The Marafa sandstone gorge framed through a hole in a weathered rock wall

WILD WHISPERS

Privacy Policy

Effective 11 September 2026

This policy explains what personal information we collect when you visit this website or get in touch about a safari, why we collect it, who else sees it and what you can ask us to do about it. We have written it in plain English rather than legal language. If anything here is unclear, or you would like a copy of what we hold about you, write to info@wild-whispers.com and a person will answer.

Who we are

Wild Whispers plans private safaris in Kenya and Tanzania from an office at 14 Ring Road Parklands, Nairobi, Kenya. We decide what information this website collects and why, which makes us the data controller under Kenya’s Data Protection Act, 2019 and, for visitors in the EEA and the UK, under the GDPR and UK GDPR. Our journeys are quoted and booked together with our partner Holiday Bazaar, who handle enquiries and reservations alongside us. You can reach us on +254 738 250 260 or at info@wild-whispers.com.

What we collect

We ask for what we need to answer you properly, and not much else.

The enquiry form: your first and last name, phone number with area code, email address, nationality, the subject line and your message. Anything you volunteer in that message is collected with it — travel dates, who is coming, an anniversary, a dietary need — so please share only what you are comfortable sharing. The form itself sends nothing through our website: pressing Send opens your own email app with the message addressed to info@wild-whispers.com, and it only leaves your device when you send it from there.
Anything you send us directly: emails to info@wild-whispers.com, calls or messages to +254 738 250 260, and messages through our Facebook, Instagram or LinkedIn pages.
Technical information your browser sends every time it asks for a page: IP address, browser and device type, the page that referred you, which pages you opened and when. Cloudflare, who host and protect the site, keep this in their server and security logs.
Cookies and similar technologies. Today the site sets no cookies of its own; Cloudflare may set a strictly necessary one to tell real visitors from bots. We plan to switch on website analytics and advertising measurement — Google’s analytics and advertising tags, and the Meta Pixel that reports on our Facebook and Instagram ads. When those are enabled they will load only after you agree, wherever consent is required.
Newsletter sign-ups. The subscribe button in our footer opens a form run by Flodesk for our partner Holiday Bazaar. If you sign up there, Flodesk collects your name and email address for us and for them, and records whether the emails are opened. Every one carries an unsubscribe link.

We do not take payments or card details on this website, and we do not ask for passport or health information through it.

How and why we use it

Each use has a lawful basis behind it, which is the legal way of saying we have a reason we can point to.

To answer your enquiry and plan your trip: quoting, checking dates with camps and airlines, and following up. Our basis is taking steps at your request before a contract, and our legitimate interest in replying to people who write to us.
To run and protect the website: serving pages, keeping it online, blocking abuse and spam. Our basis is our legitimate interest in a site that works and stays secure.
To see how the site is read and how our advertising performs, once analytics and advertising tools are switched on. Our basis is your consent, where consent is required.
To send you our newsletter if you asked for it. Our basis is your consent, which you can withdraw from any email.
To keep proper accounts and, if it ever came to it, to bring or defend a legal claim. Our basis is our legal obligations and our legitimate interest.

We do not sell your personal information, and nothing here is decided about you by an automated system.

Who we share it with

Only with the people and services that help us answer you and run the site.

Holiday Bazaar, our booking partner. Enquiries you send us may be passed to their reservations team, who quote and book with us. Newsletter sign-ups made through the subscribe link in our footer also go to Holiday Bazaar’s list.
Cloudflare, who host the site, deliver it worldwide, protect it from attack and carry form submissions to us by email.
Proton Mail, the provider behind info@wild-whispers.com.
Flodesk, the newsletter platform, if you subscribe.
Travel suppliers: the camps, lodges, hotels, guides and airlines needed to hold and confirm a booking. They receive only what they need, such as names, dates and any dietary or medical note you have asked us to pass on.
Accountants, insurers or lawyers where we need advice, and courts or authorities where the law requires it.

The site also links out to Google Maps, our social media pages, the newsletter form and a travel eSIM provider. Follow one of those and you are on someone else’s site, under their privacy policy rather than ours.

Sending information abroad

We are in Nairobi, but the services above run on networks around the world, so your information may be stored or processed outside your country — the United States and the European Union, most likely. Where data leaves the EEA or the UK we rely on the standard contractual clauses and equivalent safeguards our providers publish, and under Kenya’s Data Protection Act we transfer only where the law allows and only to providers who can keep it safe. Ask us if you would like to know where a particular service sits.

How long we keep it

Enquiries and the conversation that follows: up to three years after we last hear from you, so we can pick up where we left off if you come back.
Booking and financial records: as long as Kenyan tax and accounting law requires us to keep them.
Newsletter subscriptions: until you unsubscribe.
Server and security logs: the short periods our host sets, usually days rather than months.

When we no longer need something, we delete it.

How we look after it

The site is served only over HTTPS, and Cloudflare’s network sits in front of it filtering abusive traffic. Enquiries and mailboxes are open only to the small team who need them. No website or email system is perfectly secure and we will not pretend ours is, but if something did go wrong with your information we would tell you and report it to the Office of the Data Protection Commissioner as the law requires.

Your rights

Under Kenya’s Data Protection Act, 2019, and under the GDPR and UK GDPR if you are in the EEA or the UK, you can ask us to:

tell you what we hold about you and give you a copy;
correct anything wrong or incomplete;
delete information we no longer have good reason to keep;
stop or limit what we do with it, including objecting to anything we do on legitimate interest grounds;
hand it over in a portable format, to you or to another provider;
withdraw a consent you gave, for the newsletter or for cookies, at any time — which does not undo what was done while it stood.

Write to info@wild-whispers.com and we will reply within the time the law allows: normally seven days under Kenyan law, one month under the GDPR. We may ask you to confirm who you are first. If our answer does not satisfy you, you can complain to Kenya’s Office of the Data Protection Commissioner at odpc.go.ke, or to the supervisory authority where you live in the EEA or the UK. We would rather you told us first, so we can put it right.

Cookies and how to control them

Cookies are small files a website stores on your device. This site sets none of its own for tracking at the moment; the only one you may pick up is the strictly necessary cookie Cloudflare uses to separate real visitors from bots. When we do switch on analytics and advertising measurement, a banner will ask you first, and nothing beyond the necessary will load until you choose. You can also block or clear cookies in your browser’s privacy settings, turn on a Do Not Track or global privacy signal, and switch off personalised advertising in your Google and Meta account settings. Blocking cookies will not stop you reading anything here.

Children

This website is meant for adults planning travel, and we do not knowingly collect information from children through it. Children are very welcome on safari: where a booking includes one, we take their details from the adult making the booking and use them only to arrange the trip. If you think a child has sent us personal information directly, tell us and we will delete it.

Changes to this policy

We will update this page when what we do changes, most likely when the analytics and advertising tools go live. The date at the top tells you which version you are reading, and anything material will be flagged here. It is worth a look now and then.

Contact us

Questions, requests or complaints about your privacy go to: Wild Whispers, 14 Ring Road Parklands, Nairobi, Kenya. Email info@wild-whispers.com or call +254 738 250 260. We are a small team and we answer our own post.