Resilience Safaris ("Resilience Safaris", "we", "us", "our") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at www.resiliencesafaris.com, contact us by email, WhatsApp, telephone, or any other channel, or purchase or enquire about our safari, Kilimanjaro, Zanzibar, or other travel services.
Please read this policy carefully. If you disagree with its terms, please discontinue use of our website and services. If you have any questions, contact us at tours@resiliencesafaris.com.
Who We Are
The data controller responsible for your personal information is:
As a Tanzania-based operator serving clients from around the world — including from the European Union, United Kingdom, and United States — we apply data protection standards consistent with the EU General Data Protection Regulation (GDPR) and the UK GDPR, in addition to Tanzanian law.
Information We Collect
We collect information from you in two ways: information you provide to us directly, and information collected automatically when you use our website.
Information you provide to us
| Type of information | When collected | Examples |
|---|---|---|
| Contact details | Booking enquiry, contact form, WhatsApp | Full name, email address, phone / WhatsApp number, country of residence |
| Travel information | Booking & itinerary planning | Travel dates, group size, preferred destinations, fitness level, dietary requirements |
| Identification documents | Confirmed bookings, TANAPA park permit applications | Passport number, date of birth, nationality (required for park permit registration) |
| Health & medical information | Kilimanjaro climbs & high-altitude treks | Fitness status, relevant medical conditions (altitude sickness history, pregnancy, etc.) — provided voluntarily for safety |
| Payment information | Booking confirmation & deposit payment | Bank transfer reference numbers. We do not store full payment card numbers — card payments are processed by third-party payment processors |
| Communications | Any contact with us | Emails, WhatsApp messages, phone call notes, enquiry form content |
| Feedback & reviews | Post-trip surveys, testimonials | Trip review content, photographs shared voluntarily |
Information collected automatically
When you visit our website, we automatically collect certain technical information via cookies and similar technologies. This includes your IP address, browser type, device type, pages visited, time spent on pages, referring URLs, and approximate geographic location. See Section 8 (Cookies) for full details.
We only collect health and medical information when it is directly relevant to the safety of your Kilimanjaro climb or other high-altitude activity — for example, to assess whether altitude acclimatisation protocols are appropriate. We never collect this information for marketing purposes and store it with enhanced security controls.
How We Use Your Information
We use your personal information only for purposes consistent with why it was collected. Specifically:
We do not sell your personal information to any third party. We do not use your information for automated decision-making that has significant legal effects on you.
Legal Basis for Processing
For users in the European Union, United Kingdom, and jurisdictions with equivalent data protection laws, we process your personal data on the following legal bases under Article 6 of the GDPR:
| Legal basis | When we rely on it |
|---|---|
| Contract performance | Processing necessary to fulfil a booking you have made with us, or to take steps at your request before entering a contract |
| Legal obligation | Where we are required to process data by Tanzanian law, TANAPA regulations, or applicable international law |
| Legitimate interests | Responding to enquiries, following up on incomplete bookings, preventing fraud, improving our website and services — where our interests are not overridden by your privacy rights |
| Consent | Marketing communications, newsletter subscriptions, use of non-essential cookies. You may withdraw consent at any time |
| Vital interests | In emergency situations involving health or safety of you or a third party (e.g. medical emergencies on Kilimanjaro) |
For health and medical data (special category data under GDPR Article 9), we rely on your explicit consent and/or the vital interests basis where applicable to safety management during high-altitude activities.
Who We Share Your Data With
We share your personal information with third parties only where necessary to deliver your booked services, comply with legal obligations, or with your explicit consent. The categories of recipients are:
We require all third parties to handle your personal data securely and only for the specific purpose for which it was shared. We do not allow third parties to use your data for their own marketing purposes.
International Data Transfers
Resilience Safaris is based in Tanzania. When you contact us from a country outside Tanzania — including EU member states, the United Kingdom, the United States, Australia, or elsewhere — your personal data is transferred to Tanzania for processing.
Tanzania does not currently hold an EU adequacy decision. Where we receive personal data from EU or UK residents, we rely on your consent and the necessity of the transfer to perform the travel contract you have requested as the lawful basis for this international transfer. If you have concerns about this, please contact us before submitting personal information.
Our use of Google Analytics and Microsoft Clarity involves data being processed on servers in the United States. Both providers participate in data transfer frameworks and maintain standard contractual clauses for EU data protection compliance.
If you are located in the EU or UK, your rights under GDPR apply to our processing of your data. We honour all rights described in Section 9 of this policy. You may also lodge a complaint with your national supervisory authority — for example, the UK Information Commissioner's Office (ICO) or your EU member state's Data Protection Authority.
How Long We Keep Your Data
We retain your personal information for as long as necessary to fulfil the purposes for which it was collected, subject to any legal obligations to retain records for longer periods. Our general retention periods are:
| Data type | Retention period | Reason |
|---|---|---|
| Booking & itinerary records | 7 years after trip completion | Tanzania tax and financial record-keeping requirements |
| Correspondence (email, WhatsApp) | 5 years | Legal claims limitation periods and service quality records |
| Passport & permit data | 3 years after trip | National park permit compliance and potential legal claims |
| Health & medical information | Trip + 2 years | Safety records and potential liability claims; deleted as soon as no longer needed |
| Marketing consent records | Until consent withdrawn + 3 years | Evidence of valid consent |
| Enquiries that did not become bookings | 2 years from last contact | Legitimate interest in following up on potential bookings |
| Website analytics data | 26 months (GA4 default) | Website performance analysis |
When your data reaches the end of its retention period, we securely delete or anonymise it. You may request earlier deletion — see Section 9 (Your Rights).
Cookies & Tracking Technologies
Our website uses cookies and similar technologies to operate correctly, analyse how visitors use the site, and improve your experience. A cookie is a small text file stored on your device by your browser.
| Cookie type | Purpose | Examples | Consent required |
|---|---|---|---|
| Strictly necessary | Essential for the website to function — navigation, form submission, security | Session cookies, CSRF tokens | No — cannot be disabled |
| Analytics | Understand how visitors use the site — pages visited, time spent, referral source | Google Analytics 4 (_ga, _gid), Microsoft Clarity | Yes — set only with consent |
| Google Tag Manager | Manages all other tracking tags on the site | GTM-N4GXH8HN | Yes (for non-essential tags) |
| Preference | Remember your settings (e.g. language, form data) | Local storage items | Yes |
Managing cookies: You can control and delete cookies through your browser settings. Disabling analytics cookies will not affect your ability to use the website or enquire about our services. The following tools allow you to opt out of specific tracking:
Your Rights
Depending on your location, you have the following rights in relation to your personal data. EU and UK residents have these rights under GDPR. We extend equivalent rights to all our clients regardless of location, subject to any overriding legal obligations.
To exercise any of these rights, contact us at tours@resiliencesafaris.com or by WhatsApp at +255 742 119 753. We will respond within 30 days. We may ask you to verify your identity before processing your request to protect your data from unauthorised access.
To stop receiving marketing communications from us, email tours@resiliencesafaris.com with the subject line "Unsubscribe", reply STOP to any WhatsApp marketing message, or click the unsubscribe link in any email we send. We will process your request within 5 business days.
Children's Privacy
Our website and booking services are not directed at children under the age of 16, and we do not knowingly collect personal data from children under 16 without verifiable parental or guardian consent.
Many of our safaris and tours welcome families with children, and we routinely collect data about minor travellers (full name, date of birth, passport number) as part of the booking process for national park permits and accommodation registration. In these cases, we collect this information from the parent or legal guardian who makes the booking, and we use it solely for the purpose of processing the travel arrangements. We do not use children's data for marketing purposes.
If you believe we have inadvertently collected personal data from a child under 16 without appropriate consent, please contact us immediately at tours@resiliencesafaris.com and we will delete it promptly.
Data Security
We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include:
No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected individuals and relevant authorities as required by applicable law.
Third-Party Websites
Our website may contain links to third-party websites, including lodge and camp websites, airline booking platforms, TripAdvisor, Google Reviews, and social media platforms. This Privacy Policy applies only to our website and services. We have no control over the privacy practices of third-party sites and are not responsible for their content or privacy policies.
We encourage you to review the privacy policy of any third-party website you visit through a link on our site. Common third-party services whose privacy policies you may wish to review include:
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, legal requirements, or for other operational reasons. When we make material changes, we will:
Your continued use of our website or services after the effective date of a revised Privacy Policy constitutes acceptance of those changes, where consent is not the relevant legal basis for processing.
We recommend reviewing this page periodically. Previous versions of this Privacy Policy are available on request by emailing tours@resiliencesafaris.com.
How to Contact Us
If you have questions about this Privacy Policy, want to exercise any of your data rights, or have a privacy concern, please contact us through any of the following channels. We aim to respond to all privacy-related enquiries within 5 business days and to all formal data subject requests within 30 days.
Subject line: "Privacy Request" or "Data Subject Request"
We respond to general privacy enquiries within 5 business days. Formal data subject access requests (copies of your data, deletion requests, rectification requests) are processed within 30 calendar days as required by GDPR. If your request is complex, we will notify you of any extension within the initial 30-day period.
If you are unhappy with our response to a privacy concern, you have the right to complain to the relevant supervisory authority in your country. For EU residents, this is your national Data Protection Authority. For UK residents, this is the Information Commissioner's Office (ICO).
Our commitment to your privacy: Resilience Expedition's business is built on trust. The clients who travel with us share their dreams, their time, and significant personal data with us. We treat that responsibility seriously. This policy reflects real commitments, not legal boilerplate — if something in it is unclear or you feel we have fallen short of it in practice, we want to know.
This Privacy Policy was last reviewed and approved by the management of Resilience Safaris on 15 June 2026.