Privacy policy

1. Who is responsible

Nduunduu Mobile Safari Proprietary Limited, the operator of Naledi Camp, Sedie Ward, Maun, Botswana (postal address: P O Box 2348, Maun, Botswana; company number BW00009369842).

Email: campnaledi@gmail.com. For all questions about data protection, please write to this address.

We are based in Botswana. Where you are in the European Union or the United Kingdom, the General Data Protection Regulation (GDPR) or UK GDPR applies to our processing because we offer our services to you. The Botswana Data Protection Act, 2024 also applies.

2. Visiting the website

When you open a page, your browser sends technical data to our server: IP address, date and time, the page requested, the referring page, browser and operating system. We need this to deliver the website and keep it secure (legitimate interest, Art. 6(1)(f) GDPR). Server logs are deleted after a short period, unless a security incident requires us to keep them longer.

Our website and database are hosted by Hetzner Online GmbH in Germany, which processes the data on our behalf under a data processing agreement.

Fonts are served from our own server. Exchange rates for the indicative currency display are fetched by our server, so no data about you is sent to the rate provider.

3. Inquiries, quotes and bookings

When you use the booking form, the contact form or "Email me this quote", we process the details you enter: name, email address, phone number (optional), preferred language, travel dates, number of guests, chosen suites and activities, special requests and, if you book a transfer, your arrival details. We use them to answer your inquiry, prepare quotes, handle your booking and stay, and for invoicing (Art. 6(1)(b) GDPR).

Please note: once you have entered your name and email address in the booking form, these details, your travel dates and your quote number are sent to us even before you submit the form, so that our team can follow up if a booking request is not completed. We only use them to contact you about this trip (legitimate interest, Art. 6(1)(f) GDPR). You can object at any time by email, and we will delete the record.

Emails are sent and received via Google (Gmail). Booking documents such as quotes, invoices and signed liability waivers are stored with Cloudflare (R2 storage). Payments are made by bank transfer to our account at First National Bank of Botswana.

We keep booking and invoice data for as long as tax and commercial law requires. Unfinished inquiries and quote requests are deleted after 24 months at the latest.

4. Google Analytics (only with your consent)

If you click "Accept" in the cookie banner, we use Google Analytics 4 by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to understand how visitors find and use our website. Google Analytics sets cookies (such as _ga, stored for up to two years) and processes usage data, device information and an approximate location. IP addresses are not stored by Google Analytics 4. We do not send names, email addresses or phone numbers to Google.

Legal basis is your consent (Art. 6(1)(a) GDPR). Data may be transferred to Google LLC in the USA; Google is certified under the EU-US Data Privacy Framework. If you decline, Google Analytics is not loaded at all.

You can change or withdraw your consent at any time via "Cookie settings" at the bottom of every page. Withdrawal does not affect processing that took place before.

5. Google reviews and map

Guest reviews from Google are shown with a widget by Elfsight. The widget is loaded from Elfsight’s servers only when you scroll to the reviews section; your IP address and browser data are then transmitted to Elfsight and Google. We use this to show genuine guest reviews (legitimate interest, Art. 6(1)(f) GDPR).

The map in the location section is embedded from OpenStreetMap (OpenStreetMap Foundation, United Kingdom). Loading it transmits your IP address to OpenStreetMap. The "Open in Google Maps" link only contacts Google when you click it.

6. Storage in your browser

We store a few settings in your browser’s local storage: your language, the currency you selected, your cookie choice and cached exchange rates. They stay on your device and are not used for tracking. The staff login area uses the login service Clerk (Clerk, Inc., USA), whose script is also loaded on public pages; for visitors who do not log in, no personal data beyond technical connection data is processed.

7. Your rights

You have the right to access your data, to have it corrected or deleted, to restrict processing, to data portability and to object to processing based on legitimate interest. Where processing is based on consent, you can withdraw it at any time. Simply write to campnaledi@gmail.com.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU country where you live, or with the Information and Data Protection Commission of Botswana.

8. Changes

We update this policy when our website or services change. The current version is always available on this page.