Privacy Policy
Your privacy matters. Learn how we collect, use, and protect your personal information.
Legal Compliance Statement
ZikaraLink Travel is fully compliant with the Kenya Data Protection Act, 2019 (No. 24 of 2019). We adhere to all data protection principles including lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, confidentiality, and accountability.
Kenya Data Protection Act, 2019
Fully compliant with Kenya's principal data protection legislation
Lawful Processing
All data processing based on legal grounds under Kenyan law
Your Rights Protected
Full rights to access, rectify, and control your personal data
Introduction & Legal Framework
Our commitment to protecting your privacy under Kenyan and international law
ZikaraLink Travel ('we,' 'our,' or 'us') is committed to protecting your privacy in accordance with the Kenya Data Protection Act, 2019 (No. 24 of 2019), the Kenya Information and Communications Act, 1998, and the General Data Protection Regulation (GDPR) where applicable. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, website, and services.
Data Protection Act, 2019 (Kenya)
Compliant with Kenya's principal data protection legislation
GDPR (EU) 2016/679
Applied for EU citizens and residents
Kenya Information and Communications Act, 1998
Compliance with electronic transactions and communications
Information We Collect
Types of personal data we gather to provide our services
Personal Identification Information
- Full legal name (as per government ID)
- Email address and phone number
- Government-issued ID number
- KRA PIN (for tax compliance)
- Date of birth and age verification
- Physical and postal address
- Bank account details and M-Pesa number (for agents)
Usage and Technical Data
- Device information (type, operating system, browser)
- IP address and geolocation data
- Login timestamps and session duration
- Pages visited and actions taken
Agent-Specific Data
- Professional qualifications and certifications
- Work history and experience
- Service area coverage
- Performance metrics and quality scores
- Client reviews and ratings
Legal Basis for Processing
The lawful grounds under which we process your personal data
Consent
You have given explicit consent for processing your data.
Example: Opting in for marketing communications
Contract Performance
Processing is necessary for contract performance.
Example: Processing bookings and payments
Legal Obligation
Processing is necessary for legal compliance.
Example: Tax reporting requirements
Legitimate Interests
Processing is necessary for our legitimate interests.
Example: Fraud prevention and platform security
Data Security Measures
How we protect your personal information
256-bit SSL/TLS encryption for all data transmission
AES-256 encryption for sensitive data at rest
Multi-factor authentication for administrative access
Regular security audits and penetration testing
24/7 security monitoring and intrusion detection
Your Rights Under Kenyan Law
Full control over your personal data as guaranteed by the Data Protection Act, 2019
Right to be informed
You have the right to be informed about how your data is collected and used.
Right to access
You can request a copy of your personal data held by us.
Right to rectification
You can correct inaccurate or incomplete personal data.
Right to erasure
You can request deletion of your data under certain circumstances.
Right to data portability
You can receive your data in a structured format.
Right to object
You can object to processing based on legitimate interests.
Right to lodge a complaint
You can complain to the Office of the Data Protection Commissioner (ODPC).
To exercise any of these rights, contact our Data Protection Officer at support@zikaralink.com. We will respond within 30 days as required by Kenyan law.
Data Protection Officer
Our dedicated DPO team ensures your data rights are respected
Data Protection Officer
John Mwangi
Data Protection Officer
ZikaraLink Travel, Westlands Business Park, Nairobi, Kenya
If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) at www.odpc.go.ke.
Contact Information
Reach out to our team for any privacy-related inquiries