Privacy notice

1. Who is responsible

The data controller is [[LEGAL_ENTITY_NAME]], trading as Vuvo Horizons, a Vuvo Group company, Nairobi, Kenya. Registration with the Office of the Data Protection Commissioner: [[ODPC_REGISTRATION_NO]]. Contact for data matters: hello@vuvolabs.co.ke (Data Protection Officer: [[DPO_NAME]]).

2. What we collect

• Details you give us in a form or message: name, email, phone or WhatsApp number, party size, preferred dates, budget, company, and any notes.
• Campaign information, kept for the browser session: the UTM tags in the link that brought you here, the referring site and the first page you visited.
• Basic technical data in server logs, such as IP address and browser type, used for security and reliability.

Please do not send sensitive personal data, such as health information, unless it is needed for your trip (for example a fitness declaration or accessibility need). Where it is, we process it with your explicit consent.

3. Why we use it, and on what basis

• To respond to your request and prepare a quote: with your consent, given when you submit a form.
• To make and manage a booking: to carry out a contract with you.
• To keep records as the law requires, and to protect the site from abuse.
• To understand which campaigns bring enquiries: our legitimate interest, using only the campaign tags described above.

We do not sell personal data. We send marketing messages only if you ask us to or give separate consent, and you can withdraw it at any time.

4. Who receives it

Enquiries are recorded in a Google Sheet and notified by email, using Google Workspace. Conversations on WhatsApp are handled through WhatsApp. The site is hosted by Vercel. We share details with the lodges, camps, transport operators and guides who deliver your trip, only as needed for that purpose. Each is bound to protect the data.

5. Transfers outside Kenya

Some of these providers store data outside Kenya. Where that happens, we rely on the safeguards the Data Protection Act, 2019 allows for transfers out of Kenya.

6. How long we keep it

Enquiries that do not become bookings are kept for [[RETENTION_ENQUIRIES]]. Booking records are kept for [[RETENTION_BOOKINGS]] to meet tax and legal duties.

7. Your rights

Under the Act you may ask to be informed about how we use your data, to access it, to object to its processing, to have inaccurate data corrected and to have data erased in the circumstances the Act provides. You may withdraw consent at any time. Write to hello@vuvolabs.co.ke and we will respond within the time the Act allows.

8. Complaints

If you are not satisfied, you may complain to the Office of the Data Protection Commissioner of Kenya (odpc.go.ke).

9. Children

We collect a child’s details only as needed for a family booking, and only from a parent or guardian.

10. Cookies

This site does not use advertising or analytics cookies. Campaign tags are held in your browser’s session storage and are removed when you close the tab. If this changes, we will update this notice and ask for consent first.

11. Security

Forms are sent over an encrypted connection. Access to enquiry records is limited to the team members who need it.