Privacy Policy

Only what you type into a form. That is your name, your email address, and — if you give them — your phone or WhatsApp number, your travel dates, the number of people travelling, and whatever you write in the message field.

We do not ask for and have no use for identity documents, payment card details or your address at this stage of an enquiry. If a booking progresses to the point where those are genuinely needed, we will ask for them directly and explain why.

When you submit a form, it is sent to Web3Forms, a form-delivery service, which forwards it to us by email. Web3Forms processes the submission in order to deliver it and is bound by their own privacy policy.

This website has no database. Nothing you submit is stored on this site or on any server we control — it lives in our email inbox, which is where we read and reply to it.

To answer you, and to plan the trip you asked about. That is the entire purpose. We do not build profiles, we do not score leads, and we do not use anything you tell us to target advertising.

To arrange a trip we sometimes have to pass details to the people actually providing a service — the camp holding your room needs your name and dates, the airline needs the name on your passport.

We share the minimum required for that specific booking, and only once you have asked us to proceed. We never sell your details, and we do not pass them to anyone for marketing.

By using this website you agree to the cookies described below. We are not going to interrupt you with a pop-up to ask. Instead, here is exactly what is set, what each one is for, and how to refuse it if you would rather.

Analytics. Google Analytics sets a first-party cookie so we can see which pages get read and roughly which country visitors arrive from. Your IP address is shortened before it reaches Google. It tells us forty people looked at the fleet page this week; it does not tell us who you are, and we never join it up with your enquiry.

Spam protection. Cloudflare Turnstile guards our forms. It checks the browser rather than the person — no puzzles, no traffic lights to click — and Cloudflare does not use it to build an advertising profile of you.

Nothing else. No advertising cookies, no Facebook pixel, no ad networks, and nothing that follows you to other websites.

The trip planner also stores your answers in your own browser's session storage so a refresh does not lose four steps of work. That is not a cookie, it never leaves your device, and it is cleared when you close the tab or when your enquiry is sent.

If you would rather not. Every browser can block or delete cookies for a single site — usually under Privacy settings, or the padlock icon in the address bar. Browser extensions that block trackers will stop the analytics cookie too, and nothing on this site will break if you do. The only part worth keeping is the spam protection, without which our enquiry forms may not submit.

Enquiries stay in our email while the conversation is live and for a reasonable period afterwards, in case you come back to us. Ask us to delete it and we will.

You can ask us what we hold about you, ask us to correct it, or ask us to delete it. Email hello@wayandwaves.com and we will action it.

Kenya's Data Protection Act 2019 gives you these rights, and we intend to honour them without you having to cite it.

hello@wayandwaves.com · +254 793 545 101 · Nairobi, Kenya