Privacy Policy

1. Who we are

Kibulu Tanzania Safaris is a Tanzania-based tour operator with offices in Arusha, Tanzania. We design and run wildlife safaris, Kilimanjaro climbs and Zanzibar beach extensions. For the purpose of data-protection law, we are the “data controller” of the personal information described in this policy.

2. Data we collect

We only collect information that we genuinely need to plan and run your trip, or to improve our website.

Information you give us

• Your name, email address and phone number when you send an enquiry or contact form
• Your country of residence and travel dates if you share them with us
• Passport details, date of birth and nationality (only once you book a confirmed tour)
• Dietary requirements, medical conditions and emergency-contact information relevant to your tour
• Payment confirmation details (we do not store full card numbers)
• Any other information you choose to include in messages or trip notes

Information collected automatically

• Device and browser information (browser type, operating system, screen size)
• IP address and approximate location
• Pages you visit on our site, time spent and referring source
• Cookie identifiers — see our Cookie Policy for full detail

3. How we use your data

• To respond to your enquiry and prepare a tailored itinerary proposal
• To plan, confirm and operate your booked tour, climb or beach extension
• To communicate with you before, during and after your trip
• To process payments and issue invoices and receipts
• To meet legal, tax and immigration requirements (e.g. national-park permits)
• To improve our website, services and marketing — only with your consent where required
• To send occasional newsletters or trip ideas (only if you opt in; you can unsubscribe at any time)

4. Legal basis for processing

We process your personal data on the following lawful grounds:

• Contract: when we need the data to plan and deliver your booked tour.
• Legitimate interests: to respond to enquiries, improve our website and protect our business.
• Consent: for marketing communications and non-essential cookies.
• Legal obligation: to comply with tax, accounting and immigration laws.

5. When we share your data

We never sell your personal data. We share it only with the partners we need to in order to deliver your trip:

• Lodges, camps and hotels we book on your behalf
• Domestic airlines and ground-transfer providers
• National-park authorities for entry permits and concession fees
• Mountain-rescue partners and travel-insurance providers (for Kilimanjaro climbs)
• Payment processors that handle your card transactions securely
• Professional advisors (accountants, lawyers) where strictly required
• Government authorities when legally compelled to do so

6. International transfers

Some of our service providers (for example email hosting or analytics) are based outside Tanzania. Where personal data is transferred internationally, we put appropriate safeguards in place — such as standard contractual clauses or transfers to providers in countries with adequate data-protection laws.

7. How long we keep your data

• Enquiry data: up to 24 months after your last contact with us, then deleted.
• Booking and tax records: kept for 7 years to meet Tanzanian tax-law requirements.
• Marketing preferences: kept until you unsubscribe.
• Website analytics: aggregated and anonymised after 26 months.

8. Your rights

Subject to applicable law, you have the right to:

• Access the personal data we hold about you
• Ask us to correct any inaccurate information
• Request that we delete your data (where we no longer need it)
• Object to or restrict certain processing activities
• Withdraw consent for marketing at any time
• Receive a portable copy of the data you have provided to us
• Lodge a complaint with the relevant data-protection authority

To exercise any of these rights, please email info@kibulutanzaniasafaris.com.

9. Security

We take reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS), restricted access to booking systems, regular backups, and staff training on privacy and security. No system is perfectly secure, but we work hard to minimise risk.

10. Children's privacy

Our website is not intended for children under 16. We only collect data about minor travellers where their parent or legal guardian has shared it with us as part of a family booking.

11. Changes to this policy

We may update this Privacy Policy from time to time. The version date is shown at the top of the page. If we make significant changes, we will notify clients with active bookings by email.

12. Contact us

If you have any questions about this Privacy Policy or how we handle your data, please get in touch.