Need help planning your safari?

Chat with us!

Legal

Privacy Policy

Your privacy matters to us. Learn how we collect, use, and protect your personal information.

Last Updated: 31st December 2025

So Phine Ltd, trading as Phine Safaris and Tuzuru Wapi ("So Phine Ltd", "we", "our", or "us"), respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, share, and safeguard personal information provided to us through our websites, inquiry forms, communications, and booking processes.

1. Information We Collect

We collect personal information when you inquire about our tours, request proposals, or book our services under either Phine Safaris or Tuzuru Wapi. This may include:

  • Full name
  • Email address
  • Phone number (including WhatsApp contact)
  • Country of residence
  • Travel dates, preferences, group size, and special requests
  • Passport or identification details (only when required for bookings, permits, or flights)
  • Payment confirmation details (we do not store full card or banking details)

We may also collect limited technical data such as IP address, browser type, and device information when you visit our websites.

2. Purpose of Data Collection

Personal data is collected strictly for legitimate business purposes, including:

  • Preparing and sending travel proposals and quotations
  • Communicating with you regarding inquiries or bookings
  • Making reservations with accommodation providers, airlines, transport providers, guides, and activity partners
  • Processing payments and issuing confirmations
  • Fulfilling legal, regulatory, and contractual obligations
  • Improving our services, platforms, and customer experience
  • Sending marketing communications only where consent has been given

We do not sell, rent, or trade personal data.

3. Legal Basis for Processing

We process personal data under one or more of the following lawful bases:

  • Your explicit consent
  • Performance of a contract or steps prior to entering a contract
  • Compliance with legal obligations
  • Legitimate business interests, provided your rights are not overridden

4. Data Sharing and Disclosure

Personal data may be shared only with trusted third parties where necessary to deliver requested services, including:

  • Hotels, lodges, camps, and accommodation providers
  • Airlines, safari vehicle operators, drivers, and guides
  • National parks, conservancies, and government authorities where legally required
  • Payment processors and financial institutions

All third parties are required to process data securely and solely for the intended purpose.

5. International Data Transfers

As an international travel company serving both local and foreign clients, some personal data may be transferred outside Kenya. Where this occurs, appropriate safeguards are applied in accordance with international data protection standards.

6. Data Retention

Personal data is retained only for as long as necessary to:

  • Fulfil the purpose for which it was collected
  • Meet legal, accounting, and regulatory requirements
  • Resolve disputes and enforce agreements

Data no longer required is securely deleted or anonymised.

7. Data Security

We apply reasonable technical and organisational measures to protect personal data against unauthorised access, loss, alteration, or disclosure. Access is restricted to authorised personnel only.

8. Your Rights

Subject to applicable law, you have the right to:

  • Access your personal data
  • Request correction of inaccurate or incomplete data
  • Request deletion of your data where legally permissible
  • Object to or restrict certain processing activities
  • Withdraw consent for marketing communications at any time

Requests may be made using the contact details below.

9. Cookies

Our websites may use cookies to enhance functionality and user experience. Cookies do not collect personally identifiable information unless voluntarily provided.

You may manage cookies through your browser settings.

10. Marketing Communications

We send marketing communications only if:

  • You have explicitly opted in, or
  • You are an existing client and the communication relates to similar services

You may opt out at any time.

11. Legal Compliance

This Privacy Policy complies with:

  • Kenya Data Protection Act, 2019
  • Office of the Data Protection Commissioner (ODPC) regulations
  • GDPR-aligned international data protection principles

12. Contact Information

impala

Have Questions?

If you have any questions about our privacy practices or would like to exercise your rights, please don't hesitate to contact us.