Legal

Privacy Policy

Last updated: January 2025 · Purposeful Safaris Ltd · England & Wales

01

Who we are

Purposeful Safaris Ltd (“we”, “us”, “our”) is a regenerative luxury safari company registered in England and Wales. Our website is www.purposefulsafaris.com.

We are the data controller for the personal information we collect about you. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and what rights you have in relation to it.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. If you have any questions about how we handle your data, contact us at hello@purposefulsafaris.com.

02

Information we collect

Information you give us directly

  • Enquiry information: When you submit a planning enquiry, we collect your name, email address, phone number, travel dates, group composition, countries of interest and any other details you share in the free-text fields.
  • Booking information: When you proceed to book a journey, we collect additional details required to complete the booking — including passport details, dietary requirements, medical information relevant to safari activities, travel insurance details and emergency contact information.
  • Payment information: When you make a payment, we collect billing name, address and payment card details. Card payments are processed by a PCI-DSS compliant payment processor; we do not store full card numbers.
  • Newsletter subscription: If you subscribe to our Field Notes newsletter, we collect your email address.
  • Correspondence: When you contact us by email or through our contact form, we keep a record of that correspondence.

Information we collect automatically

  • Usage data: We collect information about how you use our website, including pages visited, time spent on each page, referring URL and browser type. This is collected via Cloudflare Web Analytics, which is privacy-preserving and does not use cookies or track individual users across websites.
  • Device information: We may collect your IP address, browser type and operating system for security and fraud prevention purposes.
03

How we use your information

  • Planning and booking: To respond to your enquiry, communicate during the planning process, and manage your safari booking end to end.
  • Journey logistics: To coordinate with our guides, lodge partners and in-country operators in Kenya, Tanzania, Rwanda and Uganda on your behalf.
  • The Purpose Day: To communicate your participation preferences to our partner schools and community enterprises ahead of your visit. We share only what is necessary for the visit to be prepared — typically, number of participants, approximate ages and any professional background relevant to the session agreed.
  • Post-trip impact reporting: To prepare and send your post-trip impact report within 30 days of your return.
  • Financial administration: To process payments, issue invoices and manage cancellation or refund requests.
  • Newsletter: To send you our Field Notes newsletter if you have subscribed. You can unsubscribe at any time.
  • Service improvement: To understand how our website is used and improve it. We use only privacy-preserving analytics for this purpose.
  • Legal and safety: To comply with our legal obligations, prevent fraud and protect the safety of guests and staff.
04

Lawful basis for processing

Under UK GDPR, we rely on the following lawful bases for processing your personal data:

PurposeLawful basis
Responding to planning enquiriesLegitimate interests — responding to a request you initiated
Managing a confirmed safari bookingPerformance of a contract
Processing paymentsPerformance of a contract
Communicating with in-country partners on your behalfPerformance of a contract
Sending the Field Notes newsletterConsent — given at point of subscription
Analytics and website improvementLegitimate interests — improving our service
Legal compliance and fraud preventionLegal obligation / legitimate interests

Where we rely on legitimate interests, we have assessed that our interests are not overridden by your privacy rights. Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

05

Who we share your information with

We do not sell your personal data. We share it only as described below.

In-country partners

To operate your safari, we share relevant booking details with our guides, lodge partners and in-country operators in Kenya, Tanzania, Rwanda and Uganda. We share only what is necessary for your journey and require our partners to handle your data securely.

Service providers

We use a small number of trusted third-party service providers who process data on our behalf under data processing agreements:

  • Mailgun or Postmark — for sending booking confirmation and correspondence emails
  • Cloudflare — for website hosting, security and privacy-preserving analytics
  • Payment processor — for secure card payment processing (PCI-DSS compliant)

Legal requirements

We may disclose your personal data where required to do so by law, by a court order, or in response to a legitimate request from a regulatory authority.

Business transfers

In the event of a sale, merger or transfer of our business, your personal data may be transferred to the new owner. We will notify you if this occurs and your data becomes subject to a different privacy policy.

06

How long we keep your data

Data typeRetention periodReason
Enquiry records (not converted to booking)2 years from last contactLegitimate interest in following up on planning conversations
Booking and journey records7 years from trip completionLegal obligation (financial and tax records)
Passport and sensitive travel data12 months after tripOperational necessity; deleted once trip is complete and impact report sent
Newsletter subscriber dataUntil you unsubscribeConsent-based; deleted on unsubscribe request
Payment records7 yearsLegal obligation (HMRC requirements)
07

Your rights

Under UK GDPR, you have the following rights in relation to your personal data:

  • Access: You may request a copy of the personal data we hold about you.
  • Correction: You may ask us to correct inaccurate or incomplete data.
  • Erasure: You may ask us to delete your personal data where there is no longer a lawful basis for us to hold it. Note that we may need to retain certain data to comply with legal obligations.
  • Restriction: You may ask us to restrict processing of your data in certain circumstances.
  • Portability: Where processing is based on consent or contract and carried out by automated means, you may request your data in a structured, machine-readable format.
  • Objection: You may object to processing based on legitimate interests. We will stop processing unless we have compelling legitimate grounds that override your interests.
  • Withdraw consent: Where processing is based on consent (e.g. newsletter), you may withdraw consent at any time.

To exercise any of these rights, write to us at hello@purposefulsafaris.com. We will respond within one calendar month. We do not charge for exercising your rights.

If you are not satisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk.

08

International transfers

Your personal data may be transferred to and processed in countries outside the UK, specifically in Kenya, Tanzania, Rwanda and Uganda, by the in-country operators and guides who deliver your safari.

These countries do not have a UK adequacy decision. We rely on the following safeguards for these transfers:

  • Standard contractual clauses in our agreements with in-country partners where required
  • Sharing only the minimum information necessary for the delivery of your journey
  • Contractual obligations on our partners to handle data securely and not use it for any purpose other than operating your trip

For questions about these transfers, contact us at hello@purposefulsafaris.com.

09

Cookies

We use a small number of cookies. Our primary analytics tool is Cloudflare Web Analytics, which is cookieless and does not track individual users across websites or sessions. We do not use advertising cookies or sell data to advertisers.

TypeDescriptionProvider
EssentialRequired for the website to function — including the enquiry form CSRF protection token and session management.Purposeful Safaris
FunctionalityRemember your preferences if you return to the site (e.g. newsletter subscription state).Purposeful Safaris
AnalyticsPrivacy-preserving, cookieless analytics to understand site usage. No individual user tracking.Cloudflare Web Analytics

We do not use Google Analytics or any other analytics provider that tracks individual users or sets persistent tracking cookies.

10

Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. These include:

  • HTTPS encryption on all pages of our website
  • HSTS (HTTP Strict Transport Security) enabled
  • Secure password policies and access controls for staff
  • PCI-DSS compliant payment processing (we do not store card numbers)
  • Regular review of data handling practices

No method of electronic transmission or storage is completely secure. While we work hard to protect your data, we cannot guarantee its absolute security. In the event of a data breach that is likely to result in risk to your rights and freedoms, we will notify you and the ICO as required by UK GDPR.

11

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the “last updated” date at the top of this page. If we make material changes that affect how we use your personal data, we will notify you by email if we hold your email address, or by a prominent notice on our website.

We encourage you to review this policy periodically.

12

Contact us

For any questions about this Privacy Policy, to exercise your data rights, or to raise a concern about how we have handled your data:

Email: hello@purposefulsafaris.com
Subject line: Privacy enquiry
Response time: We aim to respond within five working days and will always respond within one calendar month as required by UK GDPR.

If you are not satisfied with our response, you have the right to complain to the ICO at ico.org.uk or by phone on 0303 123 1113.

© 2025 Purposeful Safaris. All rights reserved. Designed for discerning travellers who care about East Africa.