PRIVACY POLICY: CORPORATE VERTICAL

1. Introduction

Safari Acacia (“we,” “us,” or “SA”) is committed to protecting the privacy and sensitive information of our corporate clients, their executives, and high-profile guests. This policy outlines how we collect, process, and safeguard personal data within our Corporate Vertical, specifically tailored for wilderness-based strategic retreats and MICE travel.

Under the Digital Personal Data Protection Act (DPDPA) of India, Safari Acacia acts as a Data Fiduciary. When executing travel on behalf of a corporation, we may also act as a Data Processor under the instructions of the client entity (the Data Controller).

2. Data We Collect

Given the high-risk and high-touch nature of wildlife travel, we collect “Special Category” data that exceeds standard corporate travel requirements:

• Executive Identity: Full legal names, passport details, and government-issued IDs (required for Park Permits and Border Crossings).
• Physical Metrics: Exact body weight (mandatory for weight-and-balance safety on small-aircraft bush charters).
• Sensitive Health Data: Physical fitness levels (for trekking), pre-existing medical conditions, and severe allergies (critical for remote wilderness safety).
• Concierge Preferences: Personalized seating, specific dietary requirements, and high-value beverage or equipment preferences.
• Geolocation Data: Temporary tracking via satellite-linked GPS or radio frequency for guest security during bush walks or remote excursions.

3. Legal Basis for Processing

We process data based on:

1. Contractual Necessity: To fulfill the booking and logistics of the corporate retreat.
2. Consent: Explicitly obtained for sensitive health data and marketing materials.
3. Legitimate Interest: Specifically regarding guest safety, emergency medical response, and security in remote wildlife areas.

4. The “Wilderness Ecosystem” Data Sharing

To deliver a seamless “Boardroom meets Nature” experience, we must share data with third parties operating outside traditional urban infrastructure:

• Partner Properties & Lodges: To manage rooming and dietary safety.
• Charter Aviation & Transport Providers: For safety-critical weight and manifest logs.
• Government & Park Authorities: For the issuance of restricted-access wildlife permits.
• Emergency Medical Services: Rapid sharing of vitals and medical history with Medevac providers (e.g., AMREF, Global Rescue).

5. Visual Privacy & Corporate Intel

Recognizing the sensitive nature of strategic discussions:

• Strategy Confidentiality: We instruct all partner properties to ensure “visual privacy” in breakout areas to prevent unauthorized viewing of corporate charts or digital displays.
• Photography/Drones: We will not use drones or capture identifiable imagery of CXOs for SA marketing purposes without a signed Media Release Agreement. Guests have the absolute “Right to Opt-Out” of any group photography.

6. ESG & Impact Reporting

As part of our commitment to conservation, SA may process anonymized data to provide your corporation with Sustainability Impact Reports. This includes calculating the conservation footprint and community contribution derived from your specific event.

7. Cross-Border Data Transfers

Your data may originate in India but will be processed in the jurisdictions where our retreats occur (e.g., Kenya, Botswana, Rwanda). We employ Standard Contractual Clauses (SCCs) to ensure that partner properties in these regions maintain a level of data protection equivalent to Indian and International standards.

8. Data Security in Remote Environments

While we provide “Wilderness Conferencing” via satellite uplinks, users acknowledge that satellite communication, while encrypted, carries inherent limitations compared to terrestrial fiber. SA employs enterprise-grade VPNs and security protocols for all on-site digital infrastructure managed by us.

9. Retention & The “Right to be Forgotten”

• Transactional Data: Retained for 7 years for financial and tax compliance.
• Concierge Profiles: Retained for 3 years following the last engagement to facilitate future “Executive Story” personalization, unless the Data Principal (the guest) requests erasure.

10. Your Rights (The Data Principal)

Under the DPDPA and global regulations, you have the right to:

• Access: Request a summary of the personal data we hold.
• Correction: Update inaccurate health or identity data.
• Withdrawal of Consent: Revoke consent for data processing at any time (though this may impact our ability to ensure safety in remote areas).
• Grievance Redressal: Contact our Data Protection Officer for any concerns.

11. Contact Information

For all privacy-related inquiries or to exercise your rights, please contact our Grievance Officer / Data Protection Officer:

Safari Acacia Travel Co.

Attn: Data Protection Office

Email: privacy@safariacacia.com