Privacy Policy
GESTA Tours & Travel Ltd.
Vision Plaza, Mombasa Road, 4th Floor, Suite 9B
Nairobi, Kenya
Last Updated: October , 2025.
1. Introduction
GESTA Tours & Travel Ltd. is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our services, visit our website, or interact with us in any way.
By using our services or providing us with your personal information, you consent to the collection and use of your information as described in this Privacy Policy.
2. Information We Collect
2.1 Personal Information You Provide
We collect personal information that you voluntarily provide to us when you:
- Make a booking or inquiry
- Register for our services
- Subscribe to our newsletter
- Contact us via phone, email, or in person
- Fill out forms on our website
- Participate in surveys or promotions
This information may include:
- Full name
- Date of birth
- Gender
- Passport number and expiry date
- Nationality
- Email address
- Phone number
- Physical address
- Payment and billing information
- Emergency contact details
- Dietary requirements and special needs
- Medical information (where necessary for travel)
- Travel preferences and history
2.2 Information Collected Automatically
When you visit our website, we may automatically collect:
- IP address
- Browser type and version
- Device information
- Pages visited and time spent on pages
- Referring website
- Location data
- Cookies and similar tracking technologies
2.3 Information from Third Parties
We may receive information about you from third-party sources including:
- Airlines, hotels, and tour operators
- Payment processors
- Social media platforms (if you interact with us there)
- Business partners and affiliates
3. How We Use Your Information
We use your personal information for the following purposes:
3.1 To Provide Travel Services
- Process and manage your bookings
- Arrange flights, accommodation, tours, and transfers
- Issue tickets and travel documents
- Communicate booking confirmations and travel details
- Provide customer support before, during, and after travel
3.2 To Process Payments
- Process payments and refunds
- Prevent fraud and unauthorized transactions
- Maintain financial records
3.3 To Communicate With You
- Send booking confirmations and updates
- Provide travel information and itineraries
- Respond to inquiries and requests
- Send important notices about your booking
- Follow up on your travel experience
3.4 For Marketing Purposes (with your consent)
- Send promotional offers and travel deals
- Share newsletters and travel inspiration
- Inform you about new services and destinations
- Conduct customer surveys
3.5 To Improve Our Services
- Analyze website usage and customer preferences
- Improve our website functionality and user experience
- Develop new services and features
- Conduct market research
3.6 For Legal and Regulatory Compliance
- Comply with legal obligations and regulations
- Respond to legal requests from authorities
- Protect our rights and prevent fraud
- Enforce our Terms and Conditions
4. Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Contract Performance: Processing is necessary to fulfill our contractual obligations to provide travel services to you
- Consent: You have given explicit consent for specific processing activities such as marketing communications
- Legal Obligation: Processing is required to comply with Kenyan laws and regulations
- Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention and service improvement
5. Sharing Your Information
We may share your personal information with the following parties:
5.1 Service Providers and Suppliers
We share necessary information with:
- Airlines for flight bookings
- Hotels and accommodation providers
- Tour operators and activity providers
- Ground transportation companies
- Travel insurance providers
- Visa processing agencies
- Payment processors
5.2 Business Partners
We may share information with trusted business partners who help us provide or improve our services, subject to confidentiality agreements.
5.3 Legal Authorities
We may disclose your information to government authorities, law enforcement agencies, or courts when:
- Required by law or legal process
- Necessary to protect our rights or property
- Required for national security or public safety
- Necessary to prevent fraud or illegal activities
5.4 Business Transfers
In the event of a merger, acquisition, or sale of our business assets, your information may be transferred to the acquiring entity.
We do not sell, rent, or trade your personal information to third parties for their marketing purposes without your explicit consent.
6. Data Security
We implement appropriate technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include:
- Secure servers and encrypted data transmission
- Access controls and authentication procedures
- Regular security assessments and updates
- Staff training on data protection
- Secure payment processing systems
However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee absolute security.
7. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Retention periods vary depending on the type of information and purpose:
- Booking and transaction records: 7 years (for tax and legal compliance)
- Marketing communications: Until you unsubscribe or request deletion
- Website analytics data: Up to 2 years
- Customer service records: 3 years
After the retention period expires, we will securely delete or anonymize your personal information.
8. Your Rights
Under Kenyan data protection laws and international best practices, you have the following rights:
8.1 Right to Access
You have the right to request access to the personal information we hold about you.
8.2 Right to Correction
You can request correction of inaccurate or incomplete personal information.
8.3 Right to Deletion
You may request deletion of your personal information, subject to legal and contractual obligations.
8.4 Right to Object
You can object to processing of your personal information for marketing purposes or based on legitimate interests.
8.5 Right to Restrict Processing
You may request restriction of processing in certain circumstances.
8.6 Right to Data Portability
You have the right to receive your personal information in a structured, commonly used format.
8.7 Right to Withdraw Consent
Where processing is based on consent, you may withdraw consent at any time.
To exercise any of these rights, please contact us using the details provided in Section 13.
9. Marketing Communications
We may send you marketing communications about our services, special offers, and travel deals if you have:
- Opted in to receive marketing communications
- Made a booking with us (unless you opt out)
You can opt out of marketing communications at any time by:
- Clicking the “unsubscribe” link in our emails
- Contacting us at reservations@gestatours.com
- Calling us at 0794 664 260 or 0110 363 877
Please note that even if you opt out of marketing communications, we will still send you essential service-related communications regarding your bookings.
10. Cookies and Tracking Technologies
Our website uses cookies and similar tracking technologies to enhance your browsing experience. Cookies are small text files stored on your device that help us:
- Remember your preferences and settings
- Analyze website traffic and usage patterns
- Provide personalized content and recommendations
- Enable certain website features and functionality
Types of Cookies We Use:
- Essential Cookies: Necessary for website operation
- Performance Cookies: Help us understand how visitors use our website
- Functional Cookies: Remember your preferences
- Marketing Cookies: Deliver relevant advertisements
You can control cookie settings through your browser preferences. However, disabling cookies may affect website functionality.
11. Third-Party Links
Our website may contain links to third-party websites, social media platforms, or services. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.
12. Children’s Privacy
Our services are not directed at children under the age of 18. We do not knowingly collect personal information from children without parental consent. If you believe we have inadvertently collected information from a child, please contact us immediately so we can delete it.
13. International Data Transfers
Your personal information may be transferred to and processed in countries outside Kenya, including countries that may not have equivalent data protection laws. When we transfer your data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. We will post the updated policy on our website with a new “Last Updated” date. Significant changes will be communicated to you via email or prominent notice on our website.
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
15. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
GESTA Tours & Travel Ltd.
Vision Plaza, Mombasa Road, 4th Floor, Suite 9B
Nairobi, Kenya
Phone: 0794 664 260 / 0110 363 877
Email: reservations@gestatours.com
Website: www.gestatours.com
Office Hours:
o Monday–Friday: 8:00 AM – 5:00 PM
o Saturday: 9:00 AM – 12:00 PM
o Closed on Sundays and public holidays
16. Complaints
If you believe your privacy rights have been violated or you are dissatisfied with how we handle your personal information, you have the right to lodge a complaint with the relevant data protection authority in Kenya.
17. Consent
By using our services and providing your personal information, you acknowledge that you have read, understood, and agree to this Privacy Policy. If you do not agree with this policy, please do not use our services or provide us with your personal information.
Thank you for trusting GESTA Tours & Travel Ltd. with your personal information. Your privacy and security are important to us, and we are committed to protecting your data while providing exceptional travel experiences.
