Privacy Policy

1. Who we are

Zorani Expeditions Ltd (“Zorani”, “we”, “us”) is the data controller for personal information collected through this website and our booking process. We are committed to handling your data with care and in compliance with applicable data protection law.

2. What data we collect

We may collect the following categories of personal data:

• Enquiry data: name, email address, phone number, travel dates, group size, and any notes you provide when submitting a journey enquiry or contact form
• Booking data: passport information, dietary requirements, emergency contacts, and health information required for safari planning
• Usage data: pages visited, time on site, and referral source, collected via analytics tools (Google Analytics 4)
• Communication data: records of email and message exchanges
• Unfinished enquiry forms: if you tick the box to save your progress, what you type into an enquiry form before sending it (name, email address, phone number, country and your travel plans), saved as you fill it in

3. How we use your data

We use your personal data to:

• Respond to journey enquiries and prepare itinerary proposals
• Process and manage confirmed bookings
• Communicate journey logistics, updates, and documentation
• Comply with legal obligations (e.g. entry requirements, permit applications)
• Improve our website and services through aggregated analytics
• Send you one email about an enquiry form you started but did not send, if you ticked the box to save your progress and entered your email address. That email includes a link to stop such reminders

We rely on legitimate interests or contractual necessity as our lawful basis for processing, and on your consent for optional cookies and for saving unfinished enquiry forms. We will ask for your explicit consent before sending marketing communications.

4. Who we share data with

We share your data only where necessary: with in-country ground operators and lodges to fulfil your booking, with payment processors to handle transactions, and with permit authorities (e.g. Uganda Wildlife Authority, Rwanda Development Board) for activity permits. We do not sell your data.

5. Data retention

Enquiry data is retained for 2 years. Booking data is retained for 7 years for legal and accounting purposes. You may request deletion of enquiry data at any time where we have no ongoing obligation to retain it.

Unfinished enquiry forms are deleted 30 days after your last change, and their personal details are removed as soon as you send the enquiry. If you ask us to stop reminders, we keep only a one-way coded form (hash) of your email address, so that we never send you a reminder again.

6. Cookies and analytics

We use optional cookies only with your consent, which you give or refuse in the cookie notice and can change at any time through “Cookie settings” at the bottom of every page. Analytics cookies (Google Analytics 4, and our own first-party __session cookie, kept for 30 days) help us understand how visitors use the site; advertising cookies (Google Ads) measure the results of our advertising. Until you consent, these tools are not loaded and no such cookies are set.

We also set one functional cookie, zx_lang, that remembers your language: it is set when you first visit the site in a language other than English (for example when your browser prefers German and we show you the German version) or when you choose a language in the menu, and it keeps that choice for up to 12 months. It contains only the language code and is not used for analytics or advertising.

Saving an unfinished enquiry form is a separate choice made at the form itself, not through cookies. If you tick the box to save your progress, your browser keeps a random code for that form during your visit so that your entries can be matched. Unless you tick that box, nothing you type in a form reaches us before you send it, and unticking it deletes what was saved.

7. Your rights

Under applicable data protection law you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request erasure (subject to legal retention obligations)
• Object to or restrict processing
• Data portability in a machine-readable format
• Withdraw consent at any time where processing is consent-based

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Security

We maintain appropriate technical and organisational measures to protect your data against unauthorised access, loss, or disclosure. Data is stored on servers with encryption at rest and in transit.

9. Changes to this policy

We may update this policy from time to time. The effective date at the top of this page indicates when the current version was last revised. Continued use of this website after changes constitutes acceptance.

10. Contact

For privacy-related queries or to exercise your rights, email us at [email protected].