Privacy
Policy

Personal Information You Provide

We collect information that you voluntarily provide when you request a quote, book a safari, sign up for newsletters, contact us, fill out forms, or participate in promotions.

Automatically Collected

When you visit our website, we automatically collect device information (IP, browser, OS), usage data (pages visited), cookies and tracking pixels (including Facebook Pixel), and approximate location based on IP address.

From Third Parties

We may receive information from social media platforms, partner safari lodges, payment processors, and local operators to coordinate your booking and experience.

We use your personal information to:

• Provide services: Process bookings, design itineraries, coordinate with lodges and guides, arrange logistics, and deliver customer support.
• Safety & legal: Ensure your well‑being (medical info), comply with permits and visas, process payments, and prevent fraud.
• Marketing: Send newsletters, offers, and safari inspiration (only with your consent) and show relevant ads on Facebook and Instagram.
• Improve: Analyze website traffic (Google Analytics), understand preferences, and optimize our offerings.
• Content: With explicit permission, use photos and testimonials from your safari.

We do not sell, rent, or trade your personal information. We share it only as necessary:

• Safari service providers: Lodges, guides, airlines, conservation partners, local communities — only details needed for your trip.
• Payment processors: Banks, M-Pesa, PayPal (secure; we don't store full payment details).
• Technology & analytics: Google Analytics, Facebook/Meta, WhatsApp Business.
• Legal authorities: If required by law — Kenya Tourism Board, immigration, tax authorities, or police.
• Business transfers: In the case of a merger or acquisition, with prior notice to you.

Roam Royale is based in Kenya. Your information may be transferred to and stored in Kenya, the United States (Google/Facebook servers), the European Union, or wherever our partners are located. We ensure appropriate safeguards including standard contractual clauses and encryption, as required by GDPR and Kenyan law.

We implement SSL encryption, password-protected systems, restricted staff access, regular security audits, and confidentiality agreements with all partners. However, no internet transmission is 100% secure. You are responsible for keeping your login credentials confidential.

We retain information only as long as necessary for the purposes outlined:

• Booking & travel records: 7 years (tax and legal compliance)
• Marketing data: Until you unsubscribe
• Website analytics: 26 months (Google Analytics default)
• Payment records: As required by Kenyan financial regulations (typically 7 years)
• Photos & testimonials: Until you request removal (if consent was given)

Under the Kenya Data Protection Act and GDPR, you have the right to: access your data, rectification, erasure ("right to be forgotten"), restriction of processing, data portability, objection to marketing, and withdrawal of consent at any time.

To exercise any of these rights, contact us using the details in Section 13. You also have the right to lodge a complaint with the Kenyan Office of the Data Protection Commissioner (ODPC) or your local EU supervisory authority.

We use essential, analytics, marketing, and functional cookies. You can manage cookies via your browser settings. To opt out of Google Analytics, use the Google Analytics Opt-out Browser Add-on. Manage Facebook ad preferences via your Facebook account settings.

Our website may link to partner lodges, airlines, social media platforms, and payment sites. We are not responsible for their privacy practices. Please review each third party's own privacy policy before engaging with their services.

Our services are not directed to individuals under 18. If we collect information about children for a family safari, it is only with parental consent and limited to what is necessary for travel arrangements — name, age, dietary needs, and passport details.

You will only receive marketing emails with your consent. You may unsubscribe at any time via the unsubscribe link in any email, or by contacting us directly. Transactional communications (booking confirmations, travel updates) are not affected by marketing preferences. We may also show targeted ads on social media platforms — you can adjust your preferences within those platforms.

We may update this Privacy Policy from time to time. Significant changes will be noted by updating the "Last Updated" date at the top of this page, and we may notify you via email or a prominent notice on our website.

Roam Royale (Sole Proprietorship, Registration: BN-7ZCVMKM3)

We take reasonable measures to protect your information but cannot guarantee absolute security. We are not liable for unauthorized access beyond our reasonable control, breaches by third-party providers where due diligence was exercised, or issues arising from your failure to secure your own credentials.

Maximum liability is capped at the amount paid in the preceding 12 months, or KES 100,000 (whichever is lower). Clients acknowledge they are contracting with an individual-owned registered business.

This Privacy Policy is governed by the laws of Kenya. Any disputes shall be subject to the exclusive jurisdiction of the courts of Nairobi, Kenya. We encourage good-faith negotiation first, then mediation or arbitration in Nairobi, before any litigation. For EU clients, Kenyan law still applies to disputes, though we comply with GDPR for data protection matters.

To the extent permitted by law, both parties waive any right to a jury trial.

If any provision of this Privacy Policy is found to be invalid or unenforceable, the remainder shall continue in full effect. This Privacy Policy, together with our Terms and Conditions, constitutes the entire agreement regarding your personal information.

By using our services, you acknowledge that you have read and understood this Privacy Policy, agree to its terms, and consent to the collection and use of your information as described. For certain activities such as marketing communications and use of photos, we will obtain explicit consent separately.