PRIVACY POLICY

GLOBAL GREEN EXPEDITIONS LTD – PRIVACY POLICY

This Privacy Policy is a clear and transparent commitment to you, our valued traveller. We outline precisely how we handle your personal information with the highest standards of care, in full compliance with Kenyan law and aligning with international best practices for data protection. Our commitment to privacy reflects our core values of trust, respect, and
ethical operation.

Your Data & How We Collect It: A Transparent View

To provide our exceptional travel services, we collect necessary personal data from you through clear and lawful methods.

Category of Personal Data	Specific Examples	Primary Collection Method	Why We Need It (Purpose)
Identification & Contact	Full name, nationality, date of birth, passport number, email, phone, and address.	Provided by you during inquiries, bookings, or account creation.	To create your booking contract, secure travel permits, and communicate essential service information.
Travel & Preference Details	Itinerary, accommodation choices, dietary/medical/accessibility needs, and travel companion info.	Provided by you via forms, emails, or conversations with our travel designers.	To personalize and safely deliver your bespoke travel experience and fulfill special requests.
Financial Information	Payment confirmations and transaction references (we do not store full credit card details).	Provided by you during the payment process via our secure payment gateway.	To securely process payments for the services you book.
Technical & Usage Data	IP address, device type, browser, pages visited on our website, and cookie data.	Collected automatically via cookies and analytics tools when you interact with our website.	To analyze website performance, enhance user experience, and for security monitoring.
Sensitive Data (Special Category)	Health information (e.g., for medical or dietary needs) and religious dietary restrictions.	Provided by you voluntarily and explicitly, only when necessary for your safety and service delivery.	To ensure your health, safety, and welfare during travel, with your explicit consent.

Our Legal Basis for Processing Your Data

We process your personal data lawfully, fairly, and transparently. Our legal grounds are:

• Contractual Necessity: To fulfill the travel contract you enter into with us.
• Legal Obligation: To comply with Kenyan laws, including immigration and tourism regulations.
• Legitimate Interests: For essential business operations like IT security, fraud prevention, and service improvement, always balancing our interests with your rights.
• Explicit Consent: For specific purposes like marketing communications or processing sensitive health data. You can withdraw consent at any time.

How We Share Your Data (And How We Protect It)

We only share your data when necessary and with appropriate safeguards:

• With Our Trusted Partners: To fulfill your booking, we share necessary details with accommodation providers, airlines, guides, and park authorities. These partners are contractually bound to protect your data and use it only for the service you booked.
• For Legal & Safety Reasons: If required by Kenyan law, or to protect vital interests (e.g., in a medical emergency).
• International Transfers: If data must be transferred outside Kenya, we ensure protections like standard contractual clauses are in place.

Your Privacy Rights & How to Exercise Them

Under Kenyan law and as a best practice, you have clear rights over your data:

• Access & Portability: Request a copy of your personal data.
• Correction & Erasure: Ask us to correct inaccurate data or, in certain cases, delete it.
• Restriction & Objection: Request we limit how we use your data or object to certain processing.
• Withdraw Consent: Change your mind about marketing at any time.
• Lodge a Complaint: Contact Kenya’s Office of the Data Protection Commissioner (ODPC) if concerned.

To exercise any right, contact our Privacy Team at privacy@globalgreenexpeditions.com. We aim to respond within 30 days.

Data Security, Retention & Cookies

• Security: We implement strong technical (encryption, access controls) and organizational measures to protect your data from unauthorized access. Our staff are trained in data protection.
• Retention: We keep your personal data only as long as necessary for the purposes it was collected for, to fulfill legal obligations (like financial record-keeping), or to resolve disputes. We conduct regular reviews to delete data no longer needed.
• Cookies: Our website uses cookies to enhance functionality and analyze traffic. You can manage preferences through your browser settings.

 Our Competitive & Customer-Focused Promises

• No Data Sale: We do not, and will never, sell your personal data.
• Marketing with Respect: We only send promotional materials with your prior consent. Every marketing email includes an easy, one-click unsubscribe link.
• Proactive Breach Response: We have a plan to detect, respond to, and notify relevant authorities of any data breach as required by law.
• Updates to This Policy: We may update this policy and will post the new version on our website. For material changes, we will notify you directly where appropriate.

Contact Us

For any questions about this Privacy Policy or your personal data, please contact:
Global Green Expeditions Ltd—Privacy Team
Email: globalgreenexpeditions@gmail.com