Privacy Policy
Last updated: December 2026
This Privacy Policy explains how Colopolo Safari Ltd · TIN 193-559-336 · P.O. Box 10577, Arusha — Tanzania ("Colopolo Safari", "we", "us") collects, uses and protects personal data of visitors and clients in compliance with the EU General Data Protection Regulation (Regulation 2016/679 — "GDPR") and Tanzanian data protection law.
1. Data Controller
Data Controller: Colopolo Safari Ltd, P.O. Box 10577, Arusha — Tanzania. TIN: 193-559-336. Contact: info@colopolosafari.com.
2. Data we collect
Information you provide when using the Design Your Safari form, requesting a quote, contacting us by email or WhatsApp: first and last name, email address, phone/WhatsApp number, country of residence, travel dates, number of travellers, preferences and any additional information you share.
Reviews and ratings submitted via Trustpilot (managed by Trustpilot A/S — separate data controller).
Technical data collected through analytics cookies: anonymised IP, browser, device, pages visited, referrer, session duration.
3. Purposes and legal basis
Replying to your safari requests and producing tailor-made quotations — performance of pre-contractual measures (Art. 6(1)(b) GDPR).
Operational communication before, during and after your trip — performance of contract (Art. 6(1)(b) GDPR).
Compliance with legal and tax obligations — legal obligation (Art. 6(1)(c) GDPR).
Aggregated analytics to improve the website — legitimate interest (Art. 6(1)(f) GDPR), only with your consent for non-essential cookies.
4. WhatsApp & email
When you contact us via WhatsApp, your phone number and message content are processed by WhatsApp Ireland Ltd / Meta Platforms Ireland Ltd under their own privacy policy. We use a single official WhatsApp Business number for client communication.
Emails are processed via secure SMTP providers located inside the EU/EEA.
5. Third-party services
Hosting & CDN: Cloudflare Inc. (data may transit through EU and global edge nodes).
Analytics: privacy-friendly aggregated analytics — no profiling.
Reviews: Trustpilot A/S, Denmark.
Booking confirmations may require sharing minimum necessary data (name, passport, travel dates) with lodges, airlines, parks and ground operators in Tanzania and Kenya.
6. Data retention
Quote requests: 24 months from the last contact.
Confirmed bookings & accounting records: 10 years (Tanzanian tax law).
Marketing communications: until you withdraw consent.
7. International transfers
Some processors are located outside the EU/EEA. Transfers rely on Standard Contractual Clauses approved by the European Commission and additional safeguards where required.
8. Your rights
You have the right to access, rectify, erase, restrict and port your data, to object to processing and to withdraw consent at any time without affecting prior lawful processing.
You may lodge a complaint with your local Data Protection Authority.
To exercise your rights: info@colopolosafari.com.
9. Security
We apply technical and organisational measures (encryption in transit, access control, principle of least privilege) to protect your data against unauthorised access, loss or alteration.
10. Changes
We may update this policy. The latest version is always available on this page with the "Last updated" date.