Privacy Policy

PRIVACY POLICY

1. IMPORTANT INFORMATION AND WHO WE ARE:

At MWERI EXPEDITIONS, we understand the importance of protecting your privacy and
ensuring the security of your personal data. This Privacy Policy aims to provide you with
clear and transparent information about how we collect, use, and protect your personal data
when you use our services or interact with us.
Who We Are:
MWERI EXPEDITIONS is a travel company based in Kenya, specializing in organizing
safari tours, travel packages, and related services. We are committed to providing exceptional
travel experiences while respecting your privacy rights and complying with applicable data
protection laws and regulations.
Contact Information:
If you have any questions or concerns regarding this Privacy Policy or our data processing
practices, or if you would like to exercise your privacy rights, please feel free to contact us:
OUR OFFICE

Mweri Expeditions
 Email: info@mweriexpeditions.com
 Phone: +254720454755
 Website: https://mweriexpeditions.com/
Phone: +254720454755
Our dedicated team is here to assist you and address any inquiries you may have regarding
the handling of your personal data. Your privacy matters to us, and we are committed to
being transparent and responsive to your needs.

2. THE DATA WE COLLECT ABOUT YOU:
At MWERI EXPEDITIONS, we collect various types of personal data to provide you with
our services and enhance your experience. The types of data we collect may include:
 Contact Information: Such as your name, email address, telephone number, and
mailing address, which are necessary for communication and booking purposes.
 Identification Information: Such as passport details or government-issued
identification numbers, which may be required for travel bookings and compliance
with legal and regulatory requirements.
 Payment Information: Including credit card details or other payment methods,
which are necessary for processing payments for bookings and transactions.
 Travel Preferences: Such as accommodation preferences, dietary requirements, and
special requests, which help us personalize your travel experience and meet your
specific needs.

 Technical Information: Such as IP addresses, device information, and browsing
history, collected through cookies and similar technologies when you interact with our
website or online services.
 Other Information: Such as feedback, reviews, or comments provided by you
voluntarily, which help us improve our services and tailor our offerings to better suit
your preferences.
We collect personal data directly from you when you make bookings, create accounts, or
interact with our website or other communication channels. We may also collect personal
data from third-party sources, such as travel agents or affiliates, in accordance with
applicable data protection laws and regulations.
It is important to note that we only collect personal data that is necessary for the purposes
outlined in this Privacy Policy, and we take measures to ensure that your personal data is kept
accurate, up-to-date, and secure. Your privacy and trust are paramount to us, and we are
committed to handling your personal data responsibly and in accordance with applicable laws
and regulations.

3. HOW YOUR PERSONAL DATA IS COLLECTED:
At MWERI EXPEDITIONS, we collect your personal data through various means, ensuring
transparency and compliance with data protection regulations. Here’s how your personal data
is collected:
1. Directly from You: We collect personal data directly from you when you interact
with us, such as when you make bookings, create accounts, or communicate with us
through our website, email, or telephone.
2. Booking Process: When you make a booking for our services, we collect necessary
personal data to complete the booking, including your name, contact information,
payment details, and any other information relevant to your travel arrangements.
3. Account Creation: If you create an account on our website or mobile app, we collect
personal data provided by you during the registration process, such as your name,
email address, and password.
4. Website Interactions: When you visit our website or use our online services, we may
collect technical information about your browsing activities, such as your IP address,
browser type, and device information, through the use of cookies and similar
technologies.
5. Third-Party Sources: We may receive personal data from third-party sources, such
as travel agents, affiliates, or service providers, in accordance with applicable data
protection laws. This may include information provided to us by third parties involved
in your travel arrangements.
6. Communication Channels: When you communicate with us through email,
telephone, or other communication channels, we may collect personal data contained
in your messages or correspondence, such as your contact information and any other
information you choose to provide.
We ensure that personal data is collected only for specified and legitimate purposes, and we
take measures to minimize the data collected to what is necessary for the intended purposes.
By collecting personal data directly from you and ensuring transparency in our data
collection practices, we aim to maintain your trust and confidence in our services.

4. HOW WE USE YOUR PERSONAL DATA:
At MWERI EXPEDITIONS, we are committed to using your personal data responsibly and
in accordance with applicable data protection laws and regulations. Here’s how we use your
personal data:
1. Providing and Managing Services: We use your personal data to provide and
manage the travel services you have booked with us, including processing bookings,
reservations, and payments, as well as communicating with you about your travel
arrangements.
2. Personalization: We may use your personal data to personalize your travel
experience and tailor our services to better meet your preferences and needs. This may
include recommending specific destinations, accommodations, or activities based on
your past bookings or travel history.
3. Communication: We use your contact information to communicate with you about
your bookings, send booking confirmations, itinerary details, and updates about your
travel arrangements. We may also send you marketing communications, such as
promotional offers, newsletters, or surveys, based on your preferences and consent.
4. Improving Services: We analyze your personal data to improve the quality of our
services, enhance our website and online platforms, and develop new features and
offerings. This may involve analyzing user behavior, preferences, and feedback to
identify areas for improvement and innovation.
5. Legal and Regulatory Compliance: We may use your personal data to comply with
legal and regulatory requirements, including tax obligations, fraud prevention, and
compliance with government regulations or industry standards.
6. Customer Support: We use your personal data to provide customer support and
assistance, address inquiries, resolve issues or complaints, and ensure a positive and
satisfactory experience throughout your interactions with us.
7. Marketing and Promotions: With your consent, we may use your personal data to
send you marketing communications about our products, services, special offers, and
promotions that may be of interest to you. You have the right to opt out of receiving
marketing communications at any time.
8. Security and Fraud Prevention: We use your personal data to maintain the security
and integrity of our services, protect against fraud, unauthorized access, or misuse of
personal data, and ensure the safety and security of our clients and users.
By using your personal data for these purposes, we aim to provide you with a seamless and
personalized travel experience while maintaining the highest standards of privacy and data
protection. We are committed to using your personal data responsibly and transparently, and
we respect your rights and choices regarding the use of your personal data.

5. HOW WE DISCLOSE YOUR PERSONAL DATA:

At MWERI EXPEDITIONS, we understand the importance of protecting your personal data
and ensure that it is only disclosed in accordance with applicable data protection laws and
regulations. Here’s how we disclose your personal data:
1. Third-Party Service Providers: We may disclose your personal data to third-party
service providers, such as hotels, airlines, tour operators, and transportation
companies, to facilitate your travel arrangements and bookings. These service

providers are contractually obligated to handle your personal data securely and only
for the purposes specified by MWERI EXPEDITIONS.
2. Business Partners and Affiliates: We may disclose your personal data to our
business partners, affiliates, or other trusted third parties for marketing purposes, such
as sending promotional offers, newsletters, or updates about our services. We will
obtain your consent before disclosing your personal data to third parties for marketing
purposes.
3. Legal and Regulatory Authorities: We may disclose your personal data to legal or
regulatory authorities as required by law or to comply with legal obligations, court
orders, government regulations, or law enforcement requests. We may also disclose
your personal data to protect our rights, property, or safety, or those of others.
4. Mergers and Acquisitions: In the event of a merger, acquisition, or sale of assets, we
may disclose your personal data to the relevant parties involved in the transaction,
including potential buyers, investors, or partners. We will notify you and obtain your
consent before disclosing your personal data in connection with any such transaction.
5. Other Disclosures: We may disclose your personal data for other purposes not listed
above, with your consent or as otherwise permitted or required by law. We will
always ensure that any disclosure of your personal data is done in accordance with
applicable data protection laws and regulations, and that appropriate safeguards are in
place to protect your privacy and security.
By disclosing your personal data in these circumstances, we aim to provide you with the best
possible service and experience while ensuring that your privacy rights are respected and
protected. We take measures to ensure that any third parties with whom we share your
personal data are bound by contractual obligations to handle your personal data securely and
in compliance with applicable laws and regulations.

6. WHEN WE TRANSFER YOUR DATA OVERSEAS:

At MWERI EXPEDITIONS, we may need to transfer your personal data to recipients located
outside of your country, including countries that may have different data protection laws and
regulations than those in your jurisdiction. Here’s how we handle such data transfers:
1. Legal Basis for Data Transfers: Before transferring your personal data overseas, we
ensure that there is a legal basis for the transfer under applicable data protection laws
and regulations. This may include obtaining your explicit consent for the transfer,
entering into standard contractual clauses or other appropriate safeguards with the
recipient, or relying on other legal mechanisms recognized by data protection
authorities.
2. Data Protection Adequacy: We assess the data protection laws and regulations in the
recipient country to ensure that they provide an adequate level of protection for your
personal data. If the recipient country does not have adequate data protection laws, we
take additional measures to ensure that your personal data is adequately protected,
such as implementing appropriate safeguards or obtaining your explicit consent for
the transfer.
3. Security Measures: We take appropriate technical and organizational measures to
ensure the security and integrity of your personal data during overseas transfers. This
may include encryption, pseudonymization, access controls, and other security
measures to protect your personal data from unauthorized access, use, or disclosure.

4. Recipient Obligations: Before transferring your personal data to recipients located
overseas, we ensure that they are contractually obligated to handle your personal data
securely and in compliance with applicable data protection laws and regulations. We
require recipients to implement appropriate safeguards to protect your personal data
and to use it only for the purposes specified by MWERI EXPEDITIONS.
5. Data Subject Rights: We inform you about the potential risks associated with
overseas data transfers and provide you with information about your rights and
options regarding the transfer of your personal data. You have the right to withdraw
your consent for overseas data transfers at any time, subject to legal and contractual
obligations.
By transferring your personal data overseas, we aim to provide you with the best possible
service and experience while ensuring that your personal data is protected in accordance with
applicable data protection laws and regulations. We are committed to maintaining the privacy
and security of your personal data, regardless of where it is transferred or processed.

7. HOW WE SECURE YOUR DATA:

At MWERI EXPEDITIONS, we take the security of your personal data seriously and
implement robust measures to protect it from unauthorized access, use, disclosure, alteration,
or destruction. Here’s how we secure your data:
1. Data Encryption: We use encryption technology to secure your personal data during
transmission over the internet. This ensures that your data is protected against
interception by unauthorized parties while being transmitted between your device and
our servers.
2. Access Controls: We restrict access to your personal data to authorized personnel
only, such as employees, contractors, or service providers who need access to perform
their duties. Access to personal data is granted on a need-to-know basis and is strictly
controlled through authentication mechanisms, such as passwords, access logs, and
multi-factor authentication.
3. Data Minimization: We only collect and retain the personal data that is necessary for
the purposes specified in this Privacy Policy. We take measures to minimize the
amount of personal data collected, processed, and stored to reduce the risk of
unauthorized access or misuse.
4. Physical Security: We implement physical security measures, such as locked
cabinets, restricted access areas, and surveillance cameras, to protect against
unauthorized access to physical storage locations where personal data is kept.
5. Data Integrity: We maintain the accuracy and integrity of your personal data by
implementing measures to prevent unauthorized or accidental alteration, deletion, or
loss of data. This includes regular data backups, data validation checks, and audit
trails to track changes to personal data.
6. Employee Training: We provide regular training and awareness programs to our
employees, contractors, and service providers on data protection best practices,
security protocols, and regulatory requirements. This ensures that personnel handling
personal data are aware of their responsibilities and obligations to protect your
privacy.
7. Security Audits and Assessments: We conduct regular security audits, assessments,
and reviews of our systems, processes, and controls to identify and address any

vulnerabilities or weaknesses that may pose a risk to the security of your personal
data.
8. Incident Response: In the event of a data breach or security incident involving your
personal data, we have established incident response procedures to promptly
investigate, mitigate, and remediate any impacts to your privacy and security. We will
notify you and relevant authorities as required by law.
By implementing these security measures, we aim to maintain the confidentiality, integrity,
and availability of your personal data and protect it from unauthorized access, use, or
disclosure. Your trust and confidence in our ability to safeguard your data are paramount, and
we are committed to upholding the highest standards of data protection and security.

8. HOW LONG WE RETAIN YOUR DATA FOR:

At MWERI EXPEDITIONS, we retain your personal data only for as long as necessary to
fulfill the purposes for which it was collected, as outlined in this Privacy Policy, and in
accordance with applicable laws and regulations. Here’s how we determine the retention
period for your data:
1. Purpose of Data Processing: We retain your personal data for the duration necessary
to fulfill the specific purposes for which it was collected. This may include processing
your travel bookings, providing customer support, managing your account, or
complying with legal and regulatory requirements.
2. Legal and Regulatory Requirements: We may retain your personal data for a longer
period if required by law, regulation, or legal obligations, such as tax, accounting, or
regulatory requirements. In such cases, we will retain your data for the duration
necessary to comply with these obligations.
3. Contractual Obligations: We may retain your personal data for the duration of our
contractual relationship with you, including the provision of travel services,
processing of bookings, or other contractual obligations. Once the contractual
relationship has ended, we will securely delete or anonymize your personal data in
accordance with our data retention policies.
4. User Preferences: If you have provided consent for marketing communications or
newsletters, we will retain your personal data for as long as you continue to consent to
receiving such communications. You have the right to withdraw your consent at any
time, after which we will promptly delete your personal data from our marketing
databases.
5. Data Accuracy and Integrity: We regularly review and update the personal data we
hold to ensure its accuracy, relevance, and integrity. If we determine that certain
personal data is no longer necessary for the purposes for which it was collected, we
will securely delete or anonymize it in accordance with our data retention policies.
6. User Requests: If you request the deletion of your personal data or exercise your data
subject rights, such as the right to erasure or the right to object to processing, we will
promptly delete or anonymize your personal data in accordance with your request,
unless we are legally required or permitted to retain it.
7. Anonymization or Pseudonymization: Where applicable and feasible, we may
anonymize or pseudonymize your personal data to prevent identification and retain it
for statistical, research, or analytical purposes. Anonymized or pseudonymized data is
not subject to the same retention periods as personally identifiable data.

By retaining your personal data for the appropriate duration and securely deleting or
anonymizing it when no longer necessary, we aim to minimize the risk of unauthorized
access, use, or disclosure and ensure compliance with data protection laws and regulations.
Your privacy and data protection rights are important to us, and we are committed to
handling your personal data responsibly and transparently throughout its lifecycle.

9. YOUR LEGAL RIGHTS:

At MWERI EXPEDITIONS, we respect your rights regarding the processing of your
personal data and are committed to upholding your privacy rights in accordance with
applicable data protection laws and regulations. Here are your legal rights concerning your
personal data:
1. Right to Access: You have the right to request access to your personal data that we
hold. Upon request, we will provide you with information about the personal data we
process, the purposes of processing, and any third parties with whom we have shared
your data.
2. Right to Rectification: If you believe that any personal data we hold about you is
inaccurate or incomplete, you have the right to request that we correct or update it.
We will promptly rectify any inaccuracies or discrepancies in your personal data to
ensure its accuracy and integrity.
3. Right to Erasure: You have the right to request the deletion of your personal data
under certain circumstances, such as when the data is no longer necessary for the
purposes for which it was collected, or when you withdraw your consent for
processing. We will promptly delete your personal data upon receiving a valid
request, subject to legal and contractual obligations.
4. Right to Restriction of Processing: You have the right to request the restriction of
processing of your personal data under certain circumstances, such as when you
contest the accuracy of the data or object to its processing. We will limit the
processing of your personal data while investigating your request, subject to legal and
contractual obligations.
5. Right to Data Portability: You have the right to receive a copy of your personal data
in a structured, commonly used, and machine-readable format and to transmit it to
another controller, where technically feasible. This right applies to personal data that
you have provided to us based on consent or contract.
6. Right to Object: You have the right to object to the processing of your personal data
for direct marketing purposes or for reasons related to your particular situation. We
will respect your objection and cease processing your personal data for such purposes,
unless we have compelling legitimate grounds for the processing that override your
interests, rights, and freedoms.
7. Right to Withdraw Consent: If we rely on your consent as the legal basis for
processing your personal data, you have the right to withdraw your consent at any
time. Withdrawal of consent does not affect the lawfulness of processing based on
consent before its withdrawal.
8. Right to Lodge a Complaint: If you believe that we have violated your privacy
rights or failed to comply with applicable data protection laws and regulations, you
have the right to lodge a complaint with the relevant data protection authority in your
jurisdiction.

To exercise your legal rights or to obtain more information about your rights concerning your
personal data, please contact us using the contact information provided in this Privacy Policy.
We will respond to your requests promptly and in accordance with applicable laws and
regulations, ensuring that your privacy rights are respected and upheld throughout the data
processing lifecycle.

10. GLOSSARY:

To enhance understanding of the terms used in this Privacy Policy, we provide the following
definitions:
1. Personal Data: Any information that relates to an identified or identifiable
individual. This includes but is not limited to names, contact details, identification
numbers, online identifiers, and location data.
2. Data Controller: The entity that determines the purposes and means of processing
personal data and is responsible for ensuring compliance with data protection laws
and regulations. In the context of this Privacy Policy, MWERI EXPEDITIONS is the
data controller.
3. Data Processor: An entity that processes personal data on behalf of the data
controller and is authorized to do so under a contract or legal obligation. Data
processors may include third-party service providers or subcontractors engaged by the
data controller.
4. Data Processing: Any operation or set of operations performed on personal data,
such as collection, recording, organization, storage, retrieval, use, disclosure,
transmission, erasure, or destruction.
5. Consent: Any freely given, specific, informed, and unambiguous indication of the
data subject’s wishes by which they, by a statement or by a clear affirmative action,
signify agreement to the processing of their personal data.
6. Third Party: Any person, organization, or entity other than the data subject, data
controller, or data processor who may access or process personal data.
7. Data Subject: An identified or identifiable individual to whom the personal data
relates. Data subjects may include clients, customers, employees, or any other
individuals whose personal data is processed by MWERI EXPEDITIONS.
8. Data Breach: A security incident that results in the accidental or unlawful
destruction, loss, alteration, unauthorized disclosure, or access to personal data.
9. Data Protection Officer (DPO): A designated individual responsible for overseeing
data protection compliance within an organization and acting as a point of contact for
data protection authorities and data subjects.
10. Data Retention: The period for which personal data is kept by an organization before
it is securely deleted, anonymized, or archived in accordance with legal, regulatory, or
operational requirements.
By providing these definitions, we aim to clarify key terms used in this Privacy Policy and
promote transparency and understanding of our data processing practices. If you have any
questions or require further clarification, please feel free to contact us using the contact
information provided.

11. UPDATING AND AMENDING THIS PRIVACY POLICY:

At MWERI EXPEDITIONS, we may update or amend this Privacy Policy from time to time
to reflect changes in our data processing practices, legal or regulatory requirements, or
business operations. We encourage you to review this Privacy Policy periodically to stay
informed about how we collect, use, and protect your personal data.
When we make significant changes to this Privacy Policy, we will notify you through
appropriate channels, such as by email, website notification, or other means, before the
changes take effect. We may also seek your consent to the updated Privacy Policy if required
by applicable laws or regulations.
By continuing to use our services after the effective date of the updated Privacy Policy, you
acknowledge and agree to the revised terms and practices outlined therein. If you do not
agree with any changes or amendments to this Privacy Policy, you may choose to discontinue
using our services and request the deletion of your personal data, as outlined in this Privacy
Policy.
We are committed to maintaining transparency, accountability, and compliance with
applicable data protection laws and regulations. If you have any questions, concerns, or
feedback about this Privacy Policy or our data processing practices, please contact us using
the contact information provided, and we will be happy to assist you.

12. YOUR CONSENT TO THIS PRIVACY POLICY:

By using the services provided by MWERI EXPEDITIONS, including but not limited to
visiting our website, making bookings, or communicating with us through any channel, you
hereby consent to the collection, use, and disclosure of your personal data as described in this
Privacy Policy.
You acknowledge that you have read and understood this Privacy Policy, including your
rights and obligations regarding the processing of your personal data. You agree to comply
with the terms and conditions outlined in this Privacy Policy and consent to the processing of
your personal data in accordance with applicable laws and regulations.
If you do not agree with any provision of this Privacy Policy or do not consent to the
processing of your personal data as described herein, please refrain from using our services
and contact us to discuss your concerns or exercise your rights as outlined in this Privacy
Policy.
Your consent is important to us, and we are committed to upholding your privacy rights and
protecting your personal data in accordance with applicable laws and regulations. If you have
any questions, concerns, or feedback about this Privacy Policy or our data processing
practices, please do not hesitate to contact us using the contact information provided.

13. CONTACT US:

If you have any questions, concerns, or inquiries regarding this Privacy Policy or our data
processing practices, please feel free to contact us using the following contact information:

OUR OFFICE

Mweri Expeditions
 Email: info@mweriexpeditions.com
 Phone: +254720454755
 Website: https://mweriexpeditions.com/

Our dedicated team is here to assist you and address any questions or concerns you may have
regarding the handling of your personal data. Your privacy matters to us, and we are
committed to being transparent and responsive to your needs.
Thank you for choosing MWERI EXPEDITIONS. We value your trust and confidence, and
we are committed to protecting your personal data and upholding the highest standards of
privacy and data protection.