Privacy Policy

Last updated: June 2026

1. Data Controller

Kuona Serengeti Lodge is the data controller responsible for your personal data. If you have any questions about this privacy policy, please contact us at:

Email: privacy@kuonaserengeti.com
Phone: +255 689 675 163
Address: Arusha, Tanzania

2. Information We Collect

We may collect the following categories of personal data:

  • Identity Data: name, email address, phone number
  • Booking Data: stay dates, room preferences, special requests, guest details
  • Technical Data: IP address, browser type, device information, pages visited
  • Usage Data: how you interact with our website, WhatsApp inquiries, newsletter engagement
  • Communication Data: messages sent via contact forms or WhatsApp

3. How We Use Your Data

  • To provide and manage your accommodation bookings
  • To respond to your inquiries via contact forms and WhatsApp
  • To send you newsletters and promotional offers (with your consent)
  • To improve our website through anonymous analytics
  • To comply with legal obligations

4. Legal Basis for Processing

  • Consent: for newsletter subscriptions, cookies (non-essential), and WhatsApp tracking
  • Contractual Necessity: for processing bookings and providing services
  • Legitimate Interest: for website analytics, security, and customer service improvement
  • Legal Obligation: for maintaining records as required by Tanzanian law

5. Cookies

We use cookies and similar technologies to enhance your browsing experience, analyze site traffic, and understand where our visitors come from. You can manage your cookie preferences at any time by clicking the “Cookie Preferences” link in the footer.

For a full list of cookies we use, please see our Cookie Policy.

6. Data Sharing

We do not sell your personal data. We may share data with:

  • Service providers (payment processors, email delivery services, hosting providers)
  • Google Analytics (anonymized usage data, only with your consent)
  • Law enforcement or regulators when required by law

7. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy:

  • Newsletter subscriptions: until you unsubscribe
  • Booking data: 5 years after your stay (tax/legal requirements)
  • Analytics data: 26 months (Google Analytics retention)
  • Consent records: 3 years after the last interaction

8. Your Rights

Under GDPR, you have the following rights:

  • Right to Access: request a copy of your personal data
  • Right to Rectification: correct inaccurate data
  • Right to Erasure: request deletion of your data
  • Right to Restrict Processing: limit how we use your data
  • Right to Data Portability: receive your data in a machine-readable format
  • Right to Object: object to processing based on legitimate interest
  • Right to Withdraw Consent: withdraw consent at any time

To exercise any of these rights, contact us at privacy@kuonaserengeti.com. We will respond within 30 days.

9. International Transfers

Your data may be transferred to and processed in countries outside Tanzania, including the European Economic Area (EEA). We ensure appropriate safeguards are in place, such as Standard Contractual Clauses, for such transfers.

10. Data Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (HTTPS), access controls, and regular security audits.

11. Complaints

If you believe we have not complied with data protection laws, you have the right to lodge a complaint with your local data protection authority.

12. Contact

For any questions about this privacy policy or our data practices:
Email: privacy@kuonaserengeti.com
Phone: +255 689 675 163
Address: Arusha, Tanzania