“The land of endless adventure — let us show you every corner of it.”
— NyotaDrive Team
Effective Date: June 18, 2026
Effective Date: June 18, 2026
NyotaDrive Tours & Travel ("NyotaDrive," "we," "us," or "our") is a tour operator based in Karen, Nairobi, Kenya. This Privacy Policy explains how we collect, use, store, and protect your personal information when you access our website at nyotadrive.com (the "Platform") or make a booking with us.
By using the Platform, you acknowledge that you have read and understood this Privacy Policy. This policy should be read alongside our Terms of Use.
2.1 Account Information. When you register, we collect your name, email address, and a securely hashed version of your password. We do not store plain-text passwords at any time.
2.2 Booking Data. When you make a tour reservation, we collect the information you provide in the booking form: your selected tour, travel date, number of travelers, contact phone number, and any special requests. We use this information solely to fulfil and manage your booking.
2.3 Payment Information. Payment for bookings is processed through our secure payment system. NyotaDrive does not store your full card number or CVV. We receive only a confirmation reference and the transaction amount from our payment processor.
2.4 Contact Form. If you contact us via our contact form, we retain your name, email address, and the content of your message in order to respond to you.
2.5 Technical Data. We automatically collect standard server logs when you use the Platform, including your IP address, browser type, pages visited, and timestamps. We use this data to operate and improve the Platform.
2.6 What We Don't Collect. We do not collect government-issued ID numbers, biometric data, full payment card details, or any sensitive personal data beyond what is necessary to process your booking.
We use the information we collect to:
(a) Create and manage your account;
(b) Process and confirm your tour bookings;
(c) Send transactional communications, including booking confirmations, itinerary details, pre-departure information, and support responses;
(d) Operate, maintain, and improve the Platform;
(e) Detect and prevent fraud or unauthorized use;
(f) Comply with applicable legal obligations;
(g) Send marketing communications if you have opted in — you may opt out at any time using the unsubscribe link in any marketing email.
We do not sell, rent, or share your personal data with third parties for their marketing purposes.
We share your information only in the following limited circumstances:
(a) Our guides and local partners: We share booking details (name, travel date, group size, special requests) with the guides and partner lodges or operators that will deliver your Tour. These parties are bound by confidentiality obligations and may not use your data for any other purpose.
(b) Payment processor: We share the minimum information necessary to process your payment. Our payment processor does not receive your full account data and is bound by their own privacy policy.
(c) Legal requirements: We may disclose your data where required by Kenyan law, court order, or governmental authority, or to protect the safety of our Travelers, guides, or the public.
(d) Business transfers: In the event of a merger, acquisition, or asset sale, your data may be transferred to the acquiring entity under equivalent privacy protections.
NyotaDrive does not use third-party tracking cookies or advertising cookies.
We use browser local storage for strictly necessary purposes only:
(a) Maintaining your authenticated login session;
(b) Storing interface preferences within the Platform.
Local storage data stays on your device. You can clear it at any time through your browser settings, which will log you out of the Platform.
All NyotaDrive services are self-hosted on our own dedicated servers. We implement reasonable technical and organizational security measures including HTTPS/TLS encryption for all Platform communications, bcrypt password hashing, and role-based access controls.
No method of data transmission over the internet is 100% secure. While we use industry-standard practices, we cannot guarantee the absolute security of your data. In the event of a breach likely to affect your rights, we will notify you and any relevant authorities as required by Kenyan data protection law.
We retain your account and booking data for as long as your account remains active and for a reasonable period thereafter as necessary to resolve disputes, comply with legal obligations, and maintain financial records.
You may request deletion of your account by emailing hello@nyotadrive.com. We will action deletion requests within 30 days, subject to any legal retention requirements.
Subject to applicable law, you have the right to:
(a) Access the personal data we hold about you;
(b) Correct inaccurate or incomplete data;
(c) Delete your data, subject to legal retention requirements;
(d) Restrict certain processing of your data;
(e) Object to processing based on legitimate interests;
(f) Withdraw consent where processing is consent-based.
To exercise any of these rights, contact us at hello@nyotadrive.com. We will respond within 30 days.
The Platform is not directed at children under 18. We do not knowingly collect personal data from minors. If you believe a child under 18 has submitted personal data through the Platform, please contact us and we will delete it promptly.
We may update this Privacy Policy from time to time. We will notify you of material changes by email or by a notice on the Platform at least 14 days before the changes take effect. The "Effective Date" at the top of this page will be updated accordingly.
For privacy-related questions or data requests:
Email: hello@nyotadrive.com
Address: Karen Road, off Langata Road, Nairobi, Kenya