Privacy Policy

This policy explains what personal data Osat International Tours & Travels (“Osat”, “we”, “us”) collects when you contact us or use this website, why we collect it, and the choices you have. We are the data controller for that information. Our office is in Westlands, Nairobi, Kenya, and you can reach us at info@osatintltourstravels.com or +254 719 686 969.

What we collect

• Enquiry details you give us through the website form, by email, phone or WhatsApp: your name, email address, phone number, country, travel dates, party size, budget range and anything you write in the message field.
• Booking details we need to make a reservation on your behalf: traveller names as they appear on passports, passport numbers where an airline or immigration authority requires them, dates of birth, dietary or accessibility needs, and next-of-kin or emergency contact details.
• Payment details where relevant. Card and bank information is handled by our payment providers or the supplier being paid; we do not store full card numbers.
• Basic technical data your browser sends automatically, such as IP address and pages visited, kept in short-lived server logs for security and to keep the site working.

Why we use it, and our legal basis

• To answer your enquiry and prepare a quote — on the basis of taking steps at your request before entering a contract.
• To arrange and manage your booking with airlines, lodges, hotels, transfer companies, insurers and other suppliers — to perform our contract with you.
• To support you during travel, including if plans change — to perform our contract with you.
• To meet legal, accounting and tax obligations, and to handle complaints or disputes — to comply with the law and for our legitimate interest in running the business responsibly.
• To send you occasional updates about our services, only where you have asked us to or have not objected — on the basis of consent, which you can withdraw at any time.

Who we share it with

We share only what a supplier needs to deliver your trip: airlines, ground and safari operators, lodges and hotels, airport-transfer providers, and travel insurers. Some of these are outside Kenya, so making your booking necessarily involves transferring your data to the country you are travelling to or through. We also use service providers who help us operate — for example our website host and email provider — under contracts that require them to protect your data. We may disclose information where the law requires it. We do not sell your personal data.

How long we keep it

We keep enquiry records for up to two years if they do not lead to a booking. Booking and financial records are kept for seven years to meet tax and accounting requirements, then deleted or anonymised.

Cookies and analytics

This site currently uses only the cookies needed for it to function and to keep the CMS secure. It does not run third-party advertising or analytics trackers. If that changes we will update this policy and, where required, ask for your consent first.

Your rights

Under the Kenya Data Protection Act 2019 — and, if you are in the EU or UK, the GDPR — you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or provide it in a portable format. To make a request, email info@osatintltourstravels.com. We will respond within the timeframe the law allows. If you are not satisfied, you can complain to the Office of the Data Protection Commissioner in Kenya (odpc.go.ke), or to your local supervisory authority.

Changes to this policy

We may update this policy as our services or the law change. The date above shows when it was last revised.