Privacy Policy

Inland Africa respects your privacy and is committed to handling personal data lawfully, fairly, transparently and securely.

This Privacy Policy explains how we collect, use, store, share and protect personal data when you:

• visit inlandafricasafaris.com;
• submit an enquiry or contact form;
• use our Trip Planner;
• communicate with us by email, telephone, WhatsApp or another approved channel;
• ask Rafiki, our digital travel assistant, a question;
• request, book or participate in a journey;
• subscribe to marketing communications;
• provide feedback or a testimonial; or
• otherwise interact with Inland Africa Safaris.

This policy is informed principally by Rwanda's Law Nº 058/2021 of 13 October 2021 relating to the protection of personal data and privacy.

For purposes of this Privacy Policy, the data controller is:

Legal entity

Inland Africa Ltd

Trading name

Inland Africa Safaris

Registration/reference number

107692684

Address

KG 13 Avenue, No. 15, Nyarutarama, Kigali, Rwanda

Email

services@inlandafrica.com

Telephone and WhatsApp

+250 792 401 200

Data-protection contact

Ivan Mbaraga

Inland Africa determines why and how personal data covered by this policy is processed.

Depending on your interaction with us, we may collect the following categories of personal data.

Identity and contact information

• full name;
• email address;
• telephone or WhatsApp number;
• country of residence;
• preferred method of communication; and
• names of other travelers where necessary and appropriately provided.

Travel-planning information

• intended travel dates;
• number and ages of travelers;
• destination and experience interests;
• accommodation preferences;
• estimated or indicated travel budget;
• preferred travel style;
• accessibility or mobility requirements;
• arrival and departure details; and
• other information supplied in an enquiry or Trip Planner submission.

Booking and operational information

Where required to arrange confirmed services, we may collect booking references; itinerary, accommodation and transport details; permit information; emergency contacts; payment and transaction confirmations; and information needed to coordinate services with authorized suppliers.

We request passport or identity-document information only where reasonably necessary for permits, reservations, immigration-related arrangements or another confirmed travel service.

Sensitive personal data

Travel arrangements may require information concerning health, mobility, allergies, dietary requirements or other special needs. We collect and use this information only when necessary, with appropriate safeguards and, where required, explicit consent. Please do not provide sensitive information through Rafiki or an ordinary website enquiry unless we specifically request it through an appropriate channel.

Communications

We may retain email correspondence, contact-form submissions, WhatsApp or telephone follow-up records, service enquiries, feedback, complaints and records of communication preferences. Private communications are not published as website content. We may analyze recurring questions in aggregated or anonymized form to improve our traveler guidance and services.

Website and technical information

Subject to our cookie settings and technologies enabled on the website, we may collect an IP address, browser and device information, operating system, pages visited, referring website, approximate location derived from technical information, access dates and times, interaction and performance information, and necessary security and diagnostic records.

Rafiki interactions

When you use Rafiki, we may process your questions or instructions, travel preferences you voluntarily provide, technical and security information, generated responses, and information required to transfer an enquiry to one of our travel specialists.

Do not submit passport details, payment information, medical records, passwords or other highly sensitive information to Rafiki. Rafiki provides general travel-planning guidance and is not used to make decisions producing legal or similarly significant effects without appropriate human involvement. Live prices, permits, availability, entry requirements and operational conditions must be confirmed by our travel specialists.

We may collect personal data:

• directly from you;
• from a person making a legitimate group or family enquiry on your behalf;
• through our website, forms and Trip Planner;
• through email, telephone, WhatsApp and other authorized communication channels;
• during quotation, booking and journey delivery;
• from authorized travel agents or business partners;
• from accommodation providers, transport providers, park authorities and other suppliers involved in delivering your journey;
• from payment-service providers;
• from publicly available sources where lawful and relevant; and
• through cookies and similar website technologies.

A person providing information about another traveler should ensure that they are authorized to do so and that the traveler understands how their information will be used.

We may process personal data to respond to enquiries; provide planning guidance; design and price proposed itineraries; check availability; arrange accommodation, transport, permits and experiences; administer bookings and payments; communicate operational information; support travelers; manage emergencies; comply with legal, regulatory, accounting and tax obligations; prevent fraud and security incidents; handle complaints; improve our services, website, Trip Planner and Rafiki; maintain records; send permitted marketing communications; and establish, exercise or defend legal claims.

We will not use personal data for a new, incompatible purpose without an appropriate legal basis and any notice or consent required by law.

Depending on the circumstances and applicable law, we may process personal data because:

• you have provided informed consent;
• processing is necessary to respond to your request or enter into or perform a contract with you;
• processing is necessary to comply with a legal obligation;
• processing is necessary to protect your or another person's vital interests;
• processing is necessary for a permitted public-interest purpose; or
• another lawful ground applies under Rwanda's data-protection law.

Where processing is based on consent, you may withdraw that consent. Withdrawal does not invalidate processing that was lawful before consent was withdrawn.

Providing certain information is optional. If information is necessary to prepare or deliver a requested service, we may be unable to complete that service without it.

We may send travel news, destination information, offers or other marketing communications only in accordance with applicable law. Where consent is required, we request it separately.

You may unsubscribe using a facility in the communication or by contacting services@inlandafrica.com. Withdrawing marketing consent does not prevent necessary communications concerning an active enquiry, quotation, booking or journey.

We do not sell personal data to third parties for their independent marketing.

Our website may use cookies or similar technologies for essential operation, security, remembering choices, performance, analytics and embedded content such as video. Non-essential cookies should be activated only in accordance with applicable consent requirements.

Information about the cookies and related technologies in use, their providers, purposes and duration will be made available through an applicable cookie notice.

We may share relevant personal data only when reasonably necessary with:

• authorized members of the Inland Africa Safaris team;
• accommodation providers, guides and transport providers;
• national-park, permit or conservation authorities;
• airlines or other travel-service providers where applicable;
• payment, banking or accounting service providers;
• website hosting, cloud, email, communications, analytics and technology providers;
• professional advisers, auditors and insurers;
• government, regulatory, judicial or law-enforcement authorities where legally required; and
• another organization involved in a legitimate business restructuring, subject to appropriate protections.

Each recipient should receive only the information reasonably required for its role. Suppliers acting on our behalf must be subject to appropriate confidentiality, security and data-processing obligations. Some travel suppliers may act as independent data controllers and provide their own privacy notices.

Some travel suppliers or technology service providers may store or process personal data outside Rwanda.

Where personal data is stored, shared or transferred outside Rwanda, Inland Africa will take the steps required by applicable Rwandan law. These may include obtaining authorization from the supervisory authority, documenting the destination country and purpose, applying appropriate contractual safeguards, and ensuring that the transfer has another lawful basis.

We use reasonable organizational and technical safeguards designed to protect personal data against unauthorized or unlawful access, accidental loss, misuse, alteration, unauthorized disclosure and destruction. Measures may include access controls, confidentiality requirements, controlled permissions, secure systems, staff awareness, backups and incident-management procedures.

No internet or electronic-storage system is completely secure. We cannot guarantee absolute security, but we will respond to suspected personal-data incidents in accordance with applicable legal requirements.

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected and to satisfy applicable legal, regulatory, accounting, tax, insurance, dispute-resolution and operational requirements.

Retention periods may differ for unsuccessful or inactive enquiries, active quotations, confirmed bookings, travel and permit records, payment and accounting records, complaints and legal matters, marketing-consent records, website security logs and Rafiki interactions.

When information is no longer required, we will securely delete, anonymize or restrict it as appropriate.

Family-travel enquiries may involve information about children. A parent, guardian or appropriately authorized adult should provide such information. We collect only what is reasonably necessary to plan and deliver the family's journey, assess applicable age restrictions or protect the child's welfare.

Rafiki and the website are not intended to knowingly collect sensitive information directly from children without appropriate adult involvement.

Subject to applicable law and lawful limitations, you may have the right to:

• be informed about processing of your personal data;
• request access to your personal data;
• request correction of inaccurate or incomplete information;
• request erasure where legally applicable;
• request restriction of processing;
• object to certain processing;
• withdraw consent;
• request portability where applicable;
• object to a decision based solely on automated processing where it produces legal or similarly significant consequences; and
• lodge a complaint with the competent supervisory authority.

To exercise a right, contact us using the details below. We may need to verify your identity before acting on a request and will respond within the period required by applicable law.

Please contact Inland Africa Safaris first if you have a concern about how we use personal data:

You may also contact Rwanda's Data Protection and Privacy Office:

Our website may link to third-party websites, social-media platforms, payment services or supplier resources. Inland Africa Safaris does not control the privacy practices of independent third parties. You should review the applicable third party's privacy notice before submitting personal data.

We will publish customer testimonials, names, photographs or journey stories only where we have an appropriate lawful basis and any permission required for the intended publication. Consent to publish a testimonial or photograph may be managed separately from consent required to deliver travel services.

We may update this Privacy Policy when our services, technologies, suppliers, legal obligations or data-processing practices change. The current version will be published on this page with its effective date and last-updated date. Material changes may also be communicated through another appropriate channel.