Privacy Policy — Mitchreny Adventures

Mitchreny Adventures ("we", "our", "us") respects your privacy and is committed to protecting your personal data. This policy explains what we collect, why, and how we handle it.

1. Information we collect

We collect information you provide directly to us:

When you book a trip: name, email address, phone number, number of travellers, travel dates.
When you contact us: name, email address, subject, and the message content.
When you pay: payment is processed by Paystack. We do not store your card details — Paystack handles them under their own privacy policy.

We also collect limited technical information automatically — such as IP address and browser type — through standard server logs, used for security and abuse prevention.

2. How we use your information

To process and confirm your booking.
To communicate with you about your trip, including changes and reminders.
To process payments and issue receipts.
To respond to enquiries and provide customer support.
To prevent fraud and abuse, including rate-limiting form submissions.
To comply with legal and accounting obligations.

3. Legal basis for processing

Where GDPR or similar regulations apply, we process your data on the basis of:

Contract — to fulfil your booking.
Legitimate interest — for security and fraud prevention.
Consent — where you've opted in to receive updates.

4. Sharing your information

We share your information only as needed to deliver your trip:

Paystack — for payment processing.
Lodges, camps, and transport partners — as required to fulfil your booking.
Our email service — to send confirmations and receipts.

We do not sell your personal data to anyone, ever.

5. Data retention

We keep booking records for up to 7 years to satisfy tax and accounting rules. Contact messages are kept for up to 24 months. You may request earlier deletion where the law allows.

6. Your rights

Depending on where you live, you may have the right to:

Access the personal data we hold about you.
Request correction or deletion.
Object to or restrict processing.
Withdraw consent at any time.
Lodge a complaint with your local data protection authority.

To exercise any of these, email info@mitchrenyadventures.co.ke.

7. Security

We use HTTPS across the site, store data on secured servers, restrict access to our admin systems, and apply rate-limiting and bot protections to our forms. No system is perfectly secure, but we take these protections seriously and update them regularly.

8. Cookies

We use a single session cookie to keep your booking form working correctly and to protect against cross-site request forgery. We do not use advertising or tracking cookies.

9. Children

Our services are intended for adults. We do not knowingly collect personal data from children under 16. Bookings involving minors should be made by a parent or legal guardian.

10. Changes to this policy

We may update this policy occasionally. The date at the top reflects the latest revision.

11. Contact us

Mitchreny Adventures
P.O. Box 716-00100, Nairobi, Kenya
Email: info@mitchrenyadventures.co.ke
Phone: +254721616074