Privacy Policy

Last updated: October 4, 2025
Contact: info@realshangololo.com

Real Shangololo (“we”, “us”, “our”) is committed to protecting your privacy and handling your personal information transparently and securely. This Privacy Policy explains what personal data we collect, why we collect it, how we use and share it, and the rights you have in relation to that data. It applies to personal data collected through realshangololo.com, by email, by phone and when you travel with us.

1. Scope & acceptance

By using our website, submitting a booking request, enquiring about a trip or travelling with Real Shangololo, you accept the collection and use of your personal information as described in this policy. If you do not agree with this policy, please do not provide personal data or use our services.

2. The personal data we collect

We collect only the personal data that is necessary to deliver our services, manage bookings and communicate with you. This may include:

Identity & contact data

Full name, title, date of birth, gender (where needed for permits)
Email address, postal address, telephone number, emergency contact details

Booking & travel data

Trip preferences, travel dates, party size, room preferences, dietary requirements
Passport details, nationality and visa information (when needed for permits and cross-border travel)
Flight details, pickup/drop-off locations and accommodation preferences

Payment & billing data

Payment card details or payment references when processed through our payment provider (we do not store full card data unless explicitly agreed and stored only by our PCI-compliant payment processor).
Billing address and invoicing details.

Health & special needs

Relevant medical information, mobility needs, allergies and special assistance requirements (only when provided and only to the extent needed to safely provide travel services).

Communications & marketing

Email preferences, marketing consent, and any communications you send to us (support requests, feedback, testimonials).

Technical & usage data

IP address, device and browser information, cookies and analytics data collected via the website to improve user experience and site performance.

Photos & media

Photographs or videos taken during trips may be collected or created by Real Shangololo for marketing purposes. We will not use identifiable images where you have explicitly opted out (see Section 12).

3. How we collect personal data

We gather data:

Directly from you when you make enquiries, request a quote, book, fill a contact form or communicate with us.
From third parties with your consent or where necessary to deliver your booking (hotels, activity providers, payment processors).
Automatically via website technologies (cookies, analytics).
From public sources or trusted partners where relevant (for example to confirm permit requirements), and only where permitted by law.

4. Purposes for which we use personal data

We use personal data to:

Manage and confirm bookings, payments, permits and supplier arrangements.
Provide, coordinate and tailor travel services (transfers, guides, special assistance).
Communicate trip information, updates, travel advice and emergency contact.
Process payments and handle invoicing and accounting.
Improve our website, services and user experience (analytics, product development).
Send marketing communications where you have consented — including newsletters, offers and trip recommendations (you can opt out at any time).
Comply with legal obligations (e.g., immigration/permit checks, tax records).
Handle complaints, disputes and legal requests.

We do not use personal data for purposes incompatible with those listed above without notifying you and obtaining consent if required.

5. Lawful bases for processing (where applicable)

Where required by law (such as for visitors from the EU), our lawful bases for processing include:

Contract performance: to perform or take steps to enter into a contract with you (booking, transport, guiding).
Legal compliance: to meet legal obligations (immigration checks, permit requirements, tax).
Legitimate interests: to operate and improve our business, prevent fraud, and protect safety — balanced against your rights.
Consent: for direct marketing communications and use of certain cookies or for publishing photos where permission is requested.

6. Sharing personal data (who we share with)

We share personal data only where necessary and with trusted parties, including:

Service providers & suppliers: accommodation, park authorities, activity operators, boat operators and local hosts where required to deliver your booking.
Payment processors & financial institutions: to process payments and refunds (e.g., PCI-compliant payment providers).
Regulators and authorities: immigration, customs, police or courts when required by law.
Professional advisors: legal or accounting advisers where needed.
Marketing & analytics providers used to operate our website and campaigns (see Cookies & Analytics below).

We require third parties to handle your data securely and only for the purposes we specify, and we use data-processing agreements where required.

7. International transfers

Your personal data may be transferred to and processed in countries other than your residence (for example where our suppliers or processors operate). When transferring data internationally we will take steps to ensure appropriate safeguards are in place (e.g., standard contractual clauses, data processing agreements, or transfers to jurisdictions with adequate protections), and we will comply with applicable legal requirements.

8. Cookies & analytics

We use cookies and similar tracking technologies to operate and improve the website. These may include:

Essential cookies: necessary for site functionality (booking forms, session management).
Performance cookies / analytics: to measure site usage and improve performance (e.g., Google Analytics or similar).
Functional / preference cookies: to remember preferences.
Marketing / advertising cookies: to deliver relevant promotions and measure campaign effectiveness (third-party networks).

You can control cookies via your browser settings and our cookie banner. Blocking cookies may affect site functionality (for example the booking experience). See our Cookie Policy for full details.

9. Data retention

We retain personal data only as long as necessary for the purpose it was collected and to meet legal, tax and safety obligations. Typical retention periods:

Booking and financial records: at least 7 years for tax and accounting purposes (or as required by local law).
Marketing data: until you unsubscribe or withdraw consent.
Inactive enquiry data: retained for a limited period (e.g., 12–24 months) unless you request deletion.
We securely delete or anonymise data when no longer required.

10. Your rights

Depending on your jurisdiction, you may have the following rights in relation to your personal data:

Access: request a copy of the personal data we hold about you.
Correction: ask us to correct inaccurate or incomplete data.
Deletion: request deletion of your data where we have no legal basis to retain it (right to be forgotten).
Restriction: ask us to restrict processing in certain circumstances.
Portability: request a machine-readable copy of data you provided.
Objection: object to processing based on legitimate interests or to direct marketing.
Withdraw consent: withdraw any consent you have given for marketing or specific processing.

To exercise your rights, contact us at info@realshangololo.com. We will respond in accordance with applicable law. We may request identification to verify your request.

11. Marketing communications & unsubscribing

We will send marketing emails only where you have opted in or where legitimate interest applies and permitted by law. Every marketing email includes an unsubscribe link. You can also email info@realshangololo.com to opt out of marketing at any time.

12. Photos, testimonials & marketing media

We may take photographs and short videos during trips for marketing use. We will ask for consent where practical. If you do not wish to be photographed or to have your image used, please notify your guide and inform info@realshangololo.com before travel. We will do our best to honour requests but cannot guarantee removal of images already used in marketing channels.

13. Security

We implement reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or alteration. Measures include access controls, encryption where appropriate, staff training and secure data storage. While we strive to protect your data, no transmission over the internet can be guaranteed completely secure; please take care with sensitive information.

14. Data breaches

In the unlikely event of a data breach affecting your personal information, we will assess the incident and, where required by law, notify affected individuals and relevant authorities without undue delay.

15. Children & minors

Our services are not intended for children under 16 travelling alone. If you are booking for someone under 18, you must obtain parental or guardian consent and provide any required permissions. We do not knowingly collect unnecessary personal data from children without parental consent.

16. Third-party websites & social media

Our website may link to third-party websites, social platforms and suppliers. This Privacy Policy does not cover those sites — check their privacy policies before sharing personal data. We are not responsible for third-party privacy practices.

17. Changes to this policy

We may update this Privacy Policy from time to time. When we make significant changes we will post a prominent notice on the site and update the “Last updated” date. Continued use of our services after changes indicates acceptance of the revised policy.

18. How to contact us

For privacy queries, data requests, or to exercise your rights, email: info@realshangololo.com. If you are unhappy with our response you may have the right to lodge a complaint with your local data protection authority.

19. Additional legal notes

Where applicable, this policy is intended to meet the requirements of privacy laws including the Kenya Data Protection Act and the EU General Data Protection Regulation (GDPR) for visitors/residents of those jurisdictions. If you have specific jurisdictional questions, contact info@realshangololo.com.