Who we are
Savannah Scape is a Nairobi-based travel company. For the information described in this policy, Savannah Scape is the data controller. You can contact us at support@savannahscape.com or at Embassy HSE, 5th Floor, Nairobi, Kenya.
Information we collect
- Contact details such as your name, phone number, email address, and WhatsApp profile name.
- Trip details such as destination, dates, group size, preferences, and special requests.
- Booking records, ticket or booking references, amounts due, and booking status.
- Website-chat and WhatsApp messages, message identifiers, delivery status, and conversation history needed to assist you.
- M-Pesa transaction references, payer phone number, amount, and verification status. We do not ask for or store your M-Pesa PIN.
- Website analytics and cookie choices when analytics is enabled and you consent.
How we use information
We use information to answer enquiries, recommend trips, create and manage bookings, provide PayBill instructions, verify payments, send confirmations and service updates, prevent fraud, support customers, and meet legal and accounting obligations.
Our lawful bases include performing a contract or taking steps at your request, our legitimate interests in operating and securing our travel service, compliance with legal obligations, and consent where required.
Website chat, WhatsApp and automated assistance
When you message Savannah Scape on WhatsApp, Meta processes the communication under its own terms. Our website and WhatsApp assistants may respond automatically, collect booking details, provide payment instructions, and hand the conversation to a member of our team. Selected message content is processed by DeepSeek to generate relevant replies. Do not send an M-Pesa PIN, password, card number, passport scan, or one-time code in chat. Payment is only confirmed after the submitted M-Pesa reference has been verified.
Service providers and sharing
We share only the information needed with providers that help us deliver the service, including Meta for WhatsApp messaging, DeepSeek for AI-generated customer-service replies, PalPluss for M-Pesa payment initiation or verification, Vercel for hosting, Neon for database hosting, and email or analytics providers when configured. We may also share necessary booking details with hotels, transport providers, guides, and other trip suppliers. We do not sell personal information.
Optional cookies and website measurement
With your permission, we use Google Analytics to measure visits and enquiry interactions, Microsoft Clarity for heatmaps and session recordings, and Meta Pixel to measure advertising performance. These providers may receive browsing activity, page addresses, device information and cookie identifiers under their own privacy policies.
These tools load only after you accept optional cookies. You can decline and still use our services, or change your choice using Cookie settings in the website footer. We exclude staff, booking and payment pages from this tracking and mask website-chat content in Clarity recordings. We do not supply customer names, email addresses, phone numbers or chat messages as tracking-event fields.
Learn more in the Google privacy policy, Microsoft privacy statement and Meta privacy policy.
Retention and security
We retain enquiries only as long as they remain useful for customer service, and booking and payment records for the period required to operate the trip, resolve disputes, prevent fraud, and meet tax or accounting rules. Access is restricted to authorised staff and service providers, and credentials are stored in protected server configuration rather than in public website code.
Your choices and rights
You may ask to access, correct, object to certain uses of, or delete your personal information. You may also withdraw marketing consent at any time. Some records may be retained where the law requires it or where they are needed to establish or defend legal claims. See our data deletion instructions to make a request.
Changes to this policy
We may update this policy as our services or legal obligations change. The latest version and its effective date will always appear on this page.