Draft — to be reviewed by Pipino and a Kenyan lawyer before publishing. Text in [square brackets] must be completed.
Who we are
Pipino Tour & Travel ("Pipino", "we", "us") is a tour operator based in Nairobi, Kenya. We are the data controller for the personal data described in this policy. Registered business name: [REGISTERED COMPANY NAME]. Registration number: [BUSINESS REGISTRATION NO.].
This policy explains how we handle your personal data in line with Kenya's Data Protection Act, 2019.
What we collect
- Enquiries: your name, email address, phone or WhatsApp number, preferred travel date, number of guests, the trip you are interested in and anything you write in your message.
- Bookings: details we need to arrange your trip, such as the names of travellers, passport or ID details where parks, lodges or airlines require them, dietary needs, pick-up location and payment records.
- Messages: what you send us by WhatsApp, email or phone.
- Technical data: our website uses a small session cookie needed for the enquiry form to work securely. [If analytics are added, describe them here.]
Why we use it
- To reply to your enquiry and send you a quote.
- To book and run your trip — reserving vehicles, guides, park entry, accommodation and activities.
- To take payment and keep accounting records as required by law.
- To contact you about your trip before, during and after travel.
We use your data because you asked us to (your enquiry), to perform our contract with you (your booking), or to meet legal obligations. We do not sell your personal data, and we will only send you marketing messages if you agree to receive them.
Who we share it with
Only where needed to arrange your trip: lodges, camps and hotels; park and conservancy authorities (for example, Kenya Wildlife Service); transport, airline and activity providers; and our payment providers. We may also share data where the law requires it.
How long we keep it
Enquiries that do not become bookings are deleted after [12 months]. Booking and payment records are kept for [7 years] to meet tax and accounting requirements.
Your rights
You can ask us to tell you what data we hold about you, correct it, delete it, or stop using it for a particular purpose. You can also object to marketing at any time. To make a request, contact us using the details below. If you are unhappy with how we handle your data, you can complain to the Office of the Data Protection Commissioner (ODPC) at www.odpc.go.ke.
Contact
Email: [PRIVACY CONTACT EMAIL] · Phone: [PHONE] · Address: [PHYSICAL ADDRESS], Nairobi, Kenya.
Last updated: [DATE].