Privacy policy

Last updated: 19 October 2026

Marafiki Holidays (“we”, “us”) is a tour, safari, restaurant and holiday accommodation business based in Jacaranda, Watamu, Kenya. This policy explains what personal information we collect through marafikiholidays.com and when you contact us, how we use it and the choices you have. We handle personal data in line with Kenya’s Data Protection Act, 2019, and we respect the rights of guests from the European Union and United Kingdom under the GDPR.

Who is responsible for your data

Marafiki Holidays, Jacaranda, Watamu, Kenya. Email info@marafikiholidays.com, phone or WhatsApp +254 711 738 524.

What we collect

Enquiries you send us on WhatsApp, by email, by phone or through our contact form: your name, email address, phone number, country and the details of your message.
Trip details you choose to share, such as travel dates, group size, children’s ages, the hotel you are staying at, dietary needs and the language you would like your guide to speak.
Booking information we need to arrange your trip, such as passport names for park entry or flights, and payment records.
Technical information your browser sends when you visit the site, such as IP address, browser type and the pages you view, held briefly in server logs for security.

We do not ask for sensitive information such as health details, except where you choose to tell us about a medical or dietary need so we can look after you.

The trip planner

Our “Plan my trip” planner runs in your browser. Your answers are saved only on your own device (in your browser’s local storage) so you can come back to them, and are not sent to us until you choose to send the message on WhatsApp or by email. The downloadable PDF trip proposal is also created on your device.

How we use your information

To reply to your enquiry and plan, quote for and confirm your trip, stay or table.
To arrange the services you book with drivers, guides, boat crews, lodges, hotels, parks and airlines.
To keep in touch before and during your trip, for example about pickup times.
To meet legal, tax and accounting obligations, and to protect our site from spam and misuse.

We rely on your consent when you contact us, on the need to perform a contract when you book, and on our legitimate interests in running a safe and secure business. We do not sell your personal information, and we do not send marketing messages unless you ask to receive them.

Who we share it with

We share only what is needed with the partners who deliver your trip, such as lodges, camps, hotels, Kenya Wildlife Service and county park authorities, transport and flight operators, and with service providers who help us run the business:

WhatsApp (Meta) when you message us on WhatsApp.
Our email provider (Titan) for messages sent by email or from the contact form.
Our web host, which stores the website and contact form messages.
Google, for the map on our contact page and the website translation tool.

Some of these providers process data outside Kenya. Where they do, we rely on their published safeguards for international transfers.

Cookies and similar technologies

We keep these to a minimum:

Language: a cookie called googtrans remembers the language you choose.
Your choices: your browser’s local storage remembers trip planner answers and the menu currency you picked.
Third-party content: the Google map and Google translation tool may set their own cookies when they load. See Google’s privacy policy for details.

We do not use advertising cookies. You can clear cookies and local storage at any time in your browser settings.

How long we keep it

We keep enquiries for up to two years so we can help with return visits, and booking and payment records for as long as Kenyan tax and accounting law requires. Server logs and email delivery logs are kept for up to six months. After that we delete or anonymise the information.

Your rights

You can ask us to tell you what information we hold about you, to correct it, to delete it, to stop or limit how we use it, or to give you a copy. You can withdraw consent at any time. To do any of these, email info@marafikiholidays.com. If you are not happy with our reply you can complain to the Office of the Data Protection Commissioner of Kenya (odpc.go.ke) or to your local data protection authority.

Security

The website uses an encrypted connection (HTTPS), access to our systems is limited to our team, and we use spam protection on our forms. No method of sending information over the internet is completely secure, so please do not send card numbers or passport scans by email or WhatsApp unless we ask for them through a secure method.

Children

Our services are booked by adults. We only hold information about children, such as their ages, when a parent or guardian gives it to us to plan a family trip.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed.