Privacy Policy

Last updated: July 22, 2026

Your trust matters to us. This Privacy Policy explains, in straightforward language, how Gamba Uganda Safaris collects, uses, shares and protects personal information when you visit our website, make an enquiry, request a quote, book a safari, make a payment or communicate with us.

Gamba Uganda Safaris is a trading brand of GUS Signature Expeditions Limited, registered in Uganda. We aim to handle personal information responsibly and in accordance with Uganda's data-protection requirements and other privacy laws that apply to our relationship with you.

1. Introduction & Our Commitment

This policy applies to information handled through our website, online forms, quotation and booking process, payment pages, email, telephone and WhatsApp communications, and the delivery of our safari services.

We collect only the information that is reasonably needed for the purpose explained in this policy. We do not sell personal information. We do not use it in ways that are incompatible with the reason it was collected, unless permitted or required by law.

Privacy contact: info@gambaugandasafaris.com | +256 701 943 760 | Kampala, Uganda

2. Information We Collect

The information we collect depends on how you interact with us and the safari services you request.

Information you give us

• Contact and identity details: your name, email address, telephone or WhatsApp number, country of residence, nationality and, where needed for a booking, date of birth.
• Safari enquiry details: travel dates, number of travelers, destinations, accommodation preferences, budget range, interests and special requests.
• Booking and permit details: traveler names, passport details and other identification information that lodges, airlines, park authorities or permit issuers reasonably require.
• Health and accessibility information: dietary requirements, allergies, mobility needs, relevant medical information or emergency contact details that you choose to provide, or that are needed to plan a safe safari. This information can be sensitive, so we ask that you share only what is relevant.
• Payment and invoice details: payer name, billing and contact details, quote or booking reference, amount due, payment status and transaction reference. We do not ask you to enter full payment-card details directly on our website; payments are handled through secure payment providers such as Pesapal.
• Communications: messages, attachments, feedback and information you send by form, email, phone or WhatsApp.

Information collected automatically

• Device and usage data: browser and device type, pages visited, referral source, approximate location derived from IP address, and dates or times of access.
• Security data: IP address, logs and anti-abuse information used to protect our forms, payments and website from spam, fraud and misuse.
• Cookie and preference data: information stored by cookies and similar technologies, as explained below and in our Cookie Policy.

Information from others

We may receive limited booking, payment-status or operational information from travel agents, wholesalers, lodges, transport providers, park authorities, payment providers and other suppliers where this is necessary to quote for, confirm or operate your safari.

3. How We Use Your Information

• To answer enquiries, prepare tailored quotations and communicate with you or your travel agent.
• To confirm and deliver bookings, including arranging permits, accommodation, guides, transport and activities.
• To manage payments, invoices, refunds, accounting records and booking administration.
• To provide traveler support, itinerary updates, operational notices and emergency assistance coordination where required.
• To understand and meet reasonable health, dietary, accessibility and safety needs that are relevant to your trip.
• To protect our website, booking process and clients against fraud, duplicate payments, spam, security incidents and other misuse.
• To improve our website, services and communications, including through optional analytics where you have consented.
• To meet legal, tax, regulatory, insurance, audit and record-keeping obligations, and to establish, exercise or defend legal claims where necessary.

4. Legal Basis for Processing

Privacy laws use different terms in different countries. Where a legal basis is required, we rely on one or more of the following, depending on the information and purpose:

• Contract and pre-contract steps: to respond to your request, prepare a quotation, process a booking, receive payment and provide the safari services you or your agent have requested.
• Legal obligation: to meet accounting, tax, regulatory, permit, safety, fraud-prevention or other legal requirements.
• Legitimate interests: to run and protect our business, maintain service quality, prevent fraud, keep appropriate records and respond to inquiries, provided those interests do not override your rights.
• Consent: for optional analytics cookies, marketing where required, and sensitive information where consent is the appropriate basis. You may withdraw consent, although this does not affect processing already carried out lawfully.
• Vital interests: in limited urgent situations, to help protect the life, health or safety of you or another person.

For travelers in the European Economic Area, United Kingdom or other jurisdictions with similar rules, these are the bases on which we process information where the GDPR, UK GDPR or equivalent law applies.

5. Sharing Your Information

We share personal information only when it is reasonably necessary to deliver the safari, run our business securely, comply with the law or protect people and property. Depending on your booking, recipients may include:

• Safari suppliers: lodges and camps, guides, transport providers, activity operators, domestic airlines and other service providers involved in your itinerary.
• Authorities and permit issuers: park authorities, conservation bodies, immigration or other authorities where a permit, reservation or law requires the information.
• Travel agents and wholesalers: the agency or partner that made or manages the booking, where applicable.
• Payment and financial providers: Pesapal, banks and other providers that process or verify payments, as well as professional advisers and auditors where needed.
• Technology and security providers: hosting, email, communications, website security, Google reCAPTCHA, analytics (where accepted), and support services that help us operate safely.
• Legal and safety recipients: insurers, regulators, law enforcement, courts or emergency services where required by law or necessary to protect legal rights, safety or security.

Our suppliers and service providers may process information only for the service they are providing and are expected to protect it appropriately. We do not sell or rent personal information to third parties.

6. International Data Transfers

We are based in Uganda but serve international travelers. Information may be accessed or processed in Uganda and in other countries where our travel suppliers, payment providers, communications tools, cloud-hosting providers or analytics providers operate.

Data-protection laws in another country may differ from those in your home country. When we transfer information internationally, we limit it to what is needed and use appropriate safeguards required by applicable law, such as contractual commitments, provider protections or another permitted transfer mechanism. We may also transfer information when it is necessary to deliver the travel services you have requested.

7. Data Security Measures

We use reasonable administrative, technical and organisational safeguards designed to protect personal information from unauthorised access, loss, misuse, alteration or disclosure. These include:

• SSL/TLS encryption (the secure HTTPS connection shown in your browser) for our website and information sent between your browser and our site;
• secure, third-party payment handling rather than collecting full card details directly on our website;
• access controls and limiting access to people who need information for their work;
• security monitoring, anti-spam tools, rate limiting and payment-validation controls; and
• practical procedures for managing security incidents and maintaining our systems.

No internet transmission or storage system is completely secure. If you believe your information or booking has been compromised, please contact us promptly.

8. Cookies and Tracking Technologies

Cookies are small files stored on your browser. We use cookies and similar technologies to keep the site working, remember choices and understand site use. Our main categories are:

You can manage optional analytics through our cookie notice or browser settings. Clearing or blocking cookies may affect some website features. Please see our Cookie Policy for more detail.

9. Your Rights & Choices

Your rights depend on where you live and the law that applies. Subject to applicable law, you may have the right to:

• ask whether we hold personal information about you and request access to it;
• request correction of inaccurate, incomplete or outdated information;
• ask us to delete, block, restrict or object to certain processing where there is a legal basis to do so;
• request a portable copy of information you provided where that right applies;
• withdraw consent for consent-based processing, including optional analytics, at any time;
• opt out of direct-marketing communications by using the unsubscribe option provided or contacting us; and
• make a complaint to the relevant data-protection authority.

We do not sell personal information. If a U.S. state privacy law applies to you, you may also have rights to know, delete, correct and limit certain uses of sensitive personal information, subject to that law's exceptions. We do not discriminate against you for exercising a privacy right.

To make a request, email info@gambaugandasafaris.com with the subject line “Privacy request”. Please describe your request clearly. We may ask for reasonable information to verify your identity and will respond within the period required by applicable law. Some requests may be limited where we must retain information for legal, accounting, safety or fraud-prevention reasons.

10. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including service delivery, accounting, legal obligations, dispute resolution and security. Our general approach is:

When information is no longer needed, we delete, securely dispose of or anonymise it where practicable. Retention can be longer if required or permitted by law, for an unresolved claim or dispute, or to protect our legal rights.

11. Children's Privacy

Our website and services are not intended for children to use independently. We may process a child's information when it is necessary for a family, school or group safari booking, and we expect the parent, legal guardian or authorised booking adult to provide that information and make decisions on the child's behalf.

12. Changes to This Policy

We may update this policy to reflect changes in our services, technology, legal requirements or privacy practices. We will publish the revised version on this page and update the “Last updated” date. We encourage you to review it before making a booking or providing new information.

13. Contact Us

Questions, concerns and privacy requests are welcome. Please contact:

Gamba Uganda Safaris
Email: info@gambaugandasafaris.com
Phone/WhatsApp: +256 701 943 760
Location: Kampala, Uganda

If you are unhappy with our response, you may have the right to complain to the relevant authority. In Uganda, this is the Personal Data Protection Office (PDPO). For more information, visit the PDPO complaint page. Nothing in this policy limits any privacy rights that apply to you by law.