Política de privacidad

Elyson Adventures Limited (“Elyson”, “we”, “us”) plans private safaris and travel in East Africa from Kampala, Uganda. This policy explains what personal information we collect through elysonadventures.com and when you travel with us, why we collect it, who we share it with, how long we keep it and the rights you have over it.

We are the data controller for this information. We handle it in line with Uganda’s Data Protection and Privacy Act, 2019 and, for travellers in the European Union and the United Kingdom, the General Data Protection Regulation (GDPR).

What we collect

When you send an enquiry: your name, email address, phone number and country; the destinations, travel dates, trip length, number of travellers and budget you choose; your message; the package page you came from, if any; and the language you were using on the website.

When you request a booking: your name, email address, phone number and country; the package, start date and number of adults and children; and any notes you add.

When you travel with us: further details the trip needs, given directly to our team, such as passport details for park permits and flights, dietary or medical needs you choose to tell us about, and an emergency contact. We ask only for what your trip requires.

When you use the website: your IP address, used only to protect our forms from spam and abuse. Our hosting provider also keeps short-lived technical logs to run the site securely.

We do not use analytics or advertising trackers, and we never sell your information.

How we use it

• To reply to your enquiry, plan your trip and send you a quote.
• To confirm and manage your booking, and to email you a copy of what you sent us.
• To reserve permits, accommodation, transport and activities for your trip.
• To take payments and keep the records that accounting and tax law require.
• To keep the website and its forms secure.

We use your information because you asked us to plan or book a trip (steps before and under a contract with you), because the law requires certain records, and because we have a legitimate interest in keeping our website secure. We do not send marketing emails unless you have agreed to receive them, and you can stop them at any time.

Who we share it with

Suppliers of your trip: lodges and hotels, park and wildlife authorities (for example the Uganda Wildlife Authority and the Rwanda Development Board), airlines, guides and drivers. Each receives only what it needs to provide its part of your trip.

Companies that run our website and email for us, under contract and only on our instructions:

• Vercel — website hosting (servers in Frankfurt, Germany).
• Neon — database and file storage (Frankfurt, Germany).
• Resend — sending the emails you receive from us and the copies our team receives.
• Pesapal — card payments when you pay online. Your card details go directly to Pesapal; we never see or store them.

Authorities, when the law requires it.

Content from other services

Some parts of our pages come from other companies, which receive your IP address when they load and may set their own cookies under their own privacy policies:

• Traveller reviews on the home page are shown by Elfsight, and load only when you scroll to them.
• Videos inside articles are played by YouTube in its privacy-enhanced mode (youtube-nocookie.com).
• The map on the About page is shown by Google Maps.

Links to WhatsApp, Instagram, Facebook, TikTok, X, Threads and Tripadvisor take you to those services, whose own policies then apply.

Cookies

Our website uses only cookies it needs to work: one remembers the language you chose, and our staff area uses a sign-in cookie. We do not set advertising or tracking cookies. The services listed above may set their own cookies when their content loads.

Where your information is kept

Our website and database run on servers in Frankfurt, Germany, in the European Union. Some of our service providers and trip suppliers are in other countries, including Uganda, Rwanda, Kenya, Tanzania and the United States. When your information is transferred abroad, we use providers that protect it to the standard required by Ugandan law and, where it applies, the GDPR.

How long we keep it

After that, we delete the information or make it anonymous.

How we protect it

The website only works over encrypted connections (HTTPS). Enquiries and bookings can only be seen by our staff, who sign in with a password. Our providers keep the information on secured servers. No system is perfectly secure, so if a breach puts your information at risk, we will tell you and the authorities as the law requires.

Your rights

You can ask us at any time to:

• Tell you what information we hold about you and give you a copy.
• Correct information that is wrong or incomplete.
• Delete your information, unless the law requires us to keep it.
• Stop or limit how we use it, or object to a particular use.
• Withdraw consent you have given, such as to marketing emails.

Email [email protected] and we will reply within 30 days. If you are not happy with our answer, you can complain to Uganda’s Personal Data Protection Office (pdpo.go.ug) or, if you live in the EU or UK, to your local data protection authority.

Children

Family trips are booked by adults. We collect details of children only from the adult booking for them, and only what the trip needs, such as age for permits and accommodation.

Changes to this policy

We update this policy when the way we handle information changes. The date at the top of the page shows the latest version.