interests, consent). You have the right to access, rectify, erase, restrict, or port your data, and to object to certain processing, by contacting us as described below.

Where personal data is transferred outside the EU/UK (for example to our Kenya-based operations or sub-processors), we rely on standard contractual clauses or an equivalent safeguard as the international transfer mechanism.

Jambo has not appointed a Data Protection Officer or an EU representative at this time. If you are located in the EU/UK and have a question or concern about how we process your data, contact us using the details in the Contact Us section below.

Card payments are processed by Stripe. Full card details are never stored on Jambo's servers; PCI DSS compliance for card data is handled entirely by Stripe. Where available, bookings may also be paid via M-Pesa or bank transfer, in which case the relevant payment provider or bank processes that transaction data directly.

• Stripe - payment processing.
• Cloudinary - image and media hosting and delivery.
• Resend - transactional email delivery (booking confirmations, verification emails).
• Hostinger - application hosting and database storage.

Booking and financial records are retained for 7 years to meet Kenyan tax and financial recordkeeping requirements. Account data is retained for as long as your account is active, plus a reasonable period afterward to resolve disputes and satisfy legal obligations. Contact form and support messages are retained only as long as needed to resolve the inquiry, unless a longer period is required by law.

Because Jambo operates across Kenya, Uganda, Tanzania, and Ethiopia, and uses sub-processors that may store data outside Kenya, your data may be transferred across borders. We require sub-processors to apply safeguards consistent with the Kenya Data Protection Act and, where applicable, GDPR standard contractual clauses.

Regardless of where you are located, you may ask us to: give you a copy of your data, correct inaccurate data, delete your data, restrict or object to our processing, or provide your data in a portable format. To exercise any of these rights, contact us using the details below; we will respond within the timeframe required by applicable law.

We use strictly necessary cookies (for example to keep you signed in) and, only with your consent, optional analytics cookies. See the Cookie Policy for full detail and how to change your preference at any time.

Questions about this Privacy Policy or your data can be sent to info@jamboafricansafari.com or to our registered address in Nairobi, Kenya.