Privacy Policy

1. Introduction

Bush Buddies Limited ("we," "our," or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with us through various communication channels including WhatsApp Business messaging.

We are a camping and outdoor adventure company based in Nairobi, Kenya, providing curated camping experiences across Kenya.

2. Information We Collect

2.1 Personal Information

When you register for our services, we collect:

• Full name (first, middle, last name)
• Phone number
• Email address
• Identity documents (National ID or Passport copy)
• Certificate of Good Conduct (for security verification)

2.2 Communication Data

When you communicate with us via WhatsApp Business, email, or other channels, we may collect:

• Message content and metadata
• Communication preferences
• Response history and interaction patterns
• WhatsApp phone number and profile information

2.3 Technical Information

• IP address and device information
• Browser type and version
• Website usage data and analytics
• Cookies and similar tracking technologies

3. How We Use Your Information

We use your personal information for the following purposes:

3.1 Service Delivery

• Processing and managing camping trip registrations
• Verifying identity and conducting security background checks
• Organizing and coordinating camping activities
• Emergency contact and safety procedures

3.2 Communication

• Sending WhatsApp messages about trip updates, schedules, and important information
• Responding to inquiries and providing customer support
• Sharing safety guidelines and pre-trip preparation information
• Post-trip follow-ups and feedback collection

3.3 Legal and Safety

• Complying with legal obligations and regulatory requirements
• Ensuring participant safety and security during activities
• Preventing fraud and protecting against security threats

4. WhatsApp Business Messaging

We use WhatsApp Business API to communicate with participants. This includes:

• Trip confirmations and reminders
• Pre-departure instructions and checklists
• Real-time updates during trips
• Emergency communications
• Post-trip follow-ups and feedback requests

Your WhatsApp messages with us are subject to WhatsApp's own privacy policy and end-to-end encryption. We only access messages necessary for providing our services.

5. Data Storage and Security

5.1 Data Storage

Your data is stored securely using industry-standard practices:

• Cloud-based storage with encryption at rest
• Secure file storage for document uploads
• Regular automated backups
• Geographic data residency in compliance with local laws

5.2 Security Measures

• SSL/TLS encryption for data transmission
• Access controls and authentication measures
• Regular security audits and updates
• Staff training on data protection practices

5.3 Data Retention

We retain your personal information for as long as necessary to provide our services and comply with legal obligations. Specifically:

• Registration data: Retained while you remain an active participant
• Identity documents: Retained for security purposes for up to 7 years
• Communication records: Retained for customer service and legal compliance
• Website analytics: Anonymized after 26 months

6. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share your information only in the following circumstances:

• With your explicit consent
• With trusted service providers who assist in our operations (under strict confidentiality agreements)
• When required by law or to protect safety and security
• In case of business transfer (with advance notice to affected users)

7. Your Rights

Under applicable data protection laws, you have the right to:

• Access your personal data and request copies
• Correct inaccurate or incomplete information
• Request deletion of your personal data (subject to legal requirements)
• Object to or restrict certain processing activities
• Data portability (receive your data in a structured format)
• Withdraw consent for marketing communications

To exercise these rights, please contact us using the information provided below.

8. Cookies and Tracking

We use cookies and similar technologies to improve your website experience:

• Essential cookies for website functionality
• Analytics cookies to understand website usage
• Preference cookies to remember your settings

You can control cookies through your browser settings, though disabling certain cookies may affect website functionality.

9. Third-Party Services

Our website and services integrate with third-party platforms:

• WhatsApp Business (Meta) for messaging services
• Payment processors for transaction handling
• Cloud storage providers for data hosting
• Analytics services for website performance

These third parties have their own privacy policies, and we encourage you to review them.

10. Children's Privacy

Our services are not directed to children under 18. We do not knowingly collect personal information from minors without parental consent. If a minor wishes to participate, a parent or guardian must complete the registration process and provide necessary consent.

11. International Data Transfers

Your data may be transferred to and processed in countries other than Kenya. When we transfer data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with this privacy policy and applicable data protection laws.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the updated policy on our website
• Sending notification via email or WhatsApp
• Displaying a notice on our website

Your continued use of our services after any changes constitutes acceptance of the updated policy.

13. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

14. Governing Law

This Privacy Policy is governed by the laws of Kenya, including the Data Protection Act, 2019. Any disputes arising from this policy shall be resolved in accordance with Kenyan law and jurisdiction.