Privacy policy

How staycation.africa collects, uses and protects personal data.

Who we are

staycation.africa is operated by Ai-spares Ltd, a company registered in Hong Kong (Business Registration No. 78885884), with its registered office at Suite C, Level 7, World Trust Tower, 50 Stanley Street, Central, Hong Kong. Ai-spares Ltd is the controller of the personal data described in this policy. You can reach us at office@staycation.africa.

What we collect

  • Messages you send us: your name, email address and the content of your message when you use our contact form, suggest a property, ask for a correction or apply to list a property.
  • Business contact details: for our hotel-manager interview series and listing outreach we use contact details that hotels and their staff publish for business purposes, such as a manager's name, role and work email address.
  • Usage data: pages visited, referring site, device and browser type and approximate location derived from your IP address, collected through Google Analytics and our server logs.
  • Cookie preferences: the choice you make in our cookie banner.
  • Security data: IP addresses and login attempts recorded by our security tools to protect the site.

We do not take bookings or payments, so we never collect payment card or bank details.

Why we use it and our legal bases

  • To answer your messages and handle listing or correction requests, because you asked us to and it is in our legitimate interest to respond.
  • To invite hotels and their managers to interviews or listings, based on our legitimate interest in featuring African hospitality businesses. Interviews are only published with the participant's agreement.
  • To measure and improve the site, based on your consent where the law requires it and otherwise on our legitimate interests.
  • To keep the site secure and prevent abuse, based on our legitimate interests.
  • To meet our legal obligations.

Where we rely on consent, you can withdraw it at any time. If you receive an outreach email from us and do not want further contact, reply and we will stop.

Cookies

We use cookies that the site needs to work and, where the law requires your consent, analytics cookies only if you accept them. You can accept or reject non-essential cookies in the cookie banner and change your choice at any time with the cookie icon at the bottom of each page. When you follow a hotel link to Expedia, Expedia and its affiliate network may set their own cookies to record that your visit came from staycation.africa.

Who we share data with

  • Hosting and email providers that run the website and our mailbox.
  • Google, for website statistics (Google Analytics and Search Console).
  • An exchange-rate data provider, for indicative currency conversion.
  • Expedia and its affiliate partners, when you click a hotel link. From that point their own privacy policies apply.

We do not sell personal data.

International transfers

Our service providers may process data outside your country, including in the United States, the European Economic Area and Hong Kong. Where the law requires it, we rely on appropriate safeguards such as standard contractual clauses.

How long we keep data

We keep messages and outreach records only as long as we need them to handle the request or business relationship, and normally delete them within 24 months of our last contact unless we must keep them longer for legal reasons. Analytics data is kept for no more than 14 months. Security logs are kept only as long as needed to protect the site.

Your rights

Depending on where you live, including under the EU and UK GDPR, Kenya's Data Protection Act 2019 and Hong Kong's Personal Data (Privacy) Ordinance, you may have the right to access, correct or delete your data, restrict or object to its use, receive a copy in a portable format and withdraw consent. To use these rights, email office@staycation.africa. You can also complain to your local data protection authority, for example Kenya's Office of the Data Protection Commissioner.

Children

staycation.africa is intended for adults planning travel. We do not knowingly collect personal data from children under 18.

Changes to this policy

We may update this policy when our services or the law change. The current version always appears on this page. Last updated: 21 October 2026.