Data Protection and Privacy Policy

The Privacy Policy Statement

*Scarface Pride * (“we” or “us” or “our”) recognises the provisions of the laws on data protection. We acknowledge the importance of confidentiality and privilege duty owed to our clients’ information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our page. We are limited to use your personal information to offer you products and services that are likely to be relevant and useful for you as far as our services and products are concerned.

Our mandate to Protect your Data

Our company strictly adheres to European General Data Protection Regulation (GDPR), which came into force on 25th May 2018, the Kenyan Constitution 2010, our Domestic Data protection law; the Data Protection Act 2019 and its Data Protection (Complaints Handling Procedure and Enforcement) Regulations, 2021. Our mandate is tailored as per the provisions of the laws cited above whose principles entail Lawfulness, fairness and transparency, Accuracy, Integrity and confidentiality (security) and Accountability in data collection and processing. Therefore, our Mandate to you is to:

1. hold your data secure and privilege;
2. share only where you agree;
3. use your data to tailor the information we provide you, arrange your travel arrangements and improve our services; and
4. put you in control by allowing you to update, delete and access your data.

The Nature of Data or Personal Information we collect

The sort of personal information we collect will include the visitor’s name, address, email address, telephone number, date of birth, and personal travel arrangements. Additionally, we may also be required to obtain your passport details to pass to overseas authorities which require Advanced Passenger Information on a case-to-case basis or if need be. The pertinent information to arrange the travel and other services you may request may us to in this regard. Kindly note that for personal attendance on individual need basis, we may need to collect more sensitive personal data such as information concerning medical conditions, disabilities and special requirements such as dietary requests which may disclose directly or indirectly your religious beliefs, so as to enable us consider and attend to your particular needs in relation to a booking.

Utilisation of Your Information

We may use your information to:

1. fulfil our contract with you and/or deal with your booking or intended booking, including processing your booking, sending you your itinerary or other details relating to your booking
2. update you on changes to your travel itinerary (for example, if there is a change to your booking pre travel; if a flight is delayed or cancelled)
3. manage your wider travel or services requirements (for example, liaising with and transferring your data to airlines, service providers and/or travel facilitators so that they can facilitate your booking and/or your travel arrangements so any disruption can be minimised), this includes when you book a holiday package, hotel, car or other service which may be provided by us or third parties with us
4. process payments for your booking, fulfil requests for refunds and for accounting or audit purposes
5. personalise the service and offers you receive (for example, by being aware of previous travel experiences, transactions or preferences, and tailoring the way we provide our products or services to you based on your preferences and profile)
6. communicate and interact with you at different times throughout your journey
7. communicate with airlines, accommodation providers and other parties that are part of your journey regarding your experience, preferences, compliments or complaints
8. improve the products and services we offer or help us to create new ones
9. conduct customer satisfaction surveys so that we can obtain a better understanding of how we can continue to improve the products and services we offer or help us to create new ones. During these surveys we may collect personal information from you relating to your thoughts/comments about your experience with us
10. market our products and services to you
11. manage our business such as systems testing, IT maintenance or development training, benchmarking and performance measurement
12. use in connection with your online account as you may authorise or consent to additionally from time to time and other use which may be authorised by you and legal authorities as per the law.

Sharing your personal information with third parties

We may share your personal information to third parties in the manner and for the purposes of rendering a quality service to you as described below:

1. to improve the products and services we offer or help us to create new ones for marketing, profiling and analytics as detailed below; and for the purposes described in this Privacy Notice.
2. with third parties who help us manage our business and deliver our products and services. These third parties have agreed to confidentiality obligations and use any personal information we share with them or which they collect on our behalf solely for the purposes of providing the contracted service to us. These third parties include service providers who help manage our IT and back-office systems, detect fraudulent transactions and security incidents, provide customer service centre support, manage communications and tailor marketing and advertising; verify payments such as banks and payment card companies; provide internet services; host our facilities and conduct research that assists us with understanding consumer interests.
3. with third party advertising and social media website to provide advertising
4. bank and payment providers to authorise and complete payments;
5. with governments, government organisations and agencies, border control agencies, regulators, law enforcement and others as permitted or required by law to generally comply with all applicable laws, regulations and rules.
6. with third parties whose products or services you are purchasing through our website or offices, or otherwise such as airlines, tourism agencies, hotel, transfer and car hire companies, tour and excursion providers or to travel agents, including if there is a problem with your booking so that your travel agent can resolve it with you;

Managing Marketing Ads

To protect your privacy and to ensure you have control over how we manage marketing with you and provided that you have indicated that you would like to receive advertisements, we will:

1. take steps to limit direct marketing to a reasonable level; and
2. only send you communications which we believe may be of interest or relevance to you and at all times in line with your permissions, which, as appropriate, may include informing you about developments in the products and services available through us.

You can click the “unsubscribe” link that you will find at the bottom of our emails which you receive from us, or you can unsubscribe by contacting us or changing your account settings which will remove you from the relevant marketing list. You can request that we stop sending you marketing advertisements.

Protection of your Personal Information

We have in place appropriate technical and organisational security measures, and procedures designed to protect the personal information that you share with us and safeguard the privacy of such information. The measures include:

1. placing confidentiality requirements on our staff members and service providers;
2. destroying or permanently anonymising personal information if it is no longer needed for the purposes for which it was collected;
3. following security procedures in the storage and disclosure of your personal information to prevent unauthorised access to it; and
4. using secure communication channels on our website such as SSL for transmitting data that is sent to us. SSL are industry standard encryption protocols used to protect online transaction channels.

Right to Access Personal Information.

As our visitor, you have a right to request that we provide you with a copy of your personal information that we hold and you have the right to be informed of: the source of your personal information; the purposes, legal basis and methods of processing; the data controller’s identity; and the businesses or categories of businesses to whom your personal information may be transferred.

Right to Rectify or Erase Inaccurate Personal Information

You have a right to request that we rectify inaccurate personal information about you. We may seek to verify the accuracy of the personal information before rectifying it. You can also request that we erase your personal information in limited circumstances where:

1. it is no longer needed for the purposes for which it was collected; or
2. you have withdrawn your consent (where the data processing was based on consent); or
3. following a successful right to object; or
4. it has been processed unlawfully; or
5. the personal information must be erased for compliance with a legal obligation
6. We are not required to comply with your request to erase personal information if the processing of your personal information is necessary:
7. for compliance with a legal obligation; or
8. for the establishment, exercise or defence of legal claims.
9. Right to object to the processing (including direct marketing) of your personal information

If you have joined our mailing list, you can manage your marketing preferences automatically by clicking the “unsubscribe” link that you will find at the bottom of our emails which you receive from us.

Right to obtain a copy of personal information safeguards used for transfers outside your jurisdiction

You can ask to obtain a copy of, or reference to, the safeguards under which your personal information is transferred outside of the European Union. We may redact data transfer agreements to protect commercial terms.

Right to restrict the processing of your personal information

You can ask us to restrict your personal information, but only where:

1. its accuracy is contested, to allow us to verify its accuracy; or
2. the processing is unlawful, but you do not want it erased; or
3. it is no longer needed for the purposes for which it was collected, but we still need it to establish, exercise or defend legal claims; orr
4. it has been processed unlawfully; or
5. you have exercised the right to object, and verification of overriding grounds is pending.

We can continue to use your personal information following a request for restriction, where:

1. we have your consent; or
2. to establish, exercise or defend legal claims; or
3. to protect the rights of another natural or legal person.

You have a right to lodge a complaint with the office of Data Protection Commissioners if you have concerns about how we are processing your personal information.

Links to Other Websites

This policy only extends to our website, which is owned and operated by us. We do not therefore, extend to your use of, provision of information to and collection of information on any website not connected to us to which you may link by using the hypertext links within our website.

Update of this Policy

This Policy is subject to changes, renewals, amendments and revision. You are expected to check this page from time to time to take notice of any changes we have made, as they are binding on you. If we make any substantial changes, using your personal information we may notify you by posting a prominent notice on our website. In case of any query regarding this policy, or if you have any comments or want to opt-out of receiving marketing communications from us or to complain about our use of your personal data kindly contact us through info@scarfacepride.com.