Advantage Online LTD ("we," "our," or "us") operates SafariFlow, a tour
operations management platform. This Privacy Policy explains how we collect, use, disclose, and
protect your information when you use our services.
1. Information We Collect
1.1 Information You Provide
When you register for SafariFlow, we collect:
- Account Information: Company name, contact person name, email address, phone
number
- Business Information: Company registration details, physical address, business
type
- Payment Information: Billing address and payment method details (processed
securely by Lemon Squeezy)
- Content: Customer data, itineraries, bookings, suppliers, and other information
you enter into our platform
1.2 Automatically Collected Information
- Device Information: IP address, browser type, operating system
- Usage Data: Pages visited, features used, time spent on platform
- Cookies: See our Cookie Policy
2. How We Use Your Information
We use collected information for:
- Service Delivery: Providing, maintaining, and improving SafariFlow
- Customer Support: Responding to inquiries and providing technical assistance
- Billing: Processing payments and managing subscriptions
- Security: Detecting and preventing fraud, abuse, and security incidents
- Legal Compliance: Meeting regulatory obligations under Kenyan law and
international standards
- Product Development: Analyzing usage patterns to enhance features
- Marketing: Sending relevant updates (with your consent)
3. Legal Basis for Processing (Kenya DPA & GDPR)
We process your personal data under the following legal bases:
- Contract Performance: To fulfill our service agreement with you
- Consent: Where you've given explicit permission (e.g., marketing emails)
- Legitimate Interests: For business purposes like fraud prevention and service
improvement
- Legal Obligation: To comply with Kenyan tax, data protection, and business laws
4. Data Sharing and Disclosure
We share your information only in these circumstances:
4.1 Service Providers
- Payment Processing: Lemon Squeezy (for subscriptions)
- Hosting: Cloud infrastructure providers
- Email Services: For transactional and support communications
- Analytics: To improve platform performance
All third parties are bound by confidentiality agreements and process data
only as instructed.
4.2 Legal Requirements
We may disclose information if required by:
- Kenyan courts or government authorities
- Law enforcement agencies (with valid legal process)
- Tax authorities (KRA) for tax compliance
4.3 Business Transfers
If Advantage Online LTD is acquired or merged, your data may be transferred to the new entity,
subject to this Privacy Policy.
5. Data Transfers
Your data may be stored and processed in:
- Kenya (where Advantage Online LTD is registered)
- International data centers compliant with GDPR standards
When transferring data internationally, we ensure adequate protection
through:
- Standard Contractual Clauses (SCCs) approved by the EU Commission
- Adequacy decisions where applicable
- Appropriate safeguards as required by the Kenya Data Protection Act
6. Your Rights (Kenya DPA & GDPR)
You have the following rights regarding your personal data:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate or incomplete data
- Erasure: Request deletion of your data ("right to be forgotten")
- Data Portability: Receive your data in a structured, machine-readable format
- Restriction: Limit how we process your data
- Objection: Object to processing based on legitimate interests
- Withdraw Consent: Revoke consent for marketing or other opt-in processing
To exercise these rights, contact us at [email protected]. To request deletion of
your account and data, visit our Delete My Account page.
7. Data Retention
We retain your data for as long as:
- Your account is active
- Needed to provide services
- Required by Kenyan law (e.g., tax records: 5 years)
- Necessary for legal obligations or dispute resolution
Upon account deletion, we permanently erase personal data within 30 days,
except where legal retention is required. See our Delete My Account page for how to request deletion and
what data is retained.
8. Security Measures
We protect your data through:
- SSL/TLS encryption for data in transit
- Database encryption for sensitive information
- Regular security audits and updates
- Access controls and authentication
- Employee training on data protection
- Incident response procedures
9. Children's Privacy
SafariFlow is not intended for individuals under 18. We do not knowingly collect data from minors. If
we discover such data, we will delete it immediately.
10. Changes to This Policy
We may update this Privacy Policy periodically. Changes will be posted on this page with an updated
"Last Updated" date. Material changes will be communicated via email.
11. Data Protection Officer
For data protection inquiries:
12. Regulatory Authority
If you believe we've violated your data protection rights, you may lodge a complaint with:
13. Contact Us
For questions about this Privacy Policy: