3. Who We Share Your Information With (And Why We Have No Choice)

Essential Safari Partners (Can’t Avoid This)

Accommodation Providers:

• What they get: Name, arrival/departure dates, dietary requirements, special requests
• Why: They need this to prepare your room and meals
• Examples: Singita lodges, boutique tented camps, mountain huts
• Their privacy practices: Vary by property; we work only with established, reputable providers

Mountain Guides & Activity Operators:

• What they get: Name, relevant medical information, experience level
• Why: Safety—guides need to know if you have a heart condition before taking you to 4,500m
• Examples: Licensed TANAPA guides, gorilla trekking operators, wildlife researchers

Tanzania National Parks Authority (TANAPA):

• What they get: Full name, passport number, nationality, climb dates
• Why: Legal requirement for mountain permits, this is government-mandated, not our choice
• Reality: TANAPA’s data security is basic. If this concerns you, unfortunately you cannot climb Tanzanian mountains without providing this information.

Transport Providers:

• What they get: Name, sometimes passport number (for domestic flights)
• Why: Ticketing and security requirements
• Examples: Coastal Aviation, Safari Air Link, ground transport companies

Flying Doctor Services (Emergency Only):

• What they get: Medical history (only if you require emergency evacuation)
• Why: To provide appropriate emergency medical care
• You’ll thank us: In a genuine emergency, having your medical information immediately available could save your life.

Payment Processors (The Money Trail)

We use Stripe and PayPal—both are PCI-DSS Level 1 certified (highest security standard for payment processing).

What they see: Your complete payment card details
What we see: Transaction confirmation, last 4 card digits, billing country
Why this matters: If there’s a payment data breach, it happens at Stripe/PayPal level (they have billion-dollar security infrastructure), not on our small-business servers.

Third-Party Data Breach Reality Check

Here’s what other tour operators won’t tell you: Most safari data breaches don’t happen at the tour operator level—they happen at accommodation partners, airlines, or booking platforms with weak security.

What we do about it:

• Quarterly security vetting of primary accommodation partners
• We share the minimum information each partner needs (dietary requirements don’t go to transport companies; passport details don’t go to lodges unless legally required)
• Immediate client notification within 72 hours if any partner reports a breach involving your data

What you should do:

• Monitor your credit card statements for 3-6 months after booking any international travel (not just with us)
• Consider using a virtual credit card number for international bookings
• Enable two-factor authentication on your email (where we send itinerary details)

Who We Absolutely DON’T Share With

✗ Marketing companies or data brokers
✗ Social media platforms (unless you tag us first)
✗ Other tour operators or “partner” travel agencies
✗ Lodge/accommodation marketing lists
✗ Anyone for purposes unrelated to your specific safari

Service Delivery (The Reason You Gave Us Information)

✓ Processing your booking and payment
✓ Arranging permits, accommodation, guides, transport
✓ Sending pre-departure briefings (what to pack, weather updates, final itinerary)
✓ Supporting you during your safari (WhatsApp communication with guides, handling changes)
✓ Post-safari follow-up (requesting feedback, addressing any issues)

Legal basis: Contract performance—we literally cannot deliver your safari without this use.

Legal Compliance (Not Optional)

✓ Submitting permit applications to TANAPA (they legally require passport details)
✓ Maintaining financial records for 7 years (Tanzania Revenue Authority requirement)
✓ Responding to valid law enforcement requests
✓ Processing insurance claims or medical evacuations

Business Improvement (Making Future Safaris Better)

✓ Analyzing booking patterns (which itineraries are most popular, which months are busiest)
✓ Training guides based on feedback themes
✓ Improving website usability (which pages confuse people, where they drop off)
✓ Fraud prevention and security

Your right: Object to this processing by emailing support@rawnature.com.
We’ll stop using your data this way (though your specific booking details remain for service delivery).

Marketing (Only With Your Permission)

✓ Sending our quarterly newsletter about East African travel (opt-in only—you must check the box)
✓ Following up 6-12 months after your safari with feedback request and future travel ideas
✓ Sending past clients occasional special offers (early bird pricing, new itineraries)

Your control:

• Unsubscribe link in every email—works immediately, no questions asked
• Email support@rawnature.com to request complete removal from all marketing lists
• We automatically stop after 3 years of no response (we assume you’ve moved on)

We will NEVER:

• Send daily emails (our maximum is once per month, usually less)
• Add you to lists without permission
• Make it difficult to unsubscribe
• Send marketing before your safari is even completed (that’s just annoying)