Privacy Policy

Last updated: 22 October 2026

This Privacy Notice for Two Servants Tours and Safaris Ltd (doing business as Two Servants) (“we”, “us” or “our”) explains how and why we may access, collect, store, use and/or share (“process”) your personal information when you use our services (“Services”), including when you:

Visit our website at https://twoservants.com, or any website of ours that links to this Privacy Notice
Use our tour and travel services. We plan and run private safaris and cultural journeys for international visitors, gorilla and chimpanzee trekking, day trips, weekend getaways, corporate retreats and team building, and school trips in Uganda. We also help international guests with tourist visas for Uganda and travel insurance, and help Ugandans with passport applications, tourist visa applications (mainly Schengen and United Arab Emirates (Dubai) tourist visas), flight bookings and travel insurance.
Contact us by phone, WhatsApp, email, social media or our website forms
Engage with us in other related ways, including sales, marketing or events

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for deciding how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have questions or concerns, please contact us at [email protected].

Summary of key points

This summary gives the key points of our Privacy Notice. You can find more detail on each topic in the sections below.

What personal information do we process? When you visit, use or contact our Services, we may process personal information depending on how you interact with us, the choices you make, and the products and features you use.

Do we process any sensitive personal information? Some information may be treated as “special” or “sensitive” in some countries, for example racial or ethnic origin, sexual orientation and religious beliefs. We do not process sensitive personal information. If you choose to tell us about a health condition or dietary need so we can plan your trip safely, we use it only for that purpose.

Do we collect any information from third parties? Yes, in some cases. We receive your contact details and trip request when you reply to one of our adverts or message us on Meta (Facebook or Instagram) or LinkedIn, or when you send us an enquiry or booking through a travel platform we are listed on, such as SafariBookings, Tripadvisor, TouristLink, Bokun or Inspirational Adventures. We do not buy personal information from third parties.

How do we process your information? We process your information to provide, improve and run our Services, to communicate with you, for security and fraud prevention, and to follow the law. We may also process your information for other purposes with your consent. We only process your information when we have a valid legal reason to do so.

In what situations and with which parties do we share personal information? We may share information in specific situations and with specific third parties, such as the transport partners, lodges and parks needed to run your trip, and our payment providers.

How do we keep your information safe? We have organisational and technical processes in place to protect your personal information. However, no electronic transmission over the internet or information storage technology can be 100% secure, so we cannot promise that hackers, cybercriminals or other unauthorised third parties will never be able to defeat our security and improperly collect, access, steal or change your information.

What are your rights? Depending on where you live, the privacy law may give you certain rights over your personal information.

How do you exercise your rights? The easiest way is to contact us at [email protected]. We will consider and act on any request in line with applicable data protection laws.

What information do we collect?
How do we process your information?
What legal bases do we rely on to process your personal information?
When and with whom do we share your personal information?
What is our stance on third-party websites?
Do we use cookies and other tracking technologies?
How long do we keep your information?
How do we keep your information safe?
Do we collect information from minors?
What are your privacy rights?
Controls for Do-Not-Track features
Do United States residents have specific privacy rights?
Do other regions have specific privacy rights?
Do we make updates to this notice?
How can you contact us about this notice?
How can you review, update or delete the data we collect from you?

1. What information do we collect?

Personal information you give to us

In short: We collect personal information that you give to us.

We collect personal information that you give us when you ask about our trips or Services, book a trip, take part in activities on the Services, or otherwise contact us.

Personal information provided by you. The personal information we collect depends on how you interact with us and the Services, the choices you make, and the products and features you use. It may include:

names
phone numbers (including WhatsApp numbers)
email addresses
mailing addresses
company or school name (for corporate and school trips)
country of residence and nationality
contact preferences
trip details, such as dates, group size and pickup point
a copy of your passport, when it is needed for gorilla or chimpanzee permits (the Uganda Wildlife Authority asks for it), for some lodge bookings, or for a visa, passport or travel insurance application you ask us to help with
documents you give us for a visa, passport or travel insurance application, used only for that application
health or dietary needs, only if you choose to tell us so we can plan your trip safely
photos taken during trips (see “Trip photos” below)

Sensitive information. We do not process sensitive information.

Payment data. When you pay for a trip, we receive the details needed to confirm your payment, such as your name, phone number or account name, the amount, and the transaction reference. We do not store card numbers or mobile money PINs.

Mobile money. Payments by MTN Mobile Money (merchant code 575709) and Airtel Money (merchant code 4395402) are handled by MTN Uganda and Airtel Uganda under their own privacy policies.
Bank transfer. Payments by bank transfer are handled by Diamond Trust Bank (DTB) Uganda under its own privacy policy.
Online card payments. Card payments (Visa, Mastercard) are handled and stored by Pesapal, our card payment provider, through its payment connection PayLexer. You can read Pesapal’s privacy notice here: https://www.pesapal.com/ug/privacy-policy.

Trip photos. We take photos during our trips and share them with the group through Google Drive. We may use trip photos on our website and social media. If you do not want to appear in photos we use publicly, please tell us before the trip.

All personal information that you give us must be true, complete and accurate, and you must tell us about any changes.

Information we receive from other sources

In short: We receive some information from social media and travel platforms when you contact us through them.

We may receive personal information about you from:

Social media. When you reply to one of our adverts or send us a message on Meta (Facebook or Instagram) or LinkedIn, we receive the details you share there, such as your name, phone number, email address, profile name and your message.
Travel platforms. When you send an enquiry, ask for a quote or make a booking with us through a platform such as SafariBookings, Tripadvisor, TouristLink, Bokun or Inspirational Adventures, that platform passes us the details you gave it, such as your name, email address, phone number, country, travel dates, group size and trip wishes.

We use this information only to reply to you and to plan and run your trip. Each platform also handles your information under its own privacy policy, so please read their policies too.

We do not buy personal information from third parties.

Information collected automatically

In short: Some information, such as your Internet Protocol (IP) address and/or browser and device details, is collected automatically when you visit our Services.

We automatically collect certain information when you visit, use or navigate the Services. This information does not reveal your specific identity (like your name or contact details) but may include device and usage information, such as your IP address, browser and device details, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. We mainly need this information to keep our Services secure and working, and for our internal analytics and reporting.

Like many businesses, we also collect information through cookies and similar technologies. You can find out more in our Cookie Policy: https://twoservants.com/cookie-policy/.

Our website is protected by Cloudflare, including Cloudflare Turnstile on our contact form. Turnstile checks that a real person, not a bot, is sending the form. To do this, Cloudflare processes technical information about your browser and device. You can read Cloudflare’s privacy policy here: https://www.cloudflare.com/privacypolicy/.

The information we collect includes:

Log and usage data. Log and usage data is service-related, diagnostic, usage and performance information that our servers automatically collect when you access or use our Services and record in log files. Depending on how you interact with us, this may include your IP address, device information, browser type and settings, and information about your activity in the Services (such as date and time stamps, pages and files viewed, searches, and other actions you take, such as which features you use), device event information (such as system activity, error reports, sometimes called “crash dumps”, and hardware settings).
Device data. We collect device data such as information about your computer, phone, tablet or other device you use to access the Services. Depending on the device, this may include your IP address (or proxy server), device and application identification numbers, location, browser type, hardware model, internet service provider and/or mobile network, operating system, and system configuration information.
Location data. We collect location data such as information about your device’s location, which can be precise or approximate. How much we collect depends on the type and settings of the device you use. For example, we may use GPS and other technologies to collect location data that tells us your current location (based on your IP address). You can opt out by refusing access to this information or by turning off the Location setting on your device. If you opt out, some parts of the Services may not work for you.

2. How do we process your information?

In short: We process your information to provide, improve and run our Services, communicate with you, for security and fraud prevention, and to follow the law. We may also process your information for other purposes with your consent.

We process your personal information for a number of reasons, depending on how you interact with our Services, including:

To deliver and arrange the services you ask for. We may process your information to provide the trip or service you requested, including sharing the details needed with transport partners, lodges, guides and parks.
To respond to your questions and offer support. We may process your information to answer your questions and solve any problems with the service you requested.
To send you administrative information. We may process your information to send you details about our trips and services, changes to our terms and policies, and other similar information.
To manage your bookings and payments. We may process your information to manage your bookings, payments, cancellations and refunds made through the Services.
To share trip photos. We may process photos taken during trips to share them with your group through Google Drive and, unless you opt out before the trip, to use them in our marketing.
To request feedback. We may process your information when needed to ask for feedback and to contact you about your use of our Services.
To send you marketing and promotional messages. We may process the personal information you send us for our marketing purposes, if this matches your marketing preferences. You can opt out at any time. For more information, see “What are your privacy rights?” below.
To show you targeted advertising. We may process your information to create and show personalised content and advertising based on your interests, location and more. For more information, see our Cookie Policy: https://twoservants.com/cookie-policy/.
To protect our Services. We may process your information as part of our efforts to keep our Services safe and secure, including fraud monitoring and prevention.
To identify usage trends. We may process information about how you use our Services to understand how they are used, so we can improve them.
To measure our marketing. We may process your information to understand how to make our marketing and promotional campaigns more relevant to you.
To save or protect a person’s vital interests. We may process your information when needed to save or protect a person’s vital interests, such as to prevent harm.

3. What legal bases do we rely on to process your information?

In short: We only process your personal information when we believe it is necessary and we have a valid legal reason (a legal basis) to do so under applicable law, such as with your consent, to follow the law, to provide you with services or fulfil a contract, to protect your rights, or for our legitimate business interests.

If you are located in the EU or UK, this section applies to you.

The General Data Protection Regulation (GDPR) and UK GDPR require us to explain the legal bases we rely on to process your personal information. We may rely on the following:

Consent. We may process your information if you have given us permission (consent) to use your personal information for a specific purpose. You can withdraw your consent at any time.
Performance of a contract. We may process your personal information when we believe it is necessary to fulfil our contract with you, including providing our Services, or at your request before entering into a contract with you.
Legitimate interests. We may process your information when we believe it is reasonably necessary for our legitimate business interests, and those interests do not outweigh your interests and fundamental rights and freedoms. For example, we may process your personal information to:

– send users information about special offers and discounts on our trips and services
– create and show personalised and relevant advertising to our users
– analyse how our Services are used so we can improve them and keep users engaged
– support our marketing activities
– find problems and/or prevent fraud
– understand how our users use our trips and services so we can improve their experience

Legal obligations. We may process your information where we believe it is necessary to meet our legal obligations, such as to cooperate with a law enforcement body or regulator, to use or defend our legal rights, or to share your information as evidence in a legal case we are involved in.
Vital interests. We may process your information where we believe it is necessary to protect your vital interests or the vital interests of another person, such as when someone’s safety may be at risk.

If you are located in Canada, this section applies to you.

We may process your information if you have given us specific permission (express consent) to use your personal information for a specific purpose, or where your permission can be inferred (implied consent). You can withdraw your consent at any time.

In some exceptional cases, the law may allow us to process your information without your consent, for example:

if collection is clearly in the interests of a person and consent cannot be obtained in time
for investigations and fraud detection and prevention
for business transactions, if certain conditions are met
if it is in a witness statement and the collection is necessary to assess, process or settle an insurance claim
to identify injured, ill or deceased persons and communicate with next of kin
if we have reasonable grounds to believe a person has been, is, or may be a victim of financial abuse
if it is reasonable to expect that collecting and using it with consent would affect the availability or accuracy of the information, and the collection is reasonable for investigating a breach of an agreement or a breach of the laws of Canada or a province
if disclosure is required to comply with a subpoena, warrant, court order or court rules on the production of records
if it was produced by a person in the course of their employment, business or profession, and the collection is consistent with the purposes for which it was produced
if the collection is only for journalistic, artistic or literary purposes
if the information is publicly available and is specified by the regulations

4. When and with whom do we share your personal information?

In short: We may share information in the situations described in this section and/or with the following third parties.

We may need to share your personal information in the following situations:

Trip suppliers. To run your trip, we share the details needed (such as names, group size, pickup point, and passport details where required) with the transport partners we hire vehicles from, lodges and hotels, guides, activity providers, and park authorities such as the Uganda Wildlife Authority (UWA) for permits.
Payment providers. MTN Uganda, Airtel Uganda, Diamond Trust Bank (DTB) Uganda and, for any online card payments, Pesapal, to process and confirm your payments.
Service providers. Companies that help us run our business and website, such as our email and file-sharing provider (Google Workspace, including Google Drive for trip photos and backups of our website), our website host, Cloudflare for website security and spam protection on our forms, and WhatsApp (Meta) when you message us there.
Embassies, government offices and insurers. Only when you ask us to help with a visa, passport or travel insurance application, we pass the documents you give us to the embassy, government office or insurer concerned.
Travel platforms. If you booked or asked about a trip through a platform such as SafariBookings, Tripadvisor, TouristLink, Bokun or Inspirational Adventures, we may share the booking status and the details needed to manage your booking with that platform.
Business transfers. We may share or transfer your information in connection with, or during talks about, any merger, sale of company assets, financing, or purchase of all or part of our business by another company.
When we use Google Maps Platform APIs. We may share your information with certain Google Maps Platform APIs (for example the Google Maps API and Places API). Google Maps uses GPS, Wi-Fi and cell towers to estimate your location. GPS is accurate to about 20 metres, while Wi-Fi and cell towers help when GPS signals are weak, such as indoors. This data helps Google Maps give directions, but it is not always fully precise. We obtain and store your location on your device (“cache”). You can withdraw your consent at any time by contacting us using the details at the end of this document.
Business partners. We may share your information with our business partners to offer you certain products, services or promotions.

We do not sell your personal information.

5. What is our stance on third-party websites?

In short: We are not responsible for the safety of any information that you share with third parties that we may link to or who advertise on our Services, but are not affiliated with our Services.

The Services may link to third-party websites, online services or mobile apps and/or contain adverts from third parties that are not affiliated with us and which may link to other websites, services or apps. We make no guarantee about these third parties, and we will not be liable for any loss or damage caused by using third-party websites, services or apps. A link to a third-party website, service or app does not mean we endorse it. We cannot guarantee the safety and privacy of data you give to any third-party website. Any data collected by third parties is not covered by this Privacy Notice. We are not responsible for the content or the privacy and security practices of any third parties, including other websites, services or apps linked to or from the Services. Please read the policies of those third parties and contact them directly with any questions.

6. Do we use cookies and other tracking technologies?

In short: We may use cookies and other tracking technologies to collect and store your information.

We may use cookies and similar tracking technologies (like web beacons and pixels) to gather information when you use our Services. Some online tracking technologies help us keep our Services secure, prevent crashes, fix bugs, save your preferences and support basic site functions.

We may also allow third parties and service providers to use online tracking technologies on our Services for analytics and advertising, including to help manage and show adverts and to tailor adverts to your interests. These third parties and service providers use their technology to show adverts about products and services tailored to your interests, which may appear on our Services or on other websites.

When you first visit our website, a cookie banner lets you choose which types of non-essential cookies you accept. You can change your choice at any time.

If these online tracking technologies count as a “sale” or “sharing” (which includes targeted advertising, as defined under applicable laws) under applicable US state laws, you can opt out by sending a request as described in the section “Do United States residents have specific privacy rights?”

You can find more about how we use these technologies, and how you can refuse certain cookies, in our Cookie Policy: https://twoservants.com/cookie-policy/.

At the moment we do not use analytics or advertising cookies on our website. If we add tools such as Google Analytics or the Meta Pixel, they will only run after you accept them in the cookie banner, and we will update this notice and our Cookie Policy first.

7. How long do we keep your information?

In short: We keep your information for as long as needed for the purposes in this Privacy Notice, unless the law requires otherwise.

We only keep your personal information for as long as it is needed for the purposes in this Privacy Notice, unless the law requires or allows a longer period (for example for tax, accounting or other legal requirements). In practice:

Enquiries that do not lead to a booking: up to 2 years after our last contact with you.
Booking and payment records: 7 years after your trip, for tax and accounting.
Passport copies and visa or insurance documents: only as long as needed for the permit, booking or application, and then deleted.
Trip photos: kept until you ask us to remove them.

When we no longer have a legitimate business need to process your personal information, we will either delete or anonymise it. If this is not possible (for example, because your personal information is stored in backup archives), we will store it securely and keep it separate from any further processing until it can be deleted.

8. How do we keep your information safe?

In short: We aim to protect your personal information through organisational and technical security measures.

We have put in place suitable and reasonable technical and organisational security measures to protect any personal information we process. However, despite our safeguards and efforts, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise that hackers, cybercriminals or other unauthorised third parties will never be able to defeat our security and improperly collect, access, steal or change your information. Although we will do our best to protect your personal information, sending personal information to and from our Services is at your own risk. You should only access the Services in a secure environment.

9. Do we collect information from minors?

In short: We do not knowingly collect data from or market to children under 18 years of age.

We do not knowingly collect or ask for data from, or market to, children under 18 years of age, and we do not knowingly sell such personal information. By using the Services, you confirm that you are at least 18, or that you are the parent or guardian of a minor and agree to that minor’s use of the Services.

When a parent, guardian or school books a trip that includes children (for example a family trip or school trip), we only collect the children’s details needed to run the trip safely, and we receive them from the responsible adult or school.

If we learn that we have collected personal information from a user under 18 without the consent of a parent or guardian, we will deactivate the account and take reasonable steps to delete that data quickly. If you become aware of any data we may have collected from children under 18, please contact us at [email protected].

10. What are your privacy rights?

In short: Depending on where you live, such as the European Economic Area (EEA), United Kingdom (UK), Switzerland, Canada, Uganda or some US states, you have rights that give you more access to and control over your personal information. You may review, change or close your account at any time, depending on where you live.

In some regions (like the EEA, UK, Switzerland and Canada), you have certain rights under data protection laws. These may include the right (i) to ask for access to and a copy of your personal information, (ii) to ask for correction or deletion, (iii) to limit the processing of your personal information, (iv) where it applies, to data portability, and (v) not to be subject to automated decision-making. In some cases, you may also have the right to object to the processing of your personal information. You can make a request by contacting us using the details in the section “How can you contact us about this notice?” below.

We will consider and act on any request in line with applicable data protection laws.

If you are located in the EEA or UK and believe we are processing your personal information unlawfully, you also have the right to complain to your Member State data protection authority or the UK data protection authority.

If you are located in Switzerland, you may contact the Federal Data Protection and Information Commissioner.

Withdrawing your consent: If we rely on your consent to process your personal information (express and/or implied, depending on the law), you have the right to withdraw your consent at any time by contacting us using the details in the section “How can you contact us about this notice?” below.

This will not affect the lawfulness of any processing before you withdrew consent, nor, where the law allows, processing based on legal grounds other than consent.

Opting out of marketing and promotional messages: You can unsubscribe from our marketing and promotional messages at any time by clicking the unsubscribe link in our emails, replying “STOP” to our WhatsApp or SMS messages, or by contacting us using the details below. You will then be removed from our marketing lists. We may still contact you with service messages, for example about your booking or to answer your questions.

Trip photos: If you do not want to appear in trip photos we use publicly, tell us before the trip. If you change your mind after a photo has been published, contact us and we will remove it from our website and social media pages where we reasonably can.

Cookies and similar technologies: Most web browsers accept cookies by default. If you prefer, you can usually set your browser to remove or reject cookies. You can also change your choices at any time using our cookie banner. If you remove or reject cookies, this could affect some features of our Services. For more information, see our Cookie Policy: https://twoservants.com/cookie-policy/.

If you have questions or comments about your privacy rights, please email us at [email protected].

11. Controls for Do-Not-Track features

Most web browsers and some mobile operating systems and apps include a Do-Not-Track (“DNT”) setting you can turn on to signal that you do not want data about your online browsing to be monitored and collected. There is not yet an agreed technology standard for recognising and following DNT signals. So we do not currently respond to DNT browser signals or any other method that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will tell you about it in an updated version of this Privacy Notice.

California law requires us to tell you how we respond to web browser DNT signals. Because there is currently no industry or legal standard for recognising or following DNT signals, we do not respond to them at this time.

12. Do United States residents have specific privacy rights?

In short: If you live in California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah or Virginia, you may have the right to ask for access to and details about the personal information we hold about you and how we have processed it, to correct mistakes, to get a copy of it, or to delete it. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some cases by law.

Categories of personal information we collect

We have collected the following categories of personal information in the past twelve (12) months:

Category	Examples	Collected
A. Identifiers	Contact details, such as real name, alias, postal address, telephone or mobile number, unique personal identifier, online identifier, Internet Protocol address, email address and account name	YES
B. Personal information as defined in the California Customer Records statute	Name, contact information, education, employment, employment history and financial information	YES
C. Protected classification characteristics under state or federal law	Gender, age, date of birth, race and ethnicity, national origin, marital status and other demographic data	YES
D. Commercial information	Transaction information, purchase history, financial details and payment information	YES
E. Biometric information	Fingerprints and voiceprints	NO
F. Internet or other similar network activity	Browsing history, search history, online behaviour, interest data, and interactions with our and other websites, applications, systems and advertisements	NO
G. Geolocation data	Device location	NO
H. Audio, electronic, sensory or similar information	Images and audio, video or call recordings created in connection with our business activities	YES
I. Professional or employment-related information	Business contact details to provide our Services at a business level, or job title, work history and professional qualifications if you apply for a job with us	YES
J. Education information	Student records and directory information	NO
K. Inferences drawn from collected personal information	Inferences drawn from any of the personal information above to create a profile or summary about, for example, a person’s preferences and characteristics	YES
L. Sensitive personal information		NO

We may also collect other personal information outside these categories when you interact with us in person, online, or by phone or mail in the context of:

getting help through our customer support channels;
taking part in customer surveys or contests; and
delivering our Services and answering your questions.

We will use and keep the personal information we collect as needed to provide the Services, or for:

Categories A, B, C, I and K: up to 2 years after our last contact for enquiries, and 7 years after your trip for bookings
Category D: 7 years after your trip, for tax and accounting
Category H: until you ask us to remove a photo

Sources of personal information

Learn more about the sources of personal information we collect in “What information do we collect?”

How we use and share personal information

Learn more about how we use your personal information in “How do we process your information?”

Will your information be shared with anyone else?

We may share your personal information with our service providers under a written contract between us and each service provider. Learn more in “When and with whom do we share your personal information?”

We may use your personal information for our own business purposes, such as internal research for technological development and demonstration. This is not considered “selling” your personal information.

We have not disclosed, sold or shared any personal information with third parties for a business or commercial purpose in the past twelve (12) months. We will not sell or share personal information belonging to website visitors, users and other consumers in the future.

Your rights

You have rights under certain US state data protection laws. These rights are not absolute, and in some cases we may decline your request as the law allows. These rights include:

the right to know whether or not we are processing your personal data
the right to access your personal data
the right to correct mistakes in your personal data
the right to ask for your personal data to be deleted
the right to get a copy of the personal data you previously shared with us
the right not to be discriminated against for using your rights
the right to opt out of the processing of your personal data if it is used for targeted advertising (or “sharing” as defined under California’s privacy law), the sale of personal data, or profiling that leads to decisions with legal or similarly significant effects (“profiling”)

Depending on the state where you live, you may also have the following rights:

the right to access the categories of personal data being processed (as allowed by law, including the privacy law in Minnesota)
the right to get a list of the categories of third parties to which we have disclosed personal data (as allowed by law, including the privacy law in California, Delaware and Maryland)
the right to get a list of the specific third parties to which we have disclosed personal data (as allowed by law, including the privacy law in Minnesota and Oregon)
the right to review, understand, question and correct how personal data has been profiled (as allowed by law, including the privacy law in Minnesota)
the right to limit the use and disclosure of sensitive personal data (as allowed by law, including the privacy law in California)
the right to opt out of the collection of sensitive data and personal data collected through a voice or facial recognition feature (as allowed by law, including the privacy law in Florida)

How to exercise your rights

To use these rights, email us at [email protected], or use the contact details at the end of this document.

We will honour your opt-out choice if you turn on the Global Privacy Control (GPC) opt-out signal in your browser.

Under certain US state data protection laws, you can name an authorised agent to make a request for you. We may refuse a request from an authorised agent who does not send proof that they have been validly authorised to act for you under applicable laws.

Request verification

When we receive your request, we will need to check your identity to confirm you are the person whose information we hold. We will only use the personal information in your request to check your identity or authority to make the request. If we cannot check your identity from the information we already hold, we may ask you for more information to check your identity and for security or fraud-prevention purposes.

If you send the request through an authorised agent, we may need more information to check your identity before handling your request, and the agent will need to give us written and signed permission from you to make the request for you.

Appeals

Under certain US state data protection laws, if we decline to act on your request, you may appeal our decision by emailing us at [email protected]. We will tell you in writing what action we took or did not take in response to the appeal, with a written explanation of the reasons. If your appeal is denied, you may send a complaint to your state attorney general.

California “Shine The Light” law

California Civil Code Section 1798.83, also known as the “Shine The Light” law, allows our users who live in California to ask us, once a year and free of charge, for information about the categories of personal information (if any) we disclosed to third parties for direct marketing, and the names and addresses of all third parties we shared personal information with in the previous calendar year. If you live in California and would like to make such a request, please send it to us in writing using the contact details in “How can you contact us about this notice?”

13. Do other regions have specific privacy rights?

In short: You may have more rights depending on the country you live in.

Uganda

We process personal information in line with the Data Protection and Privacy Act, 2019 of Uganda. You have the right to ask for access to your personal information, to ask us to correct or delete it, and to object to its use. If you are not happy with how we handle your personal information, you can complain to the Personal Data Protection Office (PDPO) of Uganda.

Australia and New Zealand

We collect and process your personal information under the duties and conditions set by Australia’s Privacy Act 1988 and New Zealand’s Privacy Act 2020 (Privacy Act).

This Privacy Notice meets the notice requirements in both Privacy Acts, in particular: what personal information we collect from you, from which sources, for which purposes, and the other recipients of your personal information.

If you do not wish to give the personal information needed for its purpose, it may affect our ability to provide our services, in particular to:

offer you the products or services you want
answer or help with your requests

At any time, you have the right to ask for access to or correction of your personal information. You can make a request by contacting us using the details in “How can you review, update or delete the data we collect from you?”

If you believe we are processing your personal information unlawfully, you have the right to complain about a breach of the Australian Privacy Principles to the Office of the Australian Information Commissioner, and about a breach of New Zealand’s Privacy Principles to the Office of the New Zealand Privacy Commissioner.

Republic of South Africa

If you are not satisfied with how we handle any complaint about our processing of personal information, you can contact the regulator:

The Information Regulator (South Africa)
General enquiries: [email protected]
Complaints (complete POPIA/PAIA form 5): [email protected] and [email protected]

14. Do we make updates to this notice?

In short: Yes, we will update this notice as needed to stay in line with relevant laws.

We may update this Privacy Notice from time to time. The updated version will show an updated “Last updated” date at the top. If we make important changes, we may tell you by posting a clear notice of the changes or by sending you a message directly. Please review this Privacy Notice often to stay informed about how we protect your information.

15. How can you contact us about this notice?

If you have questions or comments about this notice, you can contact us:

Two Servants Tours and Safaris Ltd
Banga-Nakiwogo, P.O. Box 653, Entebbe, Uganda
Phone and WhatsApp: +256 771 643 786 or +256 748 020 141
Email: [email protected]

We do not take walk-in visits at the moment. If you would like to meet us, please contact us first to book an appointment.

16. How can you review, update or delete the data we collect from you?

Depending on the laws of your country, or your state if you live in the US, you may have the right to ask for access to the personal information we collect from you, details about how we have processed it, to correct mistakes, or to delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some cases by law. To ask to review, update or delete your personal information, please email [email protected] or contact us using the details above.