Privacy Policy

We collect personal data you voluntarily provide. This includes your name, phone number, email address, nationality, residency type, and number of travellers.

We collect data when you book or inquire about a package. Any time you fill out a form, contact us, or make a booking, we collect the data you submit.

We collect data from mobile app users. The app collects similar information to the website, including device data and session usage.

We collect data to identify traveller categories. You will be asked whether travellers are adults or children to ensure appropriate pricing and arrangements.

We collect technical information automatically. This includes your IP address, browser type, operating system, device ID, and access time.

We may collect location data. With your permission, we may collect GPS-based location data to customize service recommendations.

We may use cookies and tracking tools. These tools help us analyze user behavior, remember preferences, and improve our service experience.

We use your data to process bookings. Your details help us confirm your reservation, issue tickets, and manage itineraries.

We use your data to send confirmations and notifications. Emails and SMS messages are sent for booking confirmations, reminders, and updates.

We use your data to offer customer support. Contacting our team may involve using your personal data to help resolve queries.

We use your data to improve our services. Aggregated user data allows us to understand trends, improve packages, and adjust pricing.

We use your data for marketing communications. If you consent, we’ll send newsletters, promotions, and personalized travel offers.

We use your data to comply with the law. We may process or share data if required by Kenyan authorities or applicable laws.

We use your data to ensure security. We monitor platform activity to detect fraud, abuse, or suspicious behavior.

We may share your data with trusted service providers. These include hotels, transport operators, activity providers, and travel insurance partners.

We do not sell your data. Your personal data is never sold or rented to any third parties.

We may share your data with government agencies. If required by law or court order, we may disclose your data to comply with legal obligations.

We share data with payment processors. When you make payments, your financial details are securely handled by third-party gateways like Mpesa or banks.

We may share data within our company group. Data may be shared between departments strictly for operational purposes.

We may transfer data if our business changes ownership. If Malindi Tours & Travel is acquired, your data may be transferred to the new owner.

Your data is stored securely. We use encrypted servers and access controls to prevent unauthorized access.

We use SSL encryption. This ensures your data is securely transmitted between your device and our servers.

We limit access to your data. Only authorized employees and agents can access your personal information.

We perform regular security audits. Our systems are monitored and updated to keep your data safe from breaches.

We store data only as long as needed. Once your booking or transaction is completed, data is retained for legal or business purposes, then deleted.

We back up data regularly. In case of server failure, your data is backed up securely to ensure recovery.

You have the right to access your data. You can request a copy of the personal data we hold about you at any time.

You have the right to correct your data. If any of your information is incorrect or outdated, you may request an update.

You have the right to delete your data. You may request that we delete your personal information from our systems.

You have the right to restrict processing. You may limit how we use your data if you believe it is inaccurate or unlawfully processed.

You have the right to withdraw consent. You may opt out of marketing or data collection features at any time.

You have the right to data portability. You may request a transfer of your data to another travel provider.

You can opt out of marketing. Click the unsubscribe link in our emails or contact us to stop receiving promotions. CHILDREN’S

We do not knowingly collect data from children under

Any such information must be submitted by a parent or legal guardian.

Bookings involving minors require adult supervision. All travelers under 18 must be accompanied by an adult and booked by a legal guardian.

Our services may be accessed globally. Data may be stored on servers outside your country depending on service location.

International data transfers are protected. We comply with applicable laws for any international processing or storage.

We may update this policy periodically. Changes will be posted on our website with an updated "Effective Date."

We will notify users of major changes. If the changes are significant, we’ll notify you via email or app alert.

You may lodge a complaint. If you believe your data is misused, contact our Data Protection Officer or the Office of the Data Commissioner of Kenya.

We will investigate all privacy concerns. Your concerns will be acknowledged and addressed within 7–14 business days.

Violations are taken seriously. Any unauthorized handling of client data will result in disciplinary and legal action.

For all data inquiries, contact us at info@malinditours.co.ke or call +254 718 856

You can also visit our office or website to access your information or submit a request