Privacy

We are a Kenyan company, so we operate under the Kenya Data Protection Act of 2019 (KDPA). Most of our guests fly in from the EU and the US, so we also hold ourselves to the General Data Protection Regulation (GDPR) where it offers stronger rights.

This page explains what we collect, why, who sees it, and how to ask us to change or delete it.

A flight booking requires your full name as it appears on your passport, your date of birth, your weight in kilograms, your nationality, an emergency contact, the lodge or camp you are staying at on the morning of your flight, and any medical condition you wish us to know about.

We collect weight because the basket is balanced by compartment before lift-off, not as a comment on you. We collect medical information so the pilot in command knows what is on board.

Card and mobile money payments are handled by PCI-compliant payment processors — international card networks for foreign cards, Kenyan mobile money for local payments. We never see or store your full card number, your CVV, or your mobile money PIN.

We retain only a transaction reference, the amount, and the last four digits of the card for accounting and dispute resolution.

Our pilots and ground crew sometimes photograph the launch field, the basket in flight, and the champagne breakfast. These images are part of your morning and yours to keep — we share them with you the same day.

We do not publish guest faces on our website or social channels without written permission. If we ask you to sign a release for marketing use, you can decline without it affecting your flight in any way.

If you booked with us we may, once, write to ask whether you would like to hear from us again — a dawn report from the Mara, a note when conservancy fees change, occasionally a film. You can refuse, and you can unsubscribe from any future email with one click.

We do not sell, rent, or trade our guest list. Ever.

This site uses a small number of strictly necessary cookies to remember your language and your booking session. We use one privacy-respecting analytics tool that does not set advertising cookies and does not track you across other sites.

You will not see a 47-checkbox consent banner here because we have not built a system that warrants one.

Booking and accounting records are kept for seven years, which is the retention period required by the Kenya Revenue Authority for tax records. Marketing consent is kept until you withdraw it.

Operational safety records — manifest, weight sheet, weather log — are kept for the lifetime of the aircraft involved, in line with KCAA record-keeping rules. CCTV at the launch field overwrites every 14 days.

Under both KDPA and GDPR you have the right to ask what we hold on you, to correct it, to receive a copy in a portable format, and to ask us to delete it where we no longer have a legal basis to keep it.

We will respond inside 30 days and we will not charge you to do so.

For anything on this page, write to our Data Protection Officer at dpo@masaiballoons.com. For everything else, hello@masaiballoons.com or +254 700 000 000. Our registered office is in Narok County, Kenya.

We are registered with the Office of the Data Protection Commissioner (ODPC) of Kenya. If we cannot resolve a complaint to your satisfaction, you have the right to lodge it directly with the ODPC.