Privacy Policy
Your privacy matters. Learn how we collect, use, and protect your personal information.
Legal Compliance Statement
ZikaraLink Travel is committed to compliance with the Kenya Data Protection Act, 2019 (No. 24 of 2019). We follow data protection principles including lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, confidentiality, and accountability.
Kenya Data Protection Act, 2019
Built around Kenya's principal data protection legislation
Lawful Processing
All data processing based on legal grounds under Kenyan law
Your Rights Protected
Full rights to access, rectify, and control your personal data
Introduction & Legal Framework
Our commitment to protecting your privacy under Kenyan and international law
ZikaraLink Travel ('we,' 'our,' or 'us') is committed to protecting your privacy in accordance with the Kenya Data Protection Act, 2019 (No. 24 of 2019), the Kenya Information and Communications Act, 1998, and the General Data Protection Regulation (GDPR) where applicable. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, website, and services.
Data Protection Act, 2019 (Kenya)
Compliant with Kenya's principal data protection legislation
GDPR (EU) 2016/679
Applied for EU citizens and residents
Kenya Information and Communications Act, 1998
Compliance with electronic transactions and communications
Information We Collect
Types of personal data we gather to provide our services
Personal Identification Information
- Full legal name (as per government ID)
- Email address and phone number
- Government-issued ID number
- KRA PIN (for tax compliance)
- Date of birth and age verification
- Physical and postal address
- Bank account details and M-Pesa number (for agents)
Usage and Technical Data
- Device information (type, operating system, browser)
- IP address and geolocation data
- Login timestamps and session duration
- Pages visited and actions taken
Agent-Specific Data
- Professional qualifications and certifications
- Work history and experience
- Service area coverage
- Performance metrics and quality scores
- Client reviews and ratings
Legal Basis for Processing
The lawful grounds under which we process your personal data
Consent
You have given explicit consent for processing your data.
Example: Opting in for marketing communications
Contract Performance
Processing is necessary for contract performance.
Example: Processing bookings and payments
Legal Obligation
Processing is necessary for legal compliance.
Example: Tax reporting requirements
Legitimate Interests
Processing is necessary for our legitimate interests.
Example: Fraud prevention and platform security
Data Security Measures
How we protect your personal information
All data is encrypted in transit over HTTPS/TLS
Passwords are stored using strong, one-way cryptographic hashing
One-time passcode (OTP) verification for account security
Two-factor authentication (2FA) available on accounts
Card payments are processed by PCI-DSS compliant payment providers, so your card details never touch our servers
Your Rights Under Kenyan Law
Full control over your personal data as guaranteed by the Data Protection Act, 2019
Right to be informed
You have the right to be informed about how your data is collected and used.
Right to access
You can request a copy of your personal data held by us.
Right to rectification
You can correct inaccurate or incomplete personal data.
Right to erasure
You can request deletion of your data under certain circumstances.
Right to data portability
You can receive your data in a structured format.
Right to object
You can object to processing based on legitimate interests.
Right to lodge a complaint
You can lodge a complaint with the applicable data protection authority.
To exercise any of these rights, contact our Data Protection / Privacy Contact at support@zikaralink.com. We will respond within 30 days as required by Kenyan law.
Data Protection / Privacy Contact
Contact us for any privacy-related questions or to exercise your data rights
Data Protection / Privacy Contact
Data Protection / Privacy Contact
ZikaraLink Travel
ZikaraLink Travel, Registered in Kenya
If you are not satisfied with our response, you have the right to lodge a complaint with the applicable data protection authority.
Contact Information
Reach out to our team for any privacy-related inquiries