Privacy Policy

Rift & Tide Africa ("we", "us", "our") is a destination management and safari tour operator based in East Africa. We respect your privacy and are committed to protecting personal data collected through our public website, agent portal, enquiry forms, and booking operations.

This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices available to travellers, trade partners, and website visitors.

This policy applies to:

- Visitors browsing our public website and submitting enquiries or quote requests. - Registered travel agents and agency staff using our B2B portal. - Travellers whose personal data is provided to us by an agent or directly for a confirmed safari, tour, or related travel service.

We may collect and process the following categories of personal data:

- **Identity and contact details** — name, email address, telephone numbers, postal address, nationality, and passport information where required for travel arrangements. - **Agency and commercial information** — company name, business registration details, tax identifiers, trade references, and authorised user accounts for our agent portal. - **Booking and travel details** — itinerary preferences, departure dates, accommodation selections, special dietary or medical notes you choose to share, rooming lists, emergency contacts, and payment references. - **Financial information** — billing contacts, invoice details, and transaction references (we do not store full payment card numbers on our core booking platform). - **Technical data** — IP address, browser type, device identifiers, session cookies, and usage information where analytics or security monitoring is enabled. - **Communications** — emails, forms, support tickets, and records of conversations with our reservations, operations, and finance teams.

We use personal data to:

- Respond to travel enquiries, custom quotes, and agent registration requests. - Create, confirm, amend, and operate safari and tour bookings across Kenya, Tanzania, Uganda, Rwanda, and related destinations. - Coordinate with lodges, camps, airlines, national parks, guides, and other suppliers necessary to deliver booked services. - Issue vouchers, invoices, manifests, and operational documentation required for travel. - Manage agent portal access, net rates, marketing assets, and training resources for approved trade partners. - Meet legal, regulatory, tax, and supplier reporting obligations. - Improve website security, service quality, and customer support.

Depending on your relationship with us, we rely on one or more of the following legal bases: performance of a contract, legitimate interests in operating our business, compliance with legal obligations, and consent where required (for example, certain marketing communications or non-essential cookies).

We may share personal data with:

- **Accommodation and transport suppliers** — lodges, tented camps, airlines, vehicle operators, park authorities, and activity providers. - **Ground handlers and partners** — DMC partners, guides, and contractors involved in delivering your itinerary. - **Technology providers** — hosting, email, CRM, and booking systems that process data on our behalf under appropriate safeguards. - **Professional advisers and authorities** — where required by law, court order, or to protect our legal rights.

We do not sell personal data. Where data is transferred outside your country, we apply appropriate contractual and organizational safeguards.

We retain personal data only for as long as necessary to fulfil the purposes described in this policy, including operational, accounting, dispute resolution, and legal retention requirements. Booking records, manifests, and financial documents may be retained for longer periods where required by law or supplier rules.

We implement administrative, technical, and organizational measures designed to protect personal data against unauthorized access, loss, or misuse. No method of transmission over the internet is completely secure; please use strong passwords for portal accounts and notify us promptly if you suspect unauthorized access.

Subject to applicable law, you may have rights to access, correct, delete, restrict, or object to certain processing, and to withdraw consent where processing is consent-based. You may also have the right to lodge a complaint with a data protection supervisory authority. To exercise rights, contact us at support@riftandtideafrica.com.

Our services are not directed to children under 16. We do not knowingly collect personal data from children without appropriate parental or guardian authority and booking context.

We may update this Privacy Policy from time to time. The version published on our website reflects the current policy. Material changes will be communicated where appropriate.

For privacy questions or requests: support@riftandtideafrica.com.