Privacy Policy

When you make an enquiry, booking, or interact with us, we may collect:

• Name(s) of travellers
• Contact details (email, phone number, address)
• Payment information (processed securely via third-party providers)
• Passport and travel details (where required for bookings)
• Special requests (dietary, medical, accessibility — only where voluntarily provided)

b) Automatically collected data

When you use our Site, we collect:

• IP address, browser type, device information
• Pages viewed, time spent, referring URLs
• Cookie and tracking data

c) Sensitive data

We only process sensitive personal data (e.g. health or dietary needs) where:

• You explicitly provide it, and
• It is necessary to fulfil your booking

3. How We Use Your Data

We process your personal data for the following purposes:

• To manage bookings and provide services
• To communicate with you
• To process payments securely
• To comply with legal and regulatory obligations
• To prevent fraud and ensure security
• To improve our website and services (analytics)
• To send marketing communications (only where lawful or with consent)

4. Legal Bases for Processing (GDPR)

Under the General Data Protection Regulation, we rely on:

• Contractual necessity – to deliver your booking
• Legal obligation – e.g. immigration, tax requirements
• Legitimate interests – improving services, fraud prevention
• Consent – for marketing and certain cookies

5. Sharing Your Personal Data

We may share your data with:

• Travel providers (lodges, airlines, transport services)
• Payment processors
• IT and website service providers
• Analytics providers such as Google (Google Analytics)
• Legal or regulatory authorities when required

We ensure all third parties respect your data and comply with applicable laws.

6. International Data Transfers

Your data may be transferred to and processed in countries outside your jurisdiction, including:

• Kenya
• Tanzania
• United Kingdom
• European Economic Area
• United States

Where required, we use safeguards such as:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions
• Equivalent legal protections

7. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Ensure website functionality
• Analyse performance and usage
• Support marketing and advertising

You can manage your preferences via:

• Our cookie banner/tool
• Your browser settings

For more information, see our Cookie Policy.

8. Marketing and Your Choices

You may receive marketing communications if:

• You have consented, or
• You are an existing customer and it is legally permitted

You can opt out at any time by:

• Clicking “unsubscribe” in emails
• Contacting us directly

9. Your Rights

Depending on your location (EU, UK, California, etc.), you may have rights including:

• Access your data
• Correct inaccurate data
• Request deletion (“right to be forgotten”)
• Restrict or object to processing
• Data portability
• Withdraw consent at any time
• Lodge a complaint with a supervisory authority

To exercise your rights, contact us (see Section 14).

10. Data Retention

We retain your data only as long as necessary:

• For booking and legal purposes
• For tax and regulatory compliance
• For legitimate business needs

You may request deletion, subject to legal obligations.

11. Data Security

We implement appropriate technical and organisational measures to protect your data, including:

• Secure servers and encryption
• Restricted access controls
• Trusted third-party providers

12. Children’s Privacy

Our services are not directed at children under 16. We do not knowingly collect personal data from children without parental consent.

13. Updates to This Policy

We may update this Privacy Policy periodically. Updates will be posted on this page with a revised “Last Updated” date.

14. Contact Us

For questions, requests, or complaints:

Email: admin@bushtops.com

You also have the right to contact your local data protection authority.