Privacy Policy

01Who we are

This Privacy Policy explains how Nyati Safari Camp (“Nyati”, “we”, “us”) collects, uses, shares and protects personal data when you visit this website, send us an enquiry, book a stay or stay with us at camp by Kimana Gate, Amboseli, Kenya.

We are the data controller for the personal data described here. We handle it in line with Kenya’s Data Protection Act, 2019 and its regulations. If you are visiting from abroad, we also aim to respect the main principles of the privacy laws you are used to, such as the EU and UK GDPR.

02Information we collect

We only ask for what we need to answer you, run your stay and keep everyone safe.

Information you give us

• Enquiries and contact forms: first and last name, email, phone or WhatsApp number, country, the services you are interested in (such as accommodation, game drives, sundowners, bush dinners, nature walks or a balloon safari) and your message.
• Booking requests: your dates, number of adults and children, rooms and activities chosen, nationality, approximate arrival time and anything you tell us in your notes.
• At check-in: the details Kenyan law requires us to record in our guest register, such as your name, nationality, ID or passport number and contact details.
• Special requests: dietary needs, allergies, accessibility or medical information you choose to share so we can look after you. We treat this as sensitive personal data and use it only for that purpose.
• Messages: anything you send us by email, WhatsApp, phone or social media.

Information collected automatically

• Website data: technical information such as your browser, device, approximate location from your IP address and the pages you visit, collected through server logs and essential cookies.
• CCTV: our camp has CCTV covering entrances, grounds and public areas for safety and security. Cameras are never placed inside tents, rooms or bathrooms.

Information from others

If a tour operator, travel agent, driver or friend books for you, they will share the details we need for your stay. Please make sure they have your permission to do so.

03How we use your information

• To reply to your enquiries and send you quotes, usually within 24 hours.
• To confirm, manage and change your booking, and to prepare your room, meals and activities.
• To take and confirm payments and keep proper financial and tax records.
• To meet legal duties, such as keeping a guest register and responding to lawful requests from the authorities.
• To keep guests, staff and property safe, including through CCTV and incident records.
• To look after special needs you tell us about, such as diets, allergies or accessibility.
• To run, secure and improve our website.
• To send occasional news or offers, but only if you have agreed. You can opt out at any time.

04Our legal basis

Under the Data Protection Act, 2019 we rely on the following lawful bases:

05Who we share it with

We never sell your personal data. We share only what is needed, with:

• Activity partners: for example the hot air balloon operator or cultural tour hosts, when you book those activities through us.
• Your tour operator, agent or driver, when they made or are managing the booking for you.
• Payment providers: card processors and M-Pesa (Safaricom). We do not store full card numbers.
• Service providers who help us run the business, such as our website host, email and form tools, and accountants. They may only use your data on our instructions.
• Authorities and advisers, where the law requires it, to protect someone’s safety, or to establish or defend legal claims.

06WhatsApp, social media and maps

Our website links to and embeds third-party services, including WhatsApp, Instagram, Tripadvisor and Google Maps. When you use them, those companies collect data under their own privacy policies, which we encourage you to read.

If you message us on WhatsApp, your messages and phone number are processed by WhatsApp (Meta) as well as by us. We use them only to reply and to manage your booking.

07Cookies

Our website uses a small number of essential cookies that it needs to work, for example to keep forms secure and remember basic settings. Embedded services such as Google Maps may set their own cookies when they load.

You can block or delete cookies in your browser settings. Blocking essential cookies may stop some parts of the site, such as the enquiry and booking forms, from working properly.

08Sending data outside Kenya

Some of our service providers, such as email, website hosting and WhatsApp, may store or process data outside Kenya. When this happens, we take reasonable steps to make sure your data stays protected, as required by the Data Protection Act, 2019, for example by using reputable providers with appropriate safeguards.

09How long we keep it

When we no longer need information, we delete it or make it anonymous.

10How we protect it

We use reasonable technical and organisational measures to protect your data, including secure (HTTPS) connections on our website, password-protected systems, limited staff access on a need-to-know basis, and locked storage for paper records at camp.

No method of sending or storing data is completely secure, but we work to protect your information and will act promptly if anything goes wrong, including notifying you and the Data Protection Commissioner where the law requires.

11Your rights

Under the Data Protection Act, 2019 you have the right to:

• be told how your personal data is used, which is what this policy does;
• access the personal data we hold about you;
• ask us to correct data that is wrong or incomplete;
• ask us to delete data we no longer need or have no lawful reason to keep;
• object to, or ask us to restrict, how we use your data;
• withdraw consent at any time, for example to marketing;
• receive your data in a portable format, where this applies.

To use any of these rights, email info@nyatisafaricamp.com. We may ask you to confirm your identity and will reply within the time the law allows.

12Children

Families are very welcome at Nyati, but our website and forms are meant for adults. We only collect children’s details, such as names and ages, from a parent or guardian, to plan rooms, meals and activities. We do not knowingly collect personal data directly from children.

13Changes to this policy

We may update this policy from time to time, for example when the law changes or we start using a new service. The “Last updated” date at the top shows the latest version. If we make important changes, we will make them clear on this page.

14Contact us

For any question about this policy or your personal data, contact Nyati Safari Camp:

• Email: info@nyatisafaricamp.com
• Phone or WhatsApp: +254 724 652 354 or +254 793 610 443
• Address: Nyati Safari Camp, by Kimana Gate, Amboseli National Park, Kenya