Msafiri App Privacy Policy

Msafiri App Data Privacy Statement

Introduction

Your privacy is important to us. This privacy statement explains the personal data Msafiri App collects, how Msafiri App processes it, and for what purposes.

This statement should be read together with the End of User Agreement for the Msafiri App. Where there is a conflict, this statement will prevail.

This statement applies to all customers and all visitors frequenting any services of Msafiri's websites.

Definitions

  • "You" means:
    • Customer - the person who uses or does bookings from any of the listings or even utilizes the services of this App.

Statement Details

Collection of Information

We collect your personal information with your knowledge and consent when you do any of the following (please note this list is not exhaustive):

  • Book travel-related services such as accommodations, or tours through the Msafiri App.
  • Respond to or participate in a survey or marketing campaign.
  • Visit, access, or use the Msafiri App or third-party websites.
  • Interact with us as a supplier, agent, or partner as prescribed in this statement.

What Information is Collected?

The information we collect and store about you includes but is not limited to the following:

  • Your Identity card registration information, including your name, address, location, phone number, email address, age, and gender.
  • Your credit or debit card information.
  • Your transaction information when you pay via Mpesa or other payment services.
  • Your travel preferences, such as preferred destinations, accommodations, or airlines, based on information provided by you or from your use of the Msafiri App or third-party services.
  • Your contact with us, such as when you call us or interact with us when making a booking.
  • We maintain a register of callers for customer support purposes.

Use of Your Information

We may use and analyze your information for the following purposes:

  • Processing travel bookings and related services that you have purchased through the Msafiri App.
  • Billing you for the services you have booked.
  • Responding to any of your queries or concerns regarding your bookings or travel plans.
  • Keeping you informed generally about new travel deals, destinations, and contacting you with offers or promotions based on how you use our or third-party services (unless you opt out of receiving such marketing messages).
  • To comply with any legal, governmental, or regulatory requirement or for use by our lawyers in connection with any legal proceedings.
  • In business practices, including quality control and ensuring effective operations.
  • To understand how our services are used for purposes of developing or improving them.
  • Preventing and detecting fraud or other crimes.
  • For research, statistical, survey, and other scientific or business purposes.
  • Provide aggregated data (which does not contain any information that may identify you as an individual) to third parties for research and scientific purposes.
  • Administer any of our online platforms/websites.

Categories of Data

Categories of Personal Data as defined in the Data Protection Act of Kenya may be processed depending on the particular types of services you have subscribed to.

Lawful Basis for Processing Your Information

We will process your personal information based on any of the lawful bases provided for under the Data Protection Law:

  • The performance of a service agreement with you.
  • Compliance with a mandatory legal obligation.
  • Consent you provide.
  • Public interest.
  • Your vital interest.

Retention of Information

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying our legal, regulatory, tax, accounting, or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data, and whether we can achieve those purposes through other means, the need to comply with our internal policy, and the applicable legal, regulatory, tax, accounting, or other requirements.

Anonymized information that can no longer be associated with you may be held indefinitely.

Disclosure of Information

Any disclosure of your information shall be in accordance with applicable law and regulations. Msafiri App shall assess and review each application for information and may decline to grant such information to the requesting party.

We may disclose your information to:

  • Law enforcement agencies, regulatory authorities, courts, or other statutory authorities in response to a demand issued with the appropriate lawful mandate and where the form and scope of the demand are compliant with the law.
  • Our subsidiaries, associates, partners, software developers, or agents who are involved in delivering services you book.
  • Fraud prevention and anti-money laundering agencies, credit reference agencies.
  • Publicly available and/or restricted government databases to verify your identity information in order to comply with regulatory requirements.
  • Debt-collection agencies or other debt recovery organizations.
  • Survey agencies that conduct surveys on our behalf.
  • Any other person that we deem legitimately necessary to share the data with.

We shall not release information to any individual or entity that is acting beyond its legal mandate.

We will get your express consent before we share your personal data with any third party for direct marketing purposes.

We do not onboard minors (any person under 18 years of age) except where you additionally register on their behalf as their parent and/or legal guardian. If you allow a child to use our services, you should be aware that their personal information could be collected as described in this statement.

The Use of Cookies

We may store information (using "cookies") on your computer when you visit our website. This enables us to recognize you during subsequent visits. The type of information gathered is non-personal (such as: the Internet Protocol (IP) address of your computer, the date and time of your visit, which pages you browsed, and whether the pages have been delivered successfully.

We may also use this data in aggregate form to develop customized services tailored to your individual interests and needs. Should you choose to do so, it is possible (depending on the browser you are using) to be prompted before accepting any cookies or to prevent your browser from accepting any cookies at all. This will, however, cause certain features of the website not to be accessible.

The Use of Hyperlinks

Our website may provide hyperlinks to other locations or websites on the internet. These hyperlinks lead to websites published or operated by third parties who are not affiliated with or in any way related to us and have been included in our website to enhance your user experience and are presented for information purposes only.

We do not endorse, recommend, approve, or guarantee any third-party products and services by providing hyperlinks to an external website or webpage and do not have any co-operation with such third parties unless otherwise disclosed. We are in no way responsible for the content of any externally linked website or webpage.

By clicking on a hyperlink, you will leave the Msafiri App webpage and accordingly, you shall be subject to the terms of use, privacy, and cookie policies of the other website that you choose to visit.

Access to and Updating Your Information

To update your information, go to https://msafiri.ke. You can change how we get in touch with you and your account details whenever you like.

Safeguarding and Protection of Information

Msafiri App has put in place technical and operational measures to ensure the integrity and confidentiality of your data via controls around: information classification, access control, cryptography, physical and environmental security, and monitoring and compliance.

Your Rights

Subject to legal and contractual exceptions, you have rights under data protection laws in relation to your personal data. These are listed below:

  • Right to be informed that we are collecting personal data about you.
  • Right to access personal data that we hold about you and request information about how we process it.
  • Right to request that we correct your personal data where it is inaccurate or incomplete.
  • Right to request that we erase your personal data, noting that we may continue to retain your information if obligated by the law or entitled to do so.
  • Right to object and withdraw your consent to the processing of your personal data. We may continue to process if we have a legitimate or legal reason to do so.
  • Right to request restricted processing of your personal data, noting that we may be entitled or legally obligated to continue processing your data and refuse your request.
  • Right to request the transfer of your personal data in an electronic format.

If you wish to exercise any of the rights set out above, please contact us at info@msafiri.ke.

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

How to Contact Us

If you would like to contact us on any topics in this privacy policy, you can email us at info@msafiri.ke or submit a request via our digital platform.

Right to Lodge Complaint

You have the right to lodge a complaint with the relevant supervisory authority that is tasked with personal data protection within the Republic of Kenya.

Non-compliance with This Statement

Msafiri App shall have the right to terminate any agreement with you for failure to comply with the provisions of this statement and reject any application for information contrary to this statement.

Amendments to This Statement

Msafiri reserves the right to amend or modify this statement at any time. If Msafiri App amends this statement, you can access the most current version of the privacy statement by clicking this link: Msafiri Privacy Statement, so that you will always know how your personal information is being used or shared. Any amendment or modification to this statement will take effect from the date of notification on the Msafiri website.

Last updated: March 20, 2025