Privacy Policy

Crane Adventure Safaris ("the Company," "we," "us," or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, store, and safeguard your personal data when you visit our website, make a booking, or otherwise interact with us. This policy is drafted in accordance with the Data Protection and Privacy Act of the Republic of Uganda and reflects internationally recognized principles of data protection.

1. Data Controller

For the purposes of applicable data protection legislation, the data controller responsible for your personal data is:

Crane Adventure Safaris
Plot 24, Kampala Road, Kampala, Uganda
Email: [email protected]
Phone: +256 754 560346

2. Information We Collect

We collect and process various categories of personal data depending on the nature of your interaction with us. The following table summarizes the types of data we may collect:

3. How We Collect Your Data

3.1 Direct Collection

We collect personal data directly from you when you:

• Complete a booking form on our website or via email
• Subscribe to our newsletter or marketing communications
• Contact us via phone, email, WhatsApp, or social media
• Submit an inquiry through our contact form
• Provide feedback or complete a survey

3.2 Automated Collection

When you visit our website, we automatically collect certain technical data through cookies, server logs, and similar technologies. This includes your IP address, browser type, operating system, referring URLs, pages viewed, and the date and time of your visit.

3.3 Third-Party Sources

We may receive personal data about you from third parties, including:

• Travel agents and booking platforms through which you make reservations
• Payment processors who confirm transaction details
• Social media platforms when you interact with our pages

4. Legal Basis for Processing

We process your personal data only where we have a lawful basis to do so under applicable data protection laws. The legal bases upon which we rely include:

• Contractual Necessity: Processing necessary for the performance of a contract with you, including processing bookings and delivering services.
• Legal Obligation: Processing required to comply with legal and regulatory obligations, including immigration requirements and tax laws.
• Legitimate Interests: Processing necessary for our legitimate business interests, including improving our services, preventing fraud, and marketing, provided such interests are not overridden by your rights.
• Consent: Processing based on your explicit consent, such as subscribing to newsletters or receiving marketing communications.

5. How We Use Your Data

Your personal data is used for the following purposes:

• Processing and confirming safari and tour bookings
• Acquiring gorilla trekking permits, chimpanzee tracking permits, and park entry fees from the Uganda Wildlife Authority
• Arranging accommodation, transportation, and other travel logistics
• Communicating with you regarding your booking, itinerary changes, and travel updates
• Responding to inquiries and providing customer support
• Sending newsletters, promotional offers, and travel inspiration (with your consent)
• Improving our website, services, and customer experience through analytics
• Complying with legal obligations and enforcing our Terms and Conditions
• Processing payments and preventing fraudulent transactions

6. Data Sharing and Disclosure

We do not sell, trade, or rent your personal data to third parties for marketing purposes. We may share your data with the following categories of recipients:

• Service Providers: Hotels, lodges, airlines, ground transportation providers, and local guides necessary for delivering your booked services.
• Government Authorities: Uganda Wildlife Authority for permit processing, immigration authorities for compliance with entry requirements.
• Payment Processors: Banks, mobile money operators, and payment gateways that process your transactions.
• Professional Advisors: Legal counsel, auditors, and insurance providers as reasonably required.
• Regulatory Bodies: Where disclosure is mandated by law, court order, or governmental regulation.

All third-party recipients are contractually obligated to process your data only in accordance with our instructions and applicable data protection laws.

7. International Data Transfers

Your personal data may be transferred to and processed in countries outside Uganda, including where our service providers or partners are located. Where such transfers occur, we ensure appropriate safeguards are in place to protect your data in accordance with applicable law, including contractual clauses and security assessments.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for satisfying any legal, accounting, or reporting requirements. The criteria used to determine retention periods include:

• The duration of our contractual relationship with you
• Legal obligations requiring data retention (e.g., tax records retained for seven years)
• Statutory limitation periods for potential legal claims
• Industry standards and best practices

Upon expiry of the applicable retention period, your personal data shall be securely deleted, destroyed, or anonymized.

9. Data Security

We implement appropriate technical and organizational measures designed to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These measures include:

• Encryption of data in transit using SSL/TLS protocols
• Secure server infrastructure with firewall protection
• Access controls limiting data access to authorized personnel only
• Regular security assessments and staff training on data protection
• Secure payment processing through PCI-compliant gateways

While we strive to protect your personal data, no transmission over the internet or electronic storage method is completely secure. We cannot guarantee absolute security but commit to notifying you and the relevant authorities of any data breach in accordance with applicable law.

10. Your Data Protection Rights

Under the Data Protection and Privacy Act of Uganda and applicable data protection frameworks, you have the following rights regarding your personal data:

• Right of Access: You have the right to request copies of your personal data held by us.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete data.
• Right to Erasure: You have the right to request deletion of your personal data under certain circumstances.
• Right to Restrict Processing: You have the right to request limitation of processing under certain conditions.
• Right to Data Portability: You have the right to receive your data in a structured, commonly used format.
• Right to Object: You have the right to object to processing based on legitimate interests or for direct marketing.
• Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw consent at any time.

To exercise any of these rights, please contact us using the details provided in this policy. We will respond within thirty (30) days. We may require proof of identity before processing your request.

11. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience. Cookies are small text files placed on your device that help us understand how you interact with our website.

11.1 Types of Cookies We Use

• Essential Cookies: Necessary for website functionality and cannot be disabled.
• Analytics Cookies: Help us understand visitor behavior and improve our website.
• Functional Cookies: Remember your preferences and enhance your experience.
• Marketing Cookies: Used to deliver relevant advertisements (with your consent).

You may configure your browser to refuse cookies or alert you when cookies are being sent. However, disabling cookies may affect website functionality.

12. Children's Privacy

Our services are not directed at individuals under the age of eighteen (18). We do not knowingly collect personal data from children without verifiable parental consent. If we become aware that a child has provided us with personal data without parental consent, we will take steps to delete such information promptly.

13. Third-Party Links

Our website may contain links to third-party websites, plugins, and applications. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites before providing your personal data.

14. Changes to This Policy

We reserve the right to amend this Privacy Policy at any time. Material changes will be communicated through our website or via email where appropriate. Your continued use of our services following any amendments constitutes acceptance of the updated policy.

15. Complaints

If you believe that we have violated your data protection rights, you have the right to lodge a complaint with the Personal Data Protection Office of Uganda or the relevant supervisory authority in your jurisdiction. We encourage you to contact us first to allow us the opportunity to address your concerns directly.

16. Contact Us

For any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact:

Data Protection Officer
Crane Adventure Safaris
Plot 24, Kampala Road, Kampala, Uganda
Email: [email protected]
Phone: +256 754 560346