Data Privacy Policy

Last Updated: 15 June 2025

1. Introduction and Scope

QUANI PICK VENTURES LIMITED ('we', 'us', 'our') is committed to protecting your personal data. This Data Privacy Policy explains how we collect, use, process, and safeguard your information when you visit our website https://www.bekenya.com/, inquire about, or book our travel services. We adhere to the principles of the EU General Data Protection Regulation (GDPR), the UK GDPR, the Swiss Federal Act on Data Protection (FADP), the Kenyan Data Protection Act (DPA), and other relevant data privacy laws.

2. Data Controller and Data Protection Representative

The Data Controller responsible for processing your data is: QUANI PICK VENTURES LIMITED, 7365 00100 GPO NAIROBI, KENYA. Email: info@bekenya.com

For any data protection inquiries, you can contact our Data Protection Representative: Attn: James Gichina, Email: info@bekenya.com

3. Types of Data We Collect and Process

We collect various types of personal data depending on your interaction with us:

a) Website Usage Data: When you browse our site, we automatically collect technical data such as IP address, browser type and version, operating system, referral URL, and pages visited. This is processed based on our legitimate interest (Art. 6(1)(f) GDPR) to ensure website stability and security.

b) Communication Data: If you contact us via email or a contact form, we collect your name, email address, phone number, and the content of your message to respond to your inquiry, based on your consent or to take pre-contractual steps (Art. 6(1)(a/b) GDPR).

c) Booking and Contractual Data: To provide our travel services, we collect data necessary for contract fulfillment (Art. 6(1)(b) GDPR), including full legal names, addresses, dates of birth, passport details, nationality, payment information, and travel preferences.

d) Special Category (Sensitive) Data: For your safety and comfort, we may need to process sensitive data, such as dietary requirements, allergies, or health conditions relevant to your trip. We only process this data with your explicit consent (Art. 9(2)(a) GDPR).

e) Marketing Data: If you subscribe to our newsletter, we collect your email address based on your explicit consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

4. Data Recipients and International Transfers

Your data may be shared with trusted third parties to provide our services: Local Partners in Kenya (Hotels, safari operators, guides, transport companies), and Service Providers (Payment processors, booking systems, cloud hosting, marketing platforms). As our services are provided in Kenya, processing your booking requires transferring your personal data outside the EU/UK/Switzerland. Such transfers are necessary for the performance of our contract with you (Art. 49(1)(b) GDPR). For other transfers, we ensure an adequate level of protection through Standard Contractual Clauses (SCCs) or other recognized legal mechanisms.

5. Your Data Subject Rights

You have comprehensive rights regarding your personal data: the Right of Access (Art. 15 GDPR), Right to Rectification (Art. 16 GDPR), Right to Erasure ('Right to be Forgotten') (Art. 17 GDPR), Right to Restriction of Processing (Art. 18 GDPR), Right to Data Portability (Art. 20 GDPR), Right to Object (Art. 21 GDPR), Right to Withdraw Consent (Art. 7 GDPR), and the Right to Lodge a Complaint with a supervisory authority.

6. Specific Provisions for US Residents (e.g., California)

We do not 'sell' or 'share' your personal information as defined by the California Consumer Privacy Act (CCPA). You have the right to know what personal information is collected and the right to request its deletion. To exercise these rights, please contact us.

7. Data Security and Retention

We implement robust technical and organizational measures, including SSL/TLS encryption, to protect your data. We retain personal data only as long as necessary for the purposes it was collected for, or as required by law (e.g., for tax and accounting purposes, which can be up to 10 years).

8. Cookies and Tracking Technologies

Our website uses cookies. Essential cookies are necessary for site functionality. For all other cookies (e.g., analytics, marketing from providers like Google Analytics), we require your explicit prior consent, which is managed via our cookie consent banner. You can adjust your preferences at any time.