Privacy Policy
Effective Date: January 1, 2025
Privacy Commitment: We are committed to protecting your personal data in compliance with Kenya Data Protection Act 2019 and GDPR.
1. Introduction
Kitumo Mara Lodge ("we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, share, and protect information in compliance with the Kenya Data Protection Act 2019 and the General Data Protection Regulation (GDPR) for our EU guests.
2. Data Controller Information
Data Controller:
Kitumo Mara Lodge
Location:
Nashulai Conservancy, Maasai Mara, Kenya
Data Protection Contact:
info@kitumomaralodges.com
ODPC Registration:
[To be obtained]
3. Information We Collect
3.1 Guest Information
- •Identity: Name, title, date of birth, gender
- •Contact: Address, email, phone
- •Documents: Passport, ID numbers
- •Financial: Payment cards, billing info
- •Booking: Reservations, preferences
- •Health: Dietary needs, allergies*
*With explicit consent
3.2 Activity Data
- • Medical fitness declarations
- • Emergency contact information
- • Insurance details
- • Activity preferences and restrictions
3.3 Technical Data
- • IP address, browser type, device information
- • Website usage data through cookies
- • WiFi usage logs (as required by law)
4. Legal Basis for Processing
Contract Performance
Essential for providing accommodation and services
Legal Obligations
Tax reporting, anti-money laundering, public health
Legitimate Interests
Fraud prevention, business operations, marketing
Consent
Marketing communications, health data, photos
5. How We Use Your Information
6. Information Sharing
We may share your data with:
- •Payment processors (PCI DSS compliant)
- •Activity operators (for bookings)
- •Government authorities (as required by law)
- •Professional advisors (legal, accounting)
7. Data Security
We implement appropriate technical and organizational measures:
Encryption of sensitive data
Access controls
Regular security assessments
8. Data Retention
| Data Type | Retention Period |
|---|---|
| Reservation data | 7 years (tax compliance) |
| Marketing data | Until consent withdrawn |
| CCTV footage | 30 days |
| Guest feedback | 3 years |
9. Your Rights
Under data protection laws, you have the right to:
- ✅ Access your personal data
- ✏️ Correct inaccurate data
- 🗑️ Request deletion of your data
- ⏸️ Restrict processing
- 📤 Data portability
- 🚫 Object to processing
- 🤖 Avoid automated decisions
- ↩️ Withdraw consent
Response Time: Within 30 days (extendable to 90 days for complex requests)
10. Children's Privacy
We do not knowingly collect data from children under 13 without parental consent.
Enhanced protections apply for all minors. Parents may exercise rights on behalf of their children.
11. Cookies
We use cookies for:
Essential Functions
Site operation and security
Analytics
Understanding usage patterns
Functionality
Remembering preferences
Marketing
Personalized ads (with consent)
Contact Us
For Privacy Questions:
📧 info@kitumomaralodges.com
📞 +254 711 531 868
📍 Nashulai Conservancy, Maasai Mara, Kenya
Data Protection Authority:
Office of the Data Protection Commissioner
🌐 www.odpc.go.ke
📧 info@odpc.go.ke
Document Version: 1.0
Last Updated: January 1, 2025