Privacy Policy

Privacy & Data Protection • Nandi Adventures

Version: August 2026

Nandi Adventures Limited respects the privacy of guests, prospective travellers, Trade Partners, suppliers, website visitors and other individuals whose personal information we process. This Privacy Policy explains what information we collect, why we use it, when we share it, how we protect it and how individuals can exercise their rights.

Effective date  August 2026. This policy replaces the August 2024 website Privacy Policy and is intended to align Nandi Adventures’ website, booking and guest-data practices with Uganda’s Data Protection and Privacy Act, 2019 and the Data Protection and Privacy Regulations, 2021.

 

1. Who We Are

Nandi Adventures Limited is a Uganda-based safari operator creating tailor-made journeys in Uganda, Rwanda, Kenya and Tanzania.

For data-protection purposes, Nandi Adventures determines the purposes for which guest and enquiry information is processed and is responsible for applying appropriate safeguards.

2. Information We Collect

We may collect information when you enquire, request a quotation, make or manage a booking, communicate with us, travel with us, subscribe to our communications or use our website.

• Identity and contact information: name, email address, telephone number, nationality and relevant identification details.
• Travel and booking information: travel dates, itinerary, accommodation preferences, passport and visa information, emergency contact details and relevant travel-document information.
• Service and preference information: dietary requirements, accessibility needs, room preferences, celebrations and other special requests.
• Health and safety information: information necessary to assess participation or arrange appropriate support, including medical information where required for safe travel or emergency assistance.
• Payment and transaction information: payment status, transaction references and billing information. Card details may be processed directly by payment providers rather than stored by Nandi Adventures.
• Communications: correspondence, enquiries, feedback, complaints and information provided through forms, email, WhatsApp or other communication channels used for safari operations.
• Website and technical information: IP address, browser/device information, pages viewed, approximate location derived from technical data, cookie identifiers and similar information, depending on your browser and our website configuration.

3. How We Collect Information

We generally collect personal information directly from the individual concerned. We may also receive information from a Trade Partner, family member, authorised representative, supplier or another source where this is necessary for booking administration or service delivery and permitted by applicable law.

Where a Trade Partner provides information about travellers, the Trade Partner is responsible for ensuring that it has a lawful basis to share that information with Nandi Adventures and that travellers have been appropriately informed.

4. Why We Use Personal Information

We use personal information only for legitimate and specific purposes connected with our business and travel services, including:

• responding to enquiries and preparing quotations;
• creating, confirming and administering safari bookings;
• booking accommodation, permits, flights, transfers and activities;
• communicating itinerary, payment, operational and safety information;
• meeting immigration, conservation, aviation, legal and regulatory requirements;
• supporting medical, emergency and evacuation arrangements where necessary;
• responding to complaints, claims and service requests;
• improving our services, guest experience and operational systems;
• sending marketing communications where permitted and, where required, with consent; and
• protecting the security, integrity and lawful operation of our website and business.

5. Legal Bases for Processing

Depending on the circumstances, Nandi Adventures may process personal information because it is necessary to perform a contract or take steps at the individual’s request before entering into a contract; because the individual has provided consent; because processing is necessary to comply with a legal obligation; or because another lawful basis permitted by applicable Ugandan law applies.

Where consent is required, it will be obtained through an appropriate affirmative action. Consent may be withdrawn, although withdrawal does not affect processing already carried out lawfully before withdrawal.

6. Health & Other Sensitive Information

Health information and certain other categories of personal information receive additional protection under Ugandan law. Nandi Adventures collects such information only where it is necessary for a legitimate travel, safety, medical or legal purpose and where the applicable legal basis is present.

Examples include information needed to assess participation in trekking or other activities, arrange accessibility support, manage dietary or allergy requirements, or coordinate emergency assistance.

We ask travellers to provide only information that is relevant to the safe and effective delivery of their journey.

7. Sharing Information

We do not sell or rent personal information. We may disclose relevant information to third parties where necessary to deliver the requested service, meet legal requirements, protect safety or operate our business.

• lodges, camps and accommodation providers;
• airlines, charter operators and aviation service providers;
• transport providers, guides and activity operators;
• wildlife and conservation authorities for permit and park administration;
• medical or emergency-evacuation providers where required;
• payment processors, banks and financial service providers;
• technology, communications, website hosting and other service providers acting on our behalf; and
• government, regulatory, law-enforcement or judicial bodies where disclosure is required or permitted by law.

8. International & Cross-Border Processing

Because Nandi Adventures arranges travel across East Africa and uses international service providers, personal information may be processed or stored outside Uganda. Where this occurs, we will take reasonable steps to ensure that the processing is lawful and that appropriate safeguards are in place in accordance with applicable Ugandan data-protection requirements.

9. Cookies & Website Technologies

Our website may use cookies and similar technologies for essential website functions, preferences, analytics, performance and, where enabled, marketing.

You can control certain cookies through your browser and any cookie-consent tools made available on the website. Disabling essential cookies may affect website functionality.

Third-party services embedded in the website may process technical information according to their own privacy terms.

10. Direct Marketing

We may send newsletters, safari inspiration, travel updates and promotional information where permitted by law and where the required consent or other lawful basis exists.

You may opt out of marketing communications at any time by using the unsubscribe mechanism in the communication or contacting us directly. You may also object to the use of your personal information for direct marketing.

11. Data Retention

We retain personal information only for as long as necessary for the purposes for which it was collected, including booking administration, legal, accounting, tax, dispute-resolution, safety and regulatory requirements.

When personal information is no longer required, we will take reasonable steps to securely delete, destroy or de-identify it, subject to any lawful requirement to retain it.

12. Data Security

We use reasonable technical and organisational safeguards designed to protect personal information from unauthorised access, loss, misuse, alteration or disclosure.

No method of internet transmission or electronic storage is completely secure. We therefore cannot guarantee absolute security, but we will take reasonable steps to prevent and respond to security incidents.

13. Data Breaches

If Nandi Adventures becomes aware of unauthorised access to or acquisition of personal information, we will follow the applicable incident-response and notification requirements under Ugandan law, including notifying the relevant authority where required and taking reasonable remedial measures.

14. Your Rights

Subject to applicable law and reasonable identity verification, individuals may have rights to:

• request access to personal information held about them;
• request correction of inaccurate, incomplete, misleading or out-of-date information;
• request deletion or destruction of information where the law permits;
• object to or request restriction of certain processing;
• object to processing for direct marketing;
• withdraw consent where processing is based on consent; and
• make a complaint to the Personal Data Protection Office where they believe their rights have been infringed.

15. How to Exercise Your Rights

Requests should be sent to info@nandiadventures.com with enough information for us to identify the individual and locate the relevant records. We may request reasonable proof of identity before responding.

We will handle valid requests within the periods required by applicable law and will explain any lawful reason why a request cannot be fulfilled in full.

16. Children’s Information

Nandi Adventures arranges family safaris and may therefore process information relating to children travelling with a parent, guardian or authorised adult.

Where information about a child is collected or processed, we will apply the safeguards required by Ugandan law, including obtaining appropriate parent or guardian consent where required.

Parents or guardians should avoid providing unnecessary information about children and should ensure that information supplied for travel is accurate.

17. Third-Party Websites & Services

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices of third parties that operate outside Nandi Adventures. We encourage users to review the privacy notices of those services before submitting personal information.

18. Complaints & Regulatory Oversight

If you have a concern about how Nandi Adventures handles your personal information, please contact us first so that we can investigate and respond.

Individuals may also contact Uganda’s Personal Data Protection Office, the national authority responsible for overseeing implementation and enforcement of the Data Protection and Privacy Act.

19. Changes to This Policy

We may update this Privacy Policy when our services, website, technology, legal obligations or data-processing practices change. The latest version will be published on our website with its effective date.

Changes to this Privacy Policy do not retrospectively change the contractual terms of a confirmed safari.

Contact  Nandi Adventures Limited • Kisaasi Kyanja Road, Kampala, Uganda • info@nandiadventures.com • +256 772 403 330