Privacy Policy

Privacy Policy
Last updated: 17 September 2026

Who we are
Africa Custom Tours AS («we», «us») is a Norwegian company, organisation number [937 467 877], registered in Ålesund, Norway. We design and sell custom journeys through Namibia. Trips are operated on the ground by our partner Signature Tours Namibia, Windhoek.
We are the data controller for the personal data described in this policy.
Contact: info@africacustomtours.no · Africa Custom Tours AS, Nedre Strandgate 16, Ålesund, Norway.

What data we collect and why
Enquiries. When you send an inquiry through our website, we collect your name, email address, phone number if you give it, the number of travellers, your preferred travel dates and travel style. We use this to reply to you and to plan a trip proposal. Legal basis: steps taken at your request before entering a contract (GDPR Article 6(1)(b)).
Bookings. If you book, we collect what we need to deliver the trip: full names as in passports, dates of birth, passport numbers and nationality, contact details, dietary and medical information you choose to share, emergency contact, flight details, driving licence details for self-drive trips, and payment records. Legal basis: performance of the contract (Article 6(1)(b)) and our legal obligations, for example bookkeeping under the Norwegian Bookkeeping Act (Article 6(1)(c)). Health information is processed only with your explicit consent (Article 9(2)(a)) and only so that lodges, guides and vehicle providers can look after you properly.
Newsletter. If you tick the newsletter box, we send occasional stories from Namibia by email. Legal basis: consent (Article 6(1)(a)). You can unsubscribe at any time through the link in every email or by writing to us.
Website use. Our hosting provider records technical data such as IP address, browser type and pages visited in server logs for security and to keep the site running. Legal basis: our legitimate interest in a secure, working website (Article 6(1)(f)). See the Cookie Policy for details of cookies and similar technologies.

Who we share data with
Signature Tours Namibia, Windhoek, which operates your trip. They receive the traveller details needed to make bookings and look after you in Namibia.
Lodges, camps, guides, vehicle rental companies, airlines and activity providers in Namibia, each receiving only the details needed for your stay or service with them. For self-drive trips you sign the vehicle rental agreement directly with the rental company, which then processes your data under its own policy.
Service providers that host our website and email, process payments and provide bookkeeping. These act on our instructions under data-processing agreements.
Reisegarantifondet and public authorities where the law requires it.
We do not sell personal data and we do not use it for advertising.

Transfers outside the EEA
Namibia is outside the European Economic Area and has no adequacy decision from the European Commission. Sharing your details with Signature Tours Namibia and Namibian suppliers is necessary to perform the contract you have asked for (GDPR Article 49(1)(b)). Our agreement with Signature Tours Namibia includes the EU standard contractual clauses and commits them to protect your data to the same standard as we do.
Our website translation feature is provided by Google (see the Cookie Policy). Google may process your IP address and the page text on servers outside the EEA under Google’s own privacy policy.

How long we keep data
Enquiries that do not lead to a booking: 12 months, then deleted.
Booking records: 5 years after the trip, as required by the Norwegian Bookkeeping Act, then deleted.
Health information: deleted within 3 months after the trip ends.
Newsletter address: until you unsubscribe.
Server logs: 30days.

Your rights
You can ask us to access, correct, delete or restrict the use of your personal data, to receive a copy in a portable format, and to object to processing based on our legitimate interests. Where processing is based on consent, you can withdraw it at any time; this does not affect processing that took place before withdrawal.
To exercise any of these rights, email info@africacustomtours.no. We reply within 30 days.
If you are not satisfied with how we handle your data, you can complain to the Norwegian Data Protection Authority (Datatilsynet), www.datatilsynet.no.

Security
Data is stored on servers in the European Union operated by our hosting provider, protected by encryption in transit (HTTPS), access controls and regular backups. Only the five people in our team, in Ålesund and Windhoek, have access to booking data.

Changes
We update this policy when our practices change. The date at the top shows the current version.