GESTA Tours & Travel Ltd.
Vision Plaza, Mombasa Road, 4th Floor, Suite 9B
Nairobi, Kenya
Last Updated: October , 2025.
GESTA Tours & Travel Ltd. is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our services, visit our website, or interact with us in any way.
By using our services or providing us with your personal information, you consent to the collection and use of your information as described in this Privacy Policy.
We collect personal information that you voluntarily provide to us when you:
This information may include:
When you visit our website, we may automatically collect:
We may receive information about you from third-party sources including:
We use your personal information for the following purposes:
We process your personal data based on the following legal grounds:
We may share your personal information with the following parties:
We share necessary information with:
We may share information with trusted business partners who help us provide or improve our services, subject to confidentiality agreements.
We may disclose your information to government authorities, law enforcement agencies, or courts when:
In the event of a merger, acquisition, or sale of our business assets, your information may be transferred to the acquiring entity.
We do not sell, rent, or trade your personal information to third parties for their marketing purposes without your explicit consent.
We implement appropriate technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include:
However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee absolute security.
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Retention periods vary depending on the type of information and purpose:
After the retention period expires, we will securely delete or anonymize your personal information.
Under Kenyan data protection laws and international best practices, you have the following rights:
You have the right to request access to the personal information we hold about you.
You can request correction of inaccurate or incomplete personal information.
You may request deletion of your personal information, subject to legal and contractual obligations.
You can object to processing of your personal information for marketing purposes or based on legitimate interests.
You may request restriction of processing in certain circumstances.
You have the right to receive your personal information in a structured, commonly used format.
Where processing is based on consent, you may withdraw consent at any time.
To exercise any of these rights, please contact us using the details provided in Section 13.
We may send you marketing communications about our services, special offers, and travel deals if you have:
You can opt out of marketing communications at any time by:
Please note that even if you opt out of marketing communications, we will still send you essential service-related communications regarding your bookings.
Our website uses cookies and similar tracking technologies to enhance your browsing experience. Cookies are small text files stored on your device that help us:
You can control cookie settings through your browser preferences. However, disabling cookies may affect website functionality.
Our website may contain links to third-party websites, social media platforms, or services. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.
Our services are not directed at children under the age of 18. We do not knowingly collect personal information from children without parental consent. If you believe we have inadvertently collected information from a child, please contact us immediately so we can delete it.
Your personal information may be transferred to and processed in countries outside Kenya, including countries that may not have equivalent data protection laws. When we transfer your data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. We will post the updated policy on our website with a new “Last Updated” date. Significant changes will be communicated to you via email or prominent notice on our website.
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
GESTA Tours & Travel Ltd.
Vision Plaza, Mombasa Road, 4th Floor, Suite 9B
Nairobi, Kenya
Phone: 0794 664 260 / 0110 363 877
Email: reservations@gestatours.com
Website: www.gestatours.com
Office Hours:
o Monday–Friday: 8:00 AM – 5:00 PM
o Saturday: 9:00 AM – 12:00 PM
o Closed on Sundays and public holidays
If you believe your privacy rights have been violated or you are dissatisfied with how we handle your personal information, you have the right to lodge a complaint with the relevant data protection authority in Kenya.
By using our services and providing your personal information, you acknowledge that you have read, understood, and agree to this Privacy Policy. If you do not agree with this policy, please do not use our services or provide us with your personal information.
Thank you for trusting GESTA Tours & Travel Ltd. with your personal information. Your privacy and security are important to us, and we are committed to protecting your data while providing exceptional travel experiences.