Last Updated: 1st November 2025
This Privacy Policy explains how Maple and Mara Adventures (“we”, “us”, or “our”) collects, uses, stores, and protects personal information in accordance with the Kenya Data Protection Act, 2019. We are committed to safeguarding the personal data of clients, prospective customers, and users of our services and online platforms.
This Policy applies to all personal information processed by Maple and Mara Adventures in the context of:
Bookings (online, in-office, or via phone/email/WhatsApp)
Account creation and management
This policy applies to both domestic and international customers who engage with our travel agency services.
We collect personal information only as necessary for our operations, including:
Full names, ID/passport numbers, nationality
Contact information (email, phone, address)
Travel details (itineraries, bookings, preferences)
Payment and transaction data (excluding card numbers stored by third-party processors)
Emergency contacts
Passport and visa documents (when required)
Special requests or sensitive information (e.g., dietary or medical needs) voluntarily disclosed
Sensitive personal data is collected only where strictly necessary and with your explicit consent, per Section 25 of the Kenya Data Protection Act.
When visiting our website, we may collect:
IP address, browser/device type, and geolocation
Session behaviour and website usage analytics
Cookies and tracking pixels (see Section 10)
We process your personal data under the following lawful bases:
Consent: Where you provide clear consent for a specific purpose
Contractual necessity: To fulfill a booking or requested service
Legal obligation: To comply with tax, immigration, or tourism regulations
Legitimate interests: For fraud prevention, service improvements, and direct marketing (with opt-out options)
We use your data to:
Fulfill travel bookings and associated services
Process payments and send booking confirmations
Communicate itinerary changes, travel advisories, or customer updates
Facilitate visas, insurance, transport, and accommodation via third-party suppliers
Comply with legal requirements
Personalize offers, promotions, and travel recommendations
We may share your information with:
Airlines, hotels, and tour operators for service fulfillment
Visa agencies, insurance providers, and transport companies
Payment processors
Marketing and advertising service providers
Regulators and authorities as required by law
Third parties are required to comply with data protection standards and may not use your data for unrelated purposes.
Your data may be stored or processed outside Kenya. Maple and Mara Adventures ensures appropriate safeguards (e.g., data transfer agreements) to protect your information and comply with the Kenya Data Protection Act.
We retain personal information only as long as necessary:
To fulfill the purposes in this Policy
To meet legal, tax, and accounting requirements
To resolve disputes or enforce contracts
Afterward, data is securely deleted or anonymized.
Under the Kenya Data Protection Act, you have the right to:
Be informed of how your data is used
Access personal data held by us
Request rectification or deletion of inaccurate data
Object to or restrict processing of your data
Withdraw consent at any time
To exercise these rights, contact us via mapleandmaraadventures@gmail.com . We will respond within the legally required timeframe.
We do not knowingly collect data from individuals under 18 without verified parental or guardian consent. Data collected inadvertently from minors will be deleted promptly.
Maple and Mara Adventures uses cookies and similar technologies to:
Remember user preferences
Analyze website traffic
Improve functionality and performance
Third-party analytics tools (e.g., Google Analytics) may also collect anonymized browsing data per their own privacy policies. Cookies can be disabled in your browser, but some site features may not function properly.
We implement technical and organizational measures to secure your data, including:
SSL encryption
Secure cloud storage
Access controls
Regular audits and backups
No system is entirely immune to breaches. Users should maintain password security and notify us of suspected misuse. In the event of a breach, Maple and Mara Adventures will notify affected individuals and the Office of the Data Protection Commissioner as required by law.
Our platforms may link to third-party sites (e.g., payment gateways, travel partners). This Policy does not cover their privacy practices. We encourage users to review the privacy policies of external sites.
Maple and Mara Adventures may revise this Policy periodically. The latest version will be available at www.mapleandmaraadventures.com/privacy-policy
Material changes may be communicated via email or platform notifications.
For questions about this Privacy Policy or your personal data:
Email: mapleandmaraadventures@gmail.com
Phone: +1 437 772 5652 | +254 768 850 025
Address: Maple and Mara Adventures, Westlands Office Park, Nairobi, Kenya
This Policy supplements the Maple and Mara Adventures Terms & Conditions.