Legal
Privacy policy
What data we collect when you book, why, who it is shared with, how long it is kept, and what analytics and payment processing mean in practice.
Updated
TODO(legal review before launch): the processors and retention periods below describe the system as built. They must be verified against the deployed configuration and reviewed for UAE data protection compliance before launch.
What we collect
When you book: your name, email address, phone number, pickup address, the language you booked in, any notes you add (including dietary requirements), and your booking details. Dietary and accessibility notes may include health-related information, which we hold only to deliver the safari safely.
When you pay: the payment is processed by Stripe. Card details are entered on Stripe’s systems and never reach ours — we receive a payment reference and the amount.
When you browse: aggregate analytics about pages viewed and bookings completed. Analytics run through Cloudflare Zaraz rather than scripts loaded in the page.
In your browser: your chosen display currency and your chosen language, in
localStorage. These stay on your device and are never sent to us. We do not
use them to identify you, and we never redirect you based on your location.
Why we collect it
To operate your safari: to contact you about the pickup, to brief your guide, to get your dietary requirements to the kitchen, and to process payment and any refund. We also use aggregate analytics to understand which pages lead to bookings.
Who it is shared with
| Who | What | Why |
|---|---|---|
| Stripe | payment details | to take payment and issue refunds |
| Your driver-guide | name, phone, pickup address, notes | to collect you and deliver the trip |
| The camp | guest count and dietary requirements | to prepare your table |
| Email and WhatsApp providers | name, contact details, booking details | to send your confirmation in your language |
| Hosting and analytics | aggregate usage data | to run and measure the site |
We do not sell your data and we do not share it for advertising to you individually.
How long we keep it
TODO(confirm retention periods against the API's actual data lifecycle): booking records are kept while a legal or accounting obligation applies. State the real periods here.
Your choices
- Ask us what we hold about you, and we will tell you
- Ask us to correct it
- Ask us to delete it, where no legal or accounting obligation requires us to keep it
- Opt out of marketing messages at any time without affecting your booking
Use the details on the contact page.
Cookies and tracking
We do not run third-party advertising scripts in the page. Analytics are loaded through Cloudflare Zaraz, which keeps tag loading out of the document head. Your currency and language preferences are stored locally in your browser and are not cookies sent to a server.
Children
We do not knowingly collect data directly from children. Where a booking includes children, we hold only what the booking adult provides — ages, for fitting the right child seats, and any dietary requirements.
Changes
The date at the top of this page is when it last changed.