Privacy policy
This site has no backend, no analytics and no tracking cookies, and the forms do not submit anywhere. Here is exactly what that means for your data.
Last updated 20 August 2026
The short version
This site has no backend, no database, no analytics, no advertising and no tracking cookies. It does not build a profile of you, and there is nothing here to sell even if we wanted to.
The forms do not submit anywhere. They compose a message inside your own browser and hand it to your WhatsApp or your mail client, where you decide whether to press send. If you close the tab instead, nothing has left your device.
The rest of this page is the detail behind those two paragraphs, and how to get in touch about your data.
Who is responsible for your data
Nissa Safaris, a tour operator registered and operating in Kenya, is the data controller. We are based in Laikipia County, Kenya. There is no parent company, no group and no third party running this on our behalf.
For anything about your data, email nissasafaris254@gmail.com or use the details on the contact page. It reaches Nissa directly.
What happens when you just read the site
No analytics run. No tracking pixel loads. No advertising network is contacted. We do not know that you visited, which page you read, or how long you spent on it.
Two things do happen, and both are ordinary web plumbing rather than anything about you. Our hosting provider records the request in a server log, which includes your IP address, in the same way every website on the internet does. And your browser fetches this site's two typefaces from Google Fonts, which lets Google see your IP address as part of that request.
That is the complete list. There is nothing else.
What happens when you use a form
There are two forms on this site: the enquiry form on the contact page and the review form on the reviews page. Both work the same way, and neither sends anything to a server here.
What you type is assembled into a plain message inside your browser. That message is then handed to WhatsApp, or to your email client, as a draft. You read it, and you send it or you do not. Until you press send in that app, the text has never left your device, and even then it goes to Nissa's phone or inbox rather than to any system belonging to this website.
The practical consequence is that this website stores nothing you type, cannot lose it in a breach, and cannot pass it to anyone. What Nissa then holds is a WhatsApp conversation or an email thread with you, like any other conversation with a client.
What we hold once you are booking a trip
Planning a real trip needs real details, and at that point we do hold information about you: your name and contact details, your travel dates and party, your passport details where a lodge, an airline or an immigration process requires them, dietary requirements, and any medical or mobility information you have chosen to tell us so we can build the trip safely.
We use it to plan and run your trip and for nothing else. Where a lodge, camp, charter airline, permit office or partner operator needs a specific detail to hold your booking, we pass on that detail and no more. We do not sell it, we do not rent it, and we do not add you to a marketing list you did not ask for.
Health information and passport details are sensitive, and we treat them accordingly: they are shared only where the booking genuinely requires it, and we do not keep them beyond the trip.
Reviews
The review form carries a consent checkbox, and it is meaningful: nothing you write is published on this site unless you tick it. Reviews we publish show the first name and country you gave us and nothing else, and you can ask us to take yours down at any time.
Where we display reviews from Google, those are reviews already published publicly on Google by the people who wrote them. They are fetched by our server rather than by your browser, which means your browser never contacts Google for them and Google is not told that you looked at that page. We do not store their content; it is fetched fresh each time, which is what Google's own terms require.
Why we are allowed to hold it
Where you have made an enquiry or a booking, we hold your details because we need them to answer you and to perform the trip you asked us for. Where we keep booking records after a trip, it is because we have a legitimate interest in being able to answer a later question or a dispute about it, and in some cases a legal or tax obligation to keep them.
Where you have given consent, for a review to be published or for a photograph of you to be used, that consent is the whole basis and you can withdraw it at any time by telling us.
How long we keep it
Enquiries that do not turn into trips are not kept indefinitely: the conversation stays in WhatsApp or the inbox while it is live and is cleared out once it plainly is not.
Booking records are kept while they may still be needed, for a later question about your trip or for tax and accounting purposes. Passport and health details are not kept beyond what the booking required.
You can ask us to delete anything we hold about you and we will, except where we are legally required to keep a record.
Your rights over your data
Under Kenya's Data Protection Act, 2019 you have the right to be told what we hold about you, to get a copy of it, to have it corrected if it is wrong, to have it deleted, to object to how we are using it, and to withdraw any consent you gave.
If you are in the United Kingdom or the European Economic Area, the UK GDPR and the GDPR give you the same rights and we will honour them on the same terms, including your right to receive your data in a portable form.
Ask by emailing nissasafaris254@gmail.com. We will not charge you for it and we will not make it difficult. If you are not satisfied with how we have handled it, you can complain to the Office of the Data Protection Commissioner in Kenya at odpc.go.ke, or to your own national data protection authority if you are in the UK or the EEA.
Where your data goes
We are in Kenya, so if you enquire from elsewhere your message is read in Kenya. Booking a trip means passing the details a booking needs to lodges, camps, airlines and partner operators in Kenya and, for the international journeys, in the country you are travelling to.
Our hosting and content delivery run on servers outside Kenya, which is normal for any website, and the messaging and email services we use are operated by companies outside Kenya under their own privacy terms.
Children
This site is not aimed at children and we do not knowingly collect anything from one. Children travel on our family safaris, and where we hold a child's details it is because a parent or guardian gave them to us as part of the family's booking.
Security
The site is served only over HTTPS, with HSTS, so the connection between you and it is encrypted and cannot be downgraded. Its Content-Security-Policy blocks inline scripts and inline styles outright and restricts every network request the page can make, which is what stops injected code running on a page you are reading.
The structural protection is simpler than any of that: there is no database here and no server that receives your form data, so there is no store of visitor data on this site to be breached.
Changes to this policy
If this changes, the date at the top of the page changes with it. We will not quietly start collecting something this page says we do not.
Questions about any of this
Email nissasafaris254@gmail.com or message WhatsApp. It reaches Nissa Ole Kinyaga directly, and a plain question gets a plain answer.