[[TODO: legal review]] This page is a draft prepared from how the website works. It is not yet final legal text.
Who we are
Tribal Kite School, Watamu, Kilifi County, Kenya. Contact: kite@tribalsand.com, +254 (0) 11 6005008. [[TODO: legal business name and registered address]]
What we collect
- Contact form: your name, email, phone (optional) and message.
- Bookings, rentals and membership passes: your name, email, phone, skill level, the lesson or gear, dates, number of people, any notes you add, and what you have paid.
- Payments: card and mobile payments are taken by Paystack on its own secure page. We receive only the result (paid or not, amount, reference) — never your card details.
- Analytics: Google Analytics counts visits and pages viewed. We do not send it your name, email, phone or message.
Why we use it
- To answer your message and arrange your lesson or rental.
- To send booking confirmations, itineraries, payment receipts and changes to your booking.
- After a completed lesson, one email asking for a review and inviting you to follow us on Instagram.
- To understand, in aggregate, how the website is used.
Who processes it for us
- Google (email delivery through Gmail; Google Analytics)
- Paystack (payments)
- Our web host [[TODO: name the hosting provider]]
- Meta / WhatsApp and CallMeBot (new-booking alerts to our own staff phone: your name, the lesson and the time)
- Cloudflare Turnstile, if enabled on the contact form (bot protection)
How long we keep it
[[TODO: retention period — e.g. enquiries 12 months; bookings as long as tax and accounting law requires]]
Your rights
You can ask to see, correct or delete the details we hold about you by emailing kite@tribalsand.com. We will reply within [[TODO: response time]]. [[TODO: confirm obligations under the Kenya Data Protection Act 2019 and, for visitors from the EU/UK, the GDPR]]
Security
The site is served only over HTTPS. Staff access to booking details is by individual login with roles, and payment card data never reaches our servers.
See also our Cookie Policy.