Privacy Notice

This notice explains how Jeff Tours & Travel Agencies (“we”, “us”) collects, uses and protects your personal data when you visit our website, send an enquiry, contact us on WhatsApp, phone or email, or book a trip with us. We process personal data in line with the Data Protection Act, 2019 of Kenya and its regulations.

Who we are

Jeff Tours & Travel Agencies is the data controller for the personal data described in this notice. Address: Mombasa, Kenya (our office address is on the Contact page). Email: [email protected]. Phone and WhatsApp: +254 755 721 184.

What we collect

• Contact details: name, phone number, email address and country of residence.
• Trip details: destinations, dates, number and ages of travellers, room and meal preferences, and anything else you share in an enquiry form, WhatsApp chat, call or email.
• Booking and travel documents: passport details, national ID or alien card details for resident rates, dates of birth, and visa application documents, only when needed for your booking.
• Sensitive data: health information such as dietary needs, allergies, mobility needs or medical conditions relevant to travel or insurance. We only collect this when you choose to give it, and we use it only to arrange your trip.
• Payment records: M-Pesa, bank transfer or card payment confirmations. Card payments are processed by the card payment provider under its own security standards.
• Website data: technical information such as your browser, device and pages visited, collected through cookies as described below.

Why we use your data

• To answer your enquiry and send quotes (your request, before entering a contract).
• To book and manage your trip, including flights, hotels, transfers, visas and insurance (performance of a contract).
• To keep financial and tax records and meet other legal obligations (legal obligation).
• To keep our website secure and understand how it is used (legitimate interests).
• To send offers and travel news, only if you have agreed to receive them (consent). You can opt out at any time.

Who we share it with

We share only the data needed to deliver your trip, with airlines, hotels, lodges, transport and tour operators, insurers, payment providers and, for visas, embassies, visa centres and immigration authorities. We may also disclose data where the law requires it. We do not sell your personal data.

Data sent outside Kenya

International trips mean some data must go to suppliers and authorities in other countries, for example a hotel in Dubai or a visa authority in Europe. We transfer it only as needed to provide the service you have asked for and take reasonable steps to make sure it is protected, as the Data Protection Act requires.

WhatsApp, phone and email

Many travellers prefer to talk to us on WhatsApp. Messages sent this way are also handled by WhatsApp under its own privacy terms. Please only send passport scans or other documents when we ask for them for a booking, and tell us if you would rather send them another way.

Cookies

Our website uses essential cookies to work properly, for example to remember your choices on enquiry forms. With your consent, we may also use analytics cookies to understand how visitors use the site so we can improve it. You can accept or decline non-essential cookies through the cookie banner, and change your choice at any time in your browser settings. Declining them will not stop the website working.

How long we keep it

We keep enquiry data for 12 months if you don't book. Booking and payment records are kept for 7 years to meet tax and accounting requirements. Copies of passports and visa documents are deleted once they are no longer needed for your trip.

How we protect it

We limit access to personal data to the people who need it to handle your booking and use reasonable technical and organisational measures to protect it from loss, misuse and unauthorised access.

Your rights

Under the Data Protection Act, 2019, you have the right to:

• be informed about how your personal data is used;
• access the personal data we hold about you;
• object to the processing of all or part of your personal data;
• have false or misleading data corrected;
• have data deleted where we no longer have a lawful reason to keep it;
• receive your data in a portable format where applicable; and
• withdraw your consent at any time, for example to marketing messages.

To use any of these rights, email [email protected]. We may ask you to confirm your identity before responding. If you are not satisfied with our response, you can complain to the Office of the Data Protection Commissioner (www.odpc.go.ke).

Children

We collect children's details only from a parent or guardian, and only when needed to book their travel.

Changes to this notice

We may update this notice from time to time. The latest version will always be on this page.