Privacy Policy for Forestline Tours and Travel Company Limited
Last updated: May 12, 2025
Forestline Tours and Travel Company Limited (“we,” “us,” “our”) operates the website https://forestline.co.ke (the “Service”). We are committed to protecting your personal data in accordance with the Kenyan Data Protection Act 2019, the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
1. Who We Are
Company name: Forestline Tours and Travel Company Limited
Registered in: Kenya (Limited Company)
Website address: http://forestline.co.ke
Contact email: info@forestline.co.ke
Data Protection Officer (Kenya): info@forestline.co.ke
2. Information We Collect
2.1 Information You Provide Directly
- Account registration & profiles: name, email address, telephone number, postal address, date of birth (optional), photograph (optional).
- Booking & checkout (WooCommerce): billing address, shipping address, payment method details (credit card number, expiration date, CVV) – note: payment data is processed directly by our payment gateways and is not stored on our servers.
- Comments & reviews: name, email, website (optional), review text.
2.2 Information Collected Automatically
- Usage data: IP address, browser type & version, operating system, referral URLs, pages visited, time spent.
- Cookies & tracking (see Section 4).
2.3 Information from Third Parties
- Embedded content: when you view embedded videos/images from third-party sites (e.g. YouTube), those providers may collect your data in accordance with their own policies.
- Gravatar: an anonymized hash of your email may be sent to https://automattic.com/privacy/ to retrieve your avatar.
3. Comments
When visitors leave comments or reviews on the site, we collect the data shown in the comments/review form, as well as the visitor’s IP address and browser user agent string to help spam detection. After your comment is approved, your profile picture (if provided via Gravatar) becomes publicly visible alongside your comment.
4. Media
If you upload images to the website (e.g., as part of a review or profile), please avoid embedding GPS/location data (EXIF) in your files. Visitors to the site can download and extract any location data from images on the website.
5. Cookies
We use cookies to improve your experience and to provide certain functionalities:
- Comment/review cookies: if you leave a comment/review, you may opt-in to saving your name, email, and website in cookies to pre-fill the form on your next visit. These cookies last for one year.
- Login cookies (WordPress/WooCommerce):
- Temporary cookie to check if your browser accepts cookies (discarded when you close your browser).
- Login cookie persists for two days; “Remember Me” option extends it to two weeks.
- Screen options cookies last for one year.
- Post-edit cookies: if you edit or publish an article (e.g. blog post), we set a cookie to remember the post ID; this expires after one day.
You can manage or disable cookies via your browser settings; however, disabling essential cookies may affect site functionality.
6. Embedded Content from Other Websites
Articles or pages on this site may include embedded content (e.g., videos, images, articles). Embedded content behaves exactly as if you visited the other website:
- Those websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content if you are logged into that website.
7. Who We Share Your Data With
- Service providers (e.g., hosting, payment processors, email platforms): to perform services on our behalf under strict confidentiality agreements.
- Legal & regulatory authorities: if required by law or to protect our rights.
- Automated spam detection: visitor comments/reviews may be checked through an automated spam detection service (e.g., Akismet).
8. How Long We Retain Your Data
- Comments/reviews and associated metadata are retained indefinitely to recognize and approve follow-up comments automatically.
- User profiles: information provided at registration is retained until you delete your account or we cease operations.
- WooCommerce & booking records: retained for up to 7 years to comply with Kenyan tax and accounting regulations.
- Support inquiries: retained for 2 years unless a longer retention period is required by law.
9. Your Rights
9.1 Under the Kenyan Data Protection Act (2019) & GDPR (EU Residents)
- Access: request a copy of the personal data we hold about you.
- Rectification: request correction of inaccurate or incomplete data.
- Erasure (“right to be forgotten”): request deletion of your personal data where lawful.
- Restriction of processing: request limitation of how we process your data.
- Data portability: receive your personal data in a structured, commonly used format.
- Objection: object to processing based on legitimate interests or direct marketing.
To exercise these rights, contact us at info@forestline.co.ke. We will respond within 30 days (GDPR) or as required under Kenyan law.
9.2 Under CCPA (California Residents)
- Know: you have the right to know what personal data we collect, use, share, or sell.
- Access: request access to your personal data.
- Delete: request deletion of your personal data, subject to exceptions.
- Opt-out: opt out of “sale” of personal data. (We do not sell personal data.)
- Non-discrimination: you will not be discriminated against for exercising your CCPA rights.
Submit requests via info@forestline.co.ke. We will verify your identity before fulfilling requests.
10. Children’s Privacy
Our Service is not directed to children under 13 (or the applicable age in your jurisdiction). We do not knowingly collect personal data from children under the applicable age without parental consent. If you become aware that a child has provided us personal data without consent, please contact us at info@forestline.co.ke; we will delete such information promptly.
11. International Data Transfers
Our servers are located in Kenya. If you are accessing the Service from outside Kenya, your personal data may be transferred to, and processed in, Kenya. Where required (e.g., transfers from the European Economic Area), we rely on:
- Standard Contractual Clauses approved by the European Commission; or
- Adequacy decisions or other appropriate safeguards under GDPR.
12. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes to our practices, legal requirements, or technology. We will notify you of significant changes by posting the new policy on this page with a revised “Last updated” date. We encourage you to review this Privacy Policy periodically.
13. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy, please contact:
Forestline Tours and Travel Company Limited
Email: info@forestline.co.ke
Address: [Nairobi, Kenya.]
Thank you for trusting Forestline Tours and Travel Company Limited with your personal data. We are committed to safeguarding your privacy.
