Privacy Policy

1. Introduction & Scope

At Cephill Tours & Travels, we respect your privacy and are committed to protecting your personal data. This Privacy Policy describes how we collect, use, process, and disclose your information when you access our website, use our services, or interact with us.

This policy applies to all visitors, clients, and partners who access our services. By using our website and booking tours with us, you consent to the data practices described in this statement.

2. Information We Collect

To provide you with premium travel services, we may collect and process the following categories of personal information:

• Identity Data: Full name, passport number, national identification number, nationality, and date of birth (required for booking flights, permits, and hotel registrations).
• Contact Data: Billing address, delivery address, email address, and telephone numbers.
• Transaction & Booking Data: Details about payments to and from you, details of tour packages booked, travel dates, flight references, dietary requirements, and health conditions affecting travel.
• Technical Data: Internet protocol (IP) address, browser type and version, time zone setting, location details, browser plug-in types, operating system, and platform.

3. How We Use Your Information

We only use your personal data when the law allows us to. Most commonly, we use your data in the following circumstances:

• To Perform Our Contract: To manage bookings, coordinate with accommodation and transportation providers, and deliver your tour packages.
• To Communicate: To send you booking confirmations, travel updates, security alerts, and administrative messages.
• For Legitimate Interests: To improve our services, optimize website performance, customize user experience, and ensure security.
• With Your Consent: To send you newsletters, promotional travel deals, and marketing materials (you may opt out at any time).

4. Data Security & Retention

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. We limit access to your personal data to those employees, agents, contractors, and partners who have a business need to know.

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Typically, booking records are retained for seven years in compliance with local tax and commercial regulations in Kenya.

5. Third-Party Sharing

We do not sell, trade, or rent your personal information to third parties. However, to execute your travel arrangements, we must share relevant data with trusted partners:

• Service Providers: Hotels, resorts, airlines, tour guides, and local transportation agencies who facilitate your specific bookings.
• Payment Processors: Secure third-party payment gateways (e.g., M-Pesa merchant portals, credit card acquirers) to process transactions.
• Regulatory Bodies: Government departments, national parks (e.g., Kenya Wildlife Service), and immigration authorities when required by law or local tourism regulations.

6. Cookies & Tracking Technologies

Our website uses cookies and similar tracking technologies to track activity on our platform and hold certain information. Cookies are files with small amounts of data which may include an anonymous unique identifier.

We use cookies to remember your preferences, keep you logged in (if applicable), and analyze web traffic to enhance usability. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, some portions of our website may not function correctly.

7. Your Rights

Under applicable data protection laws, you have rights in relation to your personal data. These include the right to:

• Request Access: Obtain a copy of the personal data we hold about you.
• Request Correction: Have any incomplete or inaccurate data corrected.
• Request Erasure: Ask us to delete personal data where there is no good reason for us continuing to process it.
• Withdraw Consent: Opt-out of marketing emails or newsletters by clicking the unsubscribe link or contacting us directly.

8. Contact & Compliance

If you have any questions about this Privacy Policy or wish to exercise any of your legal rights, please contact our data protection officer:

Cephill Tours & Travels
Data Protection & Compliance Department
Email: info@cephiltoursandtravels.com
Phone: +254 729 836 336
Nairobi, Kenya