Privacy Policy

1. Who We Are

Elabush Tours and Safaris Ltd is a licensed tour operator registered in Kenya, with offices at Annex Plaza, 2nd Floor, Cardinal Otunga Street, Nairobi. We can be reached at info@elabush.com or +254 717 287 683.

2. Information We Collect

Information you provide directly

When you fill in our contact or booking enquiry form, subscribe to our newsletter, or communicate with us, we collect:

• Full name and email address
• Phone number (optional)
• Country of residence
• Travel dates, destinations, and trip preferences
• Number of travelers and budget range
• Any additional information you include in your message

Information collected automatically

When you visit our website, we may automatically collect certain technical data including your IP address, browser type, pages visited, time spent on pages, and referral source. This is collected through cookies and similar technologies (see Section 6).

3. How We Use Your Information

We use the information we collect to:

• Respond to your safari enquiry and prepare a personalised itinerary
• Process and confirm bookings and payments
• Send you trip-related communications (confirmations, updates, reminders)
• Send our newsletter and safari tips — only where you have opted in
• Improve our website and services based on how visitors use them
• Comply with legal and regulatory obligations

We will never sell, rent, or share your personal information with third parties for their own marketing purposes.

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data under the following lawful bases:

• Contract: Processing necessary to respond to your enquiry or fulfil a booking
• Legitimate interests: To improve our services and communicate with enquirers
• Consent: For newsletter subscriptions — you may withdraw consent at any time
• Legal obligation: Where required by applicable law

5. How We Share Your Information

We only share your data with trusted third parties who help us operate our business, including:

• Formspree — our contact and newsletter form provider (Formspree Privacy Policy)
• Accommodation and transport partners — lodges, camps, and vehicle operators involved in fulfilling your booking
• Payment processors — for secure handling of deposits and balances

All third parties we work with are contractually required to protect your data and may only use it for the specific purpose for which it was shared.

6. Cookies

Our website uses cookies — small text files placed on your device — to improve your experience. We use:

• Essential cookies: Required for the site to function (e.g. remembering cookie preferences)
• Analytics cookies: To understand how visitors use our site (e.g. Google Analytics) — only placed with your consent

You can accept or decline non-essential cookies using the banner shown on your first visit. You can also control cookies through your browser settings at any time.

7. Data Retention

We retain enquiry and booking data for up to 7 years in line with Kenyan tax and business record requirements. Newsletter subscribers' data is retained until they unsubscribe. You may request deletion of your data at any time (see Section 8).

8. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict certain types of processing
• Withdraw consent at any time (for newsletter subscriptions)
• Lodge a complaint with your local data protection authority

To exercise any of these rights, please email us at info@elabush.com. We will respond within 30 days.

9. Security

We take reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, or misuse. Our website uses HTTPS encryption for all data transmitted between your browser and our server. However, no method of transmission over the internet is 100% secure.

10. Children's Privacy

Our website is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page shows when it was last revised. Continued use of our website after changes are posted constitutes your acceptance of the updated policy.

12. Contact Us

For any questions about this Privacy Policy or how we handle your data, please contact us: