AfriSawari Privacy Policy

1. Who This Policy Covers

This Policy applies to Guests, Partners and other visitors. A Partner may independently process personal information while providing a booked service, for example during hotel check-in, vehicle handover or a guided activity. AfriSawari is responsible for processing carried out through the Platform. Each Partner is responsible for its separate processing and must comply with applicable law.

2. Information We Collect

• Account information: Name, email address, telephone number, preferred language and currency, account credentials and authentication data.
• Partner verification information: Government-issued identification, business registration or licence records, issuing authority and country, representatives, beneficial owners and operating address where required.
• Booking and travel information: Dates, selected service, traveller details, special requests, accessibility requirements, itinerary information and booking communications.
• Payment and transaction information: Approved payment providers process payment credentials. AfriSawari may receive a transaction identifier, status, method, currency, amount and masked payment details; AfriSawari does not intentionally store full card numbers or mobile-money PINs.
• Location information: Listing and search location, approximate location inferred from an IP address and device location when permission is granted for nearby results.
• Device and usage information: IP address, browser and device type, operating system, pages viewed, referral data, timestamps, cookie identifiers and diagnostic logs.
• Communications and content: Support requests, messages, reviews, ratings, photographs and other submitted content.
• Marketing preferences: Choices about newsletters, promotions and similar communications.

3. How We Use Personal Information

• Create and manage accounts, Bookings, payments, refunds and Partner settlements.
• Verify Partner identity, authority, licences and business legitimacy.
• Send booking, account, security and support communications.
• Detect, investigate and prevent fraud, abuse, sanctions exposure, security incidents and Terms violations.
• Diagnose problems, measure performance and improve the Platform.
• Send marketing where permitted and consistent with user preferences.
• Meet legal, tax, accounting, regulatory and law-enforcement requirements and manage legal claims.

4. Legal Bases

Depending on the activity and applicable law, AfriSawari relies on performance of a contract, steps requested before entering into a contract, compliance with legal obligations, legitimate interests that do not override individual rights, and consent where consent is required. AfriSawari applies the Kenya Data Protection Act, 2019 and other applicable data-protection laws in the countries where it operates or targets users.

5. Who We Share Information With

• Partners: Information reasonably required to review, accept and fulfil a Booking and meet safety or legal duties.
• Payment providers: Information needed for payment, refund, fraud checks, chargebacks and Partner settlement.
• Technology and operational providers: Hosting, storage, communications, support, analytics and security providers acting under contractual safeguards.
• Verification providers: Information needed for identity, business, licence, fraud and compliance checks.
• Professional advisers and insurers: Information reasonably necessary for legal, accounting, audit, banking and insurance services.
• Authorities: Information required by law, court order or lawful regulatory request, or reasonably necessary to protect rights and safety.
• Business transactions: Information subject to appropriate safeguards in a merger, financing, acquisition, restructuring or sale.

AfriSawari does not sell personal information.

6. International Transfers

AfriSawari may use Partners and service providers in countries other than the country where information was collected. Before a cross-border transfer, AfriSawari will assess the destination and recipient and use a lawful safeguard required by applicable law, which may include contractual protections, consent where appropriate, or another recognised transfer mechanism. Users may contact AfriSawari for information about safeguards relevant to their data.

7. Retention

AfriSawari retains personal information only for a documented business or legal purpose. Unless a longer period is required by law, needed for an active dispute or justified by a fraud or safety investigation, the following schedule applies:

8. Security and Breach Response

AfriSawari uses administrative, technical and organisational safeguards designed to protect personal information, including role-based access, authentication, encryption in transit, logging, backups and restricted access to verification records. No system is completely secure. AfriSawari assesses suspected personal-data breaches and notifies affected individuals and regulators where applicable law requires.

9. Your Rights

Depending on applicable law, you may request access, correction, deletion, restriction or a copy of your personal information; object to certain processing; withdraw consent; and complain to a competent regulator. Send a request to support@afrisawari.com. AfriSawari may verify your identity and will respond within the period required by applicable law. Rights may be limited where records must be kept for tax, fraud, safety, dispute or other lawful reasons.

Kenyan users may complain to the Office of the Data Protection Commissioner.

10. Cookies

The Platform uses cookies and similar technologies for authentication, security, preferences, performance and analytics. The Cookie Policy explains each category and the available controls. Non-essential cookies will be used only where the required choice has been obtained.

11. Children

A person under 18 may not create an account or enter into a Booking contract. An adult arranging family or group travel may provide limited information about a child when necessary to fulfil the service and when legally authorised to do so. If AfriSawari learns that a child submitted information through an unauthorised account, it will take reasonable steps to delete or restrict the information, subject to legal obligations.

12. Changes

AfriSawari may update this Policy to reflect legal, security, operational or product changes. The current version will be posted with a revised effective date. Where required by law or where a change materially affects data use, AfriSawari will provide additional notice before the change takes effect.