1. Who we are
Nyika & Beyond Adventures Ltd is a Kenyan tour company based in Naivasha, Kenya. We are the controller of the personal information described in this notice. Our contact details are at the end of this page.
2. What we collect
We collect the information you choose to give us through the enquiry and contact forms, by email, or by WhatsApp. That may include:
- your name, email address and phone or WhatsApp number;
- your country, travel dates, number of travellers and budget range;
- the journey or destination you are interested in;
- accessibility needs, dietary needs or other requests you share with us;
- any other information you include in a message.
When you submit a form, our server also records a one-way hash of your IP address and your browser’s user-agent string. We use these only to prevent spam and abuse, and to investigate a security incident. We do not use them to build a profile of you.
We do not ask for payment card details through this website. Payments, if any, are arranged separately and only after a written quote has been agreed.
3. Why we use it
- To answer your enquiry and prepare a journey proposal or quote. This is done at your request before any contract exists.
- To manage a journey if you choose to book, including confirming arrangements with suppliers and keeping you informed.
- To keep business records and comply with applicable Kenyan law.
- To protect the website from spam, fraud and unauthorised access.
We do not sell your personal information, and we do not add you to a marketing list just because you sent an enquiry. If we ever offer a newsletter, you will have to opt in separately.
6. How long we keep it
We keep enquiry records only for as long as we need them to respond, to manage a journey, or to meet our legal and accounting obligations. If an enquiry does not become a booking, you can ask us to delete it and we will do so unless we are required to keep it.
Security logs and rate-limit records are kept for a short period and then discarded or overwritten.
7. Your rights
Under Kenya’s Data Protection Act, 2019, you may ask us to:
- confirm whether we hold personal information about you and give you a copy;
- correct information that is inaccurate or out of date;
- delete information we no longer have a lawful reason to keep;
- restrict or object to certain processing;
- withdraw a consent you previously gave.
To make a request, email nyikaandbeyond@gmail.com. We may need to verify your identity before acting. You also have the right to complain to the Office of the Data Protection Commissioner in Kenya.
8. Security
We use HTTPS in production, hashed passwords, access controls, prepared database queries and form tokens to protect the information we hold. No website can promise perfect security, but we take these measures seriously and review them as the site develops.
9. Children
This website is not directed at children. We do not knowingly collect personal information from anyone under 18. If a journey involves a minor, we ask that a parent or guardian makes the enquiry and provides the information on the minor’s behalf.
10. Contact us
Questions about this notice, or a request about your information, can be sent to:
- Email: nyikaandbeyond@gmail.com
- Call: +254710861338
- WhatsApp: +254710861338
- Location: Naivasha, Kenya
- Hours: Monday to Sunday, 8:00 AM – 8:00 PM EAT
We may update this notice when our practices change. The date at the top shows when it was last revised.