1. Who Controls Your Data
Proven Adventures, Jahazi Building, James Gichuru Road, Lavington, Nairobi, Kenya, is the data controller for personal data collected through this website and our booking channels. We process personal data in accordance with the Kenya Data Protection Act, 2019. Questions and requests: hello@provenadventures.com.
2. What We Collect
When you enquire or book we collect what you give us: name, email, phone number, company name for corporate enquiries, travel party details (including children's ages, so we can price child rates correctly), travel dates, budget and preferences. For confirmed bookings we may additionally need passport details, dietary requirements and health information relevant to the trip (for example mobility needs), which we collect only as required by suppliers.
3. What We Collect Automatically
Our servers log standard technical data such as IP address and pages requested, used for security and debugging. We use your IP-derived country only to choose the currency prices are displayed in — this preference is stored in your browser, not on our servers. Aggregate analytics tell us which pages and packages are popular; they do not identify you personally.
4. How We Use Your Data
We use personal data to respond to enquiries, prepare quotes, deliver booked trips, meet legal obligations (such as tax and immigration requirements) and — only where you subscribe — send our newsletter. Enquiry details are routed to our planning team by email and WhatsApp alert so we can respond quickly. We do not sell personal data, and we do not use it for automated decision-making.
5. Who We Share It With
Booking details are shared with the specific lodges, hotels, airlines, transfer providers and activity operators delivering your trip — only what each needs. Our service providers include a database host, an email delivery service and an image CDN, each bound by data-processing terms. We disclose data to authorities only where the law requires it.
6. International Transfers
Some of our service providers store data outside Kenya. Where that happens we rely on providers with recognised security certifications and contractual safeguards consistent with the Data Protection Act, 2019.
7. How Long We Keep It
Enquiry data is kept for up to 24 months from last contact so we can pick up where we left off. Booking and payment records are kept for seven years to meet tax and audit obligations. Newsletter subscriptions are kept until you unsubscribe — every email contains an unsubscribe link that works immediately.
8. Security
Personal data is stored in access-controlled systems with encryption in transit, row-level access rules and least-privilege staff access. No system is perfectly secure, but we review our safeguards regularly and act quickly on any suspected incident, including notifying affected travellers and the Office of the Data Protection Commissioner where required.
9. Your Rights
You may request access to the personal data we hold about you, correction of inaccurate data, deletion where we have no legal duty to retain it, and restriction or objection to certain processing. You may also withdraw newsletter consent at any time. Email hello@provenadventures.com; we respond within 30 days. If you are unsatisfied, you may complain to the Office of the Data Protection Commissioner, Kenya.
10. Children's Data
We collect children's names and ages only as part of a parent's or guardian's travel enquiry or booking, for pricing and supplier requirements. We never knowingly collect data directly from children.
Questions about this policy? Email hello@provenadventures.com or write to Proven Adventures, Jahazi Building, James Gichuru Road, Lavington, Nairobi, Kenya.