Effective Date: 31 MAY 2025

This Privacy Policy outlines how Mpinji Expeditions (Registration No. 2025/361478/07), a company registered in South Africa, collects, uses, stores, and protects your personal information.

1. Contact Information

If you have any questions about this policy or how we handle your data, please contact us at:

Email: travel@mpinji-expeditions.com

2. Information We Collect

We collect the following categories of personal data:

- Name, email address, phone number, country/state of residence

- Passport information, dietary needs, allergies, and critical medical disclosures

- Social media handles, travel preferences

- Payment information (via Stripe)

- Behavioural and usage data (via Google Analytics and Squarespace)

- Communications and documents shared via email and our platforms

3. How We Collect Information

We collect personal data through:

- Online forms and bookings (Squarespace, YouLi)

- Email and direct guest communication

- Analytics tools (Google Analytics)

- Newsletter sign-ups and social media campaigns

4. Why We Collect Your Data

We use your data to:

- Process travel bookings and deliver services

- Ensure your safety and comfort while travelling

- Respond to enquiries and manage trip participation

- Send marketing communications and travel updates

- Improve our services through aggregated analytics

5. Data Sharing and Processors

We share your data only with trusted service providers when necessary, including:

- Booking & itinerary platform: YouLi

- Payment processing: Stripe and its associated payment methods (e.g. Apple Pay, Klarna)

- Hosting platforms: Squarespace and Google Drive

- Travel service providers (e.g. guides, accommodation partners, trip hosts)

6. International Data Transfers

Data may be stored or accessed on secure servers or devices located in South Africa or internationally, including via cloud platforms such as Google Drive and Apple iCloud. By providing your data, you consent to the transfer and storage of your data in these jurisdictions.

7. Data Retention

We retain your information for as long as necessary to provide our services and maintain client relationships. You may request deletion at any time. For returning guests, data will be confirmed and updated with each new trip booking.

8. Your Rights

You have the right to:

- Access your personal information

- Correct or update inaccurate information

- Request deletion of your data

- Withdraw your consent at any time

To exercise any of these rights, please email travel@mpinji-expeditions.com

9. Security Measures

We implement robust security measures, including SSL encryption, limited access controls, and two-factor authentication to protect your personal data. Sensitive data is accessible only to authorised personnel.

10. Compliance

We comply with international data protection laws, including the General Data Protection Regulation (GDPR) for EU/EEA residents and the California Consumer Privacy Act (CCPA) for California residents.

11. Updates to This Policy

We may update this Privacy Policy occasionally. The updated version will be posted on our website with the effective date. Continued use of our services after any changes constitutes acceptance of the new terms.