Privacy Policy

 

Effective Date: November 2025.

At Supai Amboseli Eco-Lodge (“we”, “our”, “us”), your privacy is important to us. This Privacy Policy explains how we collect, use, and protect your personal data when you visit our website, make a booking, or communicate with us.

  1. Information We Collect

We may collect the following categories of personal data:

  • Personal details: Full name, contact number, email address, nationality, and identification document (passport or ID).
  • Booking information: Check-in/out dates, room preferences, payment details (processed securely through third-party providers).
  • Technical data: IP address, browser type, device information, and website usage statistics.
  • Communication records: Any messages, inquiries, or feedback you send us.
  1. How We Use Your Information

We use your data to:

  • Process and confirm reservations or service requests.
  • Communicate booking details, promotional offers, or updates.
  • Improve our services, website performance, and guest experience.
  • Comply with legal, financial, and regulatory requirements.
  1. Legal Basis for Processing

We process your personal data based on:

  • Your consent when submitting forms or booking.
  • Our contractual obligations to provide hospitality services.
  • Legal compliance with Kenyan regulations (Data Protection Act, 2019).
  1. Sharing of Information

We do not sell or rent your data. However, we may share limited data with:

  • Licensed payment processors (for secure payments).
  • Travel platforms (e.g., Booking.com, Airbnb, Expedia) for confirmed bookings.
  • Government authorities when required by law.
  • Our trusted IT service providers for website hosting and maintenance.

All third parties are bound by confidentiality and data protection obligations.

  1. Data Retention

We retain your data only as long as necessary for business, legal, or accounting purposes, after which it will be securely deleted or anonymized.

  1. Security

We use SSL encryption, firewalls, and secure servers to protect your personal information from unauthorized access, alteration, or disclosure.

  1. Your Rights

Under the Kenya Data Protection Act (2019), you have the right to:

  • Access your personal data.
  • Request correction or deletion.
  • Withdraw consent at any time.
  • Object to certain types of processing.

To exercise these rights, contact us at: privacy@supai.com.

  1. International Transfers

Where data is transferred outside Kenya, we ensure adequate safeguards are in place to protect your privacy.

  1. Updates to This Policy

We may revise this Privacy Policy periodically. Updates will be posted on this page with a new effective date.

  1. Contact Us

For questions or requests related to this Privacy Policy:
📧 privacy@supai.com
📍 Supai Amboseli Eco-Lodge, Kimana, Kajiado County, Kenya