Privacy policy.
This privacy policy forms part of our web usage Terms & Conditions. If you do not agree with any term of this privacy policy, you must stop use of Enkusero Mara’s website immediately. You can also contact us if you would like further insight into how we collect, use and secure the data acquired through our websites.
This Privacy Policy (“policy”) sets out the basis on which Enkusero Mara collects, uses and shares the data that we receive from users of our websites and online applications. We take the privacy of our users seriously, and we recommend that you read this policy carefully. By using Enkusero Mara’s website at www.enkuseromara.com, associated websites, landing pages and applications (“websites”), you agree to be bound by this policy.
Our travellers are from across the world and in recognition of this, we endeavour to process all data in accordance with principles of internationally accepted best practice, and compliance regulations. We regularly review our compliance with this policy and whenever we receive a formal complaint, we will contact the person who made the complaint to attempt to resolve his or her concerns.
Please note that by using our websites (as a user browsing the websites), you are consenting to our collection and use of your information as more fully set out in this policy. If you have any concerns about the use of your information, or the contents of this policy, please feel free to contact us.
DATA COLLECTED
We distinguish in this policy between ‘personal data’ (data that is required to facilitate international travel), and ‘non-personal data’ (data regarding usage of the websites, and de-identified information extracted from the websites for analysis). We collect both personal and non-personal data through our websites and through third parties, either automatically, or by your providing this information to us during enquiring, signing up for our newsletter, or during the reservation phase to help us improve the info we will be providing you with.
User Notifications
1. Failure to provide requested information may impair our ability to provide professional advice when curating and sharing proposed travel itineraries.
2. You will need to ensure that your personal information submitted to us is accurate and up-to-date.
3. You are responsible for any third party information obtained, published or shared through the websites, and you consent to only use or share this third party data with the third party’s consent.
Personal Data
1. We collect and store the personal information that you may provide to us through our websites when you enquire with us, update or change your information with us, or make use of our services.
2. We also collect and store information in relation to your travel itinerary, travel preferences and particulars of those traveling with you, for example through communications, surveys and other data submitted by you.
3. Anyone involved with the processing, transmission, or storage of card data must comply with the Payment Card Industry Data Security Standards (PCI DSS). Enkusero Mara does not collect or store any credit card or account details.
Non-personal Data
1. In addition to personal data, we also store non-personal data, which cannot be used to identify our users. The kinds of non-personal data that we collect includes de-identified data about usage of our websites.
2. We also make use of cookies or similar tracking tools to identify website users and remember their preferences, for the purpose of providing a better user experience and service, and marketing/advertising our services online.
COOKIES
A cookie is a small piece of code that is installed in your web browser by a website that you visit. They help the website to remember information about your visit, and assist to make the website, and advertisements that you encounter while browsing, more relevant to you. We’ve provided some further detail on cookies below to try and clarify how and why we use them.
Technical cookies and cookies serving aggregated statistical purposes:
1. Activity necessary for the functioning of the service: Our websites use cookies to save your session and to carry out other activities for the websites’ operations.
2. Activity regarding the savings of preferences, optimisation and statistics: Our websites use cookies to save browsing preferences and to optimise your browsing experience.
How can I manage the installation of cookies?
1. You can manage preferences for cookies directly from within your own browser and prevent websites from installing them. Through your browser preferences, it is also possible to delete cookies installed in the past. It is important to note that by disabling all cookies, the functioning of the websites may be compromised. You can find information about how to manage cookies in your browser using the following links: Mozilla Firefox, Apple Safari, Google Chrome and Microsoft Internet Explorer.
2. In the case of third party cookies, you can exercise your right to withdraw from their tracking activity by utilising the information provided in that third party’s privacy policy on their website, by clicking the opt-out link (if provided) or by contacting that third party.
Notice to European Users: this privacy statement has been prepared in fulfilment of the obligations under the European general data protection Regulation 2016/679 (“GDPR”), on the subject of cookies.
USE OF NON-PERSONAL DATA
We use your non-personal data for purposes like product improvement, internal reporting, analytics, performing statistical analyses of collective behaviour of our users, measuring demographics and interests, and for other legitimate business purposes. We will take all reasonable steps to properly de-identify all information that is stored and analysed as non-personal data. This non-personal data may also be shared with the current and future partners and service providers (since there is no prejudice to our users from the disclosure of this non-personal information).
USE OF PERSONAL DATA
Except as set out in this policy or specifically agreed by you, we won’t disclose your personal data that we receive through the websites. In general we will always aim to de-identify the information that we store (as non-personal information), but some information will need to still be attached to your name or email address (as personal information), for reasons listed below, and with the aim of supporting personalised and customised experiences and journeys. We work hard to ensure that access to a traveller’s information doesn’t disadvantage or prejudice our travellers.
The ways in which (and the purposes for which) we use personal data are described in further detail below:
1. Verifying identity.
2. Contacting you for the purpose of:
o marketing,
o advising you on travel information and options,
o assisting you to complete your bookings and reservations with us, with the aim of keeping travellers informed and providing on-the-go support and information.
o other legitimate business purposes, and all communications with you for these purposes will be kept on record.
3. For analytics purposes (and product improvement more generally), including:
o analysing client characteristics, demographics, activities and behaviours on our websites and applications allowing us to continually improve the design of our website and relevant applications for the benefit of you and other travellers,
o providing analytical information to all relevant personnel who are involved in assisting and supporting travellers, to enable them to optimise the traveller’s experience, or
o other legitimate business purposes.
o reporting internally on traveller choices and related matters.
o for behavioural marketing and remarketing to website users and travellers, and marketing to potential travellers with similar interests.
o recording, tracking and analysing activities on the websites.
o researching, developing and improving, as well as training.
o For disclosure:
§ to personnel within Enkusero Mara and our third party contractors for business purposes, including but not limited to internally used software and systems providers, and courier companies for shipping of documentation and gifts;
§ to government authorities in response to court orders, subpoena/summons or other legal processes, to establish or exercise a legal right, defend a claim, or as otherwise required by law;
§ to investigate, prevent or take action in relation to any suspected illegal activities, or to protect our own rights and the rights of our service providers;
§ to acquirers, assignees or other successor entities in connection with a sale, merger or reorganisation of all or substantially all of our equity, business or assets.
4. For any other purpose:
o for which we receive your consent,
o that is in the public interest, or
o within the bounds of the laws of Kenya
You agree that we may also share any of your personal data with the service provider that you and Enkusero Mara choose to use, and these service providers may use your personal data in accordance with their own privacy policies.
We may also disclose all your personal data between our associated Enkusero Mara companies, who shall have all the same rights as us in relation to such personal data, and shall comply with this policy in the processing of such information.
EXTERNAL PARTIES
We use several external service providers to assist us to process personal data for the above purposes, and they may hold this personal data on their own servers for these purposes. We have provided some further information on some of these external parties below, but we may use other service providers as well – if you would like access to a full list of our service providers please contact us. We are not responsible for, nor do we endorse the privacy practices of these external third parties.
Analytics
The following service providers enable us to monitor and analyse web traffic and can be used to keep track of user behaviour:
Google Analytics (Google Inc.)
Like most websites, we use Google Analytics. Google Analytics is a web analysis service provided by Google Inc. (“Google”). Google utilizes the data collected to track and examine the use of our Websites, to prepare reports on activities and share them with other Google services. Google may use the personal data collected to contextualize and personalize the ads of its own advertising network.
· Personal data collected: Cookie and Usage data.
· Place of processing: USA – Privacy Policy – Opt Out
Facebook & Instagram Ads conversion tracking (Facebook, Inc.)
Facebook Ads conversion tracking is an analytics service provided by Facebook, Inc. that connects data from the Facebook advertising network with actions performed on our Websites.
· Personal Data collected: Cookie and Usage data.
· Place of processing: USA – Privacy Policy – Opt Out
Google AdWords conversion tracking (Google Inc.)
Google AdWords conversion tracking is an analytics service provided by Google Inc. that connects data from the Google AdWords advertising network with actions performed on our Websites.
· Personal Data collected: Cookie and Usage data.
· Place of processing: USA – Privacy Policy – Opt Out
Google Tag Manager (Google Inc.)
Google Tag Manager is an analytics service provided by Google Inc.
· Personal Data collected: Cookie and Usage data.
· Place of processing: USA – Privacy Policy
Remarketing & Behavioural Targeting:
The following service providers allow us to inform, optimise and serve advertising based on past use of the websites. This activity is performed by tracking usage data and by using cookies. The information will be shared with data processors that manage the remarketing and behavioural targeting activity:
Facebook & Instagram Remarketing (Facebook, Inc.)
Facebook Remarketing is a Remarketing and Behavioural Targeting service provided by Facebook, Inc. that connects the activity of our websites with the Facebook advertising network.
· Personal Data collected: Cookie and Usage data.
· Place of processing: USA – Privacy Policy – Opt Out
AdWords Remarketing (Google Inc.)
AdWords Remarketing is a Remarketing and Behavioural Targeting service provided by Google Inc. that connects the activity of our Websites with the Adwords advertising network and the Doubleclick Cookie.
· Personal Data collected: Cookie and Usage data.
· Place of processing: USA – Privacy Policy – Opt Out
INFORMATION SECURITY
Methods of processing
We undertake to process your personal data in a reasonable manner and take appropriate, reasonable security measures to prevent unauthorised access, disclosure, modification, or unauthorised destruction of your personal data. All data processing shall be carried out by employees, consultants or third party service providers using computers and/or IT enabled tools, following standard organizational procedures and modes.
In some cases, personal and non-personal data may be accessible to certain types of persons involved with the operation of the websites (administration, sales, marketing, finance, legal, system administration) or external parties (such as third party technical service providers, mail carriers, hosting providers, IT companies, communications agencies to name a few) appointed, if System Logs and Maintenance
For operation and maintenance purposes, our websites and any third party services may collect files that record interaction with the websites (System Logs) or use for this purpose other personal data (such as IP Address).
THE RIGHTS OF USERS
You have a right to know what personal data is being stored, and processed, as well as the categories of recipients with whom it may be shared. You may contact us to learn about the contents and origin of this personal data, to verify its accuracy or to ask for this data to be supplemented, cancelled, updated or corrected, or for their transformation into an anonymous format or to block any data held in violation of the law, as well as to oppose their treatment for any and all legitimate reasons.
Our websites do not currently support “Do Not Track” (“DNT”) requests. DNT is a feature offered by some browsers which, when enabled, sends a signal to websites to request that your browsing is not tracked, such as by third party ad networks, social networks and analytic companies. To determine whether any of the third party services linked on our Website honour DNT requests, please read their privacy policies.