Privacy policy
Version 1.0 · effective 13 November 2026
This policy explains how BAHE Safaris (“we”) handles personal information about travellers, website visitors and people who contact us. We are the data controller for this information.
What we collect
When you enquire or book: your name, email address, phone number, country, travel dates, number of travellers and the details you choose to share about your trip.
When you travel with us: passport details (needed for park permits and flights), date of birth, dietary needs, relevant medical information, emergency contact and travel insurance details.
When you visit our website: pages viewed, the website you came from, your general device type and country. We do not store your IP address. If you accept analytics cookies we set an anonymous identifier so we can tell new and returning visitors apart. See our cookie policy.
Why we use it
| Purpose | Lawful basis |
|---|---|
| Reply to your enquiry and prepare a proposal | Your request and consent |
| Book parks, flights, camps and transport for your trip | Performance of our contract with you |
| Look after your safety and handle emergencies | Contract; your vital interests |
| Keep accounting and tax records | Legal obligation |
| Send our occasional newsletter | Your consent (you can unsubscribe at any time) |
| Improve our website | Our legitimate interest, and your consent for analytics cookies |
Who we share it with
Only with those who need it to deliver your trip: national park authorities, camps and lodges, airlines, and - in an emergency - medical and evacuation providers. Some of these are outside Tanzania (for example your airline). We share only what is necessary. We never sell personal data.
How long we keep it
- Enquiries that do not become bookings: up to 2 years, then deleted.
- Booking and payment records: as long as tax and accounting law requires (generally at least 5 years).
- Passport and medical details: deleted or anonymised 12 months after your trip, unless needed for an open claim.
- Website analytics: up to 13 months.
How we protect it
Our systems are access-controlled, staff accounts are individual, activity is logged, and staff are trained in our data protection procedure. Sensitive details are shared with suppliers only through secure channels.
Your rights
You can ask us to:
- tell you what personal data we hold about you and give you a copy;
- correct anything that is wrong;
- delete data we no longer need;
- stop using your data for marketing, or object to other uses;
- withdraw consent at any time.
Write to the email address on our contact page. We will reply within the time the law allows. If you are unhappy with our response, you may complain to the Personal Data Protection Commission of Tanzania.
Changes
We will update this policy when our practices change. The version and date are shown at the top.
Other policies