JKIA Main Terminal 1, Parking RM053 · The desk is inside the airport · Open 24/7

Privacy Policy

Your data travels as carefully as you do. Here is what we collect, why, and the rights Kenyan law gives you over it.

The short version: we collect what your trip needs — name, contact, route, flight number — we use it to drive you well, we share it only with the people making your journey happen, and the Data Protection Act, 2019 gives you the final word on it.

01Who we are

Dimmi Safaris & Tour ("Dimmi", "we", "us") is a private transport and safari company headquartered inside Jomo Kenyatta International Airport, Main Terminal 1, Parking RM053, Nairobi, Kenya. For the purposes of the Kenya Data Protection Act, 2019 (the "DPA"), we are the data controller for the personal information described in this policy.

02What we collect

We only collect what a journey needs. Depending on how you use our services, that may include:

  • Identity and contact details — name, phone number, email address
  • Trip details — pickup and drop-off locations, dates, times, flight numbers, passenger counts and special requests
  • Booking records — references, vehicle choices, agreed fares and payment confirmations (we never store full card numbers)
  • Communication records — WhatsApp threads, emails and call notes with our desk
  • Technical data — pages visited, device and browser information, and analytics identifiers collected when you browse this site

03Why we use it

Personal data is processed for these purposes only: to quote and fulfil your transport bookings; to dispatch and coordinate drivers; to track your flight so pickups adjust to delays; to take and confirm payment; to answer enquiries; to meet tax, licensing and other legal obligations; and — where you have agreed — to send service updates and offers you can opt out of at any time.

Under the DPA, our lawful bases are performance of a contract (your booking), legitimate interest (running a safe, reliable service), legal obligation (records for KRA and regulators), and consent (marketing).

04Who we share it with

Your data moves only as far as your journey does:

  • Our drivers and dispatch coordinators — the minimum needed to collect you safely
  • Payment processors (such as PesaPal and M-Pesa) — to complete transactions you initiate
  • Email and messaging providers — to deliver confirmations and replies you asked for
  • Regulators, law enforcement or insurers — only where the law requires it, or to protect safety, property and legal rights
  • Vetted safari and hotel partners — only when your itinerary involves them, and only the details they need

05Where it goes and how long it stays

Most processing happens in Kenya. Some service providers store data in other countries; where that happens we use contractual safeguards consistent with the DPA. We keep booking records for the period required by Kenyan tax and transport law (generally up to seven years), enquiry data for up to two years, and technical/analytics data for up to fourteen months — then it is deleted or anonymised.

06How we protect it

Access to personal data is limited to staff who need it to do their job. Our systems use encrypted connections, access controls and least-privilege permissions, and drivers are briefed to share trip details only on a need-to-know basis. No system is perfectly secure, but we investigate any suspected breach and will notify you and the Data Commissioner where the DPA requires.

07Your rights under the DPA 2019

As a data subject under Kenyan law, you may ask us to:

  • Confirm whether we hold your personal data and give you a copy (access)
  • Correct inaccurate or incomplete data (rectification)
  • Delete data we no longer have a lawful reason to keep (erasure)
  • Restrict or object to certain processing, including direct marketing
  • Receive your data in a usable, portable form where technically feasible
  • Withdraw consent at any time, where processing is based on consent
  • Lodge a complaint with the Office of the Data Protection Commissioner (odpc.go.ke)

08Cookies & analytics

This site uses essential cookies for booking flow integrity and limited analytics to understand which pages help travellers most. No advertising trackers are loaded. You can control cookies through your browser; blocking essential ones may affect the booking flow.

09Children

Our services frequently carry children, but always under an adult’s booking. We do not knowingly collect personal data directly from children under 18. Child seats and booster requests are recorded as trip details, not profiles.

10Changes & contact

If this policy changes, the updated version will be posted on this page with a fresh "last updated" note. For any privacy question, request or complaint, contact the Data Protection focal point at the desk — email contact@dimmisafaristour.co.ke, call +254701451735, or write to us at Jomo Kenyatta International Airport, Main Terminal 1, Parking RM053, Nairobi.

Last updated: January 2025Talk to the desk