Last updated: 8 November 2026
1. Data controller
The data controller is Lion Whisper Safaris Ltd, registered in Tanzania (Company No. [Registration No.], TIN 120-839-527), [Street address], Arusha. Contact for privacy matters: hello@lionwhispersafaris.com.
For data-protection enquiries you may also write to the Personal Data Protection Commission of Tanzania (the supervisory authority established under the Personal Data Protection Act, 2022).
2. What we collect
- Enquiry data — name, country, email, phone, travel dates, party size, interests, budget range, and anything else you tell us in the planning form or by email/WhatsApp.
- Booking data — full passport name, date of birth, passport number and expiry, nationality, dietary requirements, relevant medical information you choose to disclose, emergency contact, and traveller insurance details.
- Payment data — bank transfer reference or card payment metadata. Card numbers are not stored by us; they are handled by our payment processor [Payment processor name, e.g. Stripe / Flutterwave].
- Communications — emails, WhatsApp messages and call notes related to your trip.
- Website data — IP address, device and browser type, pages viewed, referrer. See our Cookie Notice.
3. Why we use it (lawful basis)
- To quote and operate your safari — performance of a contract with you.
- To comply with the law — including Tanzania immigration and park-entry requirements, tax records, and anti-money-laundering checks.
- Safety and emergencies — vital interests of you or another person (e.g. medical evacuation).
- Marketing — only with your consent, which you can withdraw at any time.
- Improving our service — our legitimate interest in running a safe, well-organised business, balanced against your rights.
4. Who we share it with
To operate your safari we must share necessary details with carefully selected partners:
- Lodges, camps and hotels for your reservations.
- Tanzania National Parks Authority (TANAPA), Ngorongoro Conservation Area Authority (NCAA) and other reserve authorities for entry permits.
- Domestic air carriers (e.g. Coastal Aviation, Auric Air, Regional Air) for bush flights.
- Our payment processor [Payment processor name] and our bank.
- Our insurer and, in an emergency, evacuation providers such as Flying Doctors (AMREF).
- Government authorities where required by law.
- Our hosting and email providers — see "International transfers" below.
We never sell your personal data.
5. International transfers
Because we are based in Tanzania and our guests are international, your data crosses borders. Our website is hosted on Cloudflare's global edge network and emails are processed by [Email provider, e.g. Google Workspace]. Where data is transferred outside Tanzania or the EEA, we rely on the safeguards permitted by the Personal Data Protection Act, 2022 and (where applicable) the EU Standard Contractual Clauses.
6. How long we keep it
- Enquiries that don't become bookings: up to 24 months, then deleted.
- Booking and financial records: 7 years after the trip, to meet Tanzania Revenue Authority requirements.
- Marketing list: until you unsubscribe.
7. Your rights
Under the Personal Data Protection Act, 2022 (and the GDPR if you are in the EU/UK) you may ask us to access, correct, delete or restrict your personal data, and to receive a copy in a portable format. You may also withdraw consent or object to processing based on our legitimate interests. Email hello@lionwhispersafaris.com and we will respond within 30 days. You may complain to the Personal Data Protection Commission of Tanzania, or to your local data-protection authority.
8. Children
Our website and services are not directed at children under 16. We collect children's data only via a parent or guardian as part of a family booking.
9. Security
We use HTTPS across the website, restrict booking-file access to trained staff, store passport copies in access-controlled cloud storage, and require strong passwords and multi-factor authentication on staff accounts. No system is perfectly secure — please share copies of sensitive documents only through the secure links we provide.
10. Changes
We may update this policy. The current version is always available on this page with the "Last updated" date above. Material changes will be flagged at the top.