Your information, handled with care.

Ubuntu Footprints Ltd is the data controller for personal information collected through this site and during our trip planning, booking, and operations work. Our office is on Kololo Hill, Kampala, Uganda. You can reach the team responsible for privacy at info@wholesomeug.com.

We collect only what we need to plan, book, and run your trip:

• Identity & contact:name, email, phone number, country, and the details on each traveller’s passport when required for permits or domestic flights.
• Trip details: dates, preferences, dietary needs, accessibility requirements, and the medical information you choose to share for safety.
• Payment: billing name and the last four digits of cards processed through our payment provider. We never see or store the full card number.
• Operational: messages exchanged with our team, notes from your guide, and photos taken during the trip.
• Technical: basic device, browser, and analytics signals when you use this site (see cookies).

We use your information to respond to your enquiries, build and price itineraries, purchase permits and bookings on your behalf, communicate during the trip, deal with emergencies, send receipts and invoices, and improve our services. We also send occasional updates such as our monthly field-notes letter, which you can unsubscribe from at any time.

Where the GDPR or similar regulations apply to you, our legal bases for processing are: performance of a contract with you (planning and operating your trip), our legitimate interests (running and improving the business, security, fraud prevention), your consent (for the newsletter and non-essential cookies), and compliance with legal obligations (tax, accounting, permits).

We share only what is necessary, only with the parties below, and only for the purposes described:

• Uganda Wildlife Authority and equivalent authorities — to issue permits and confirm park access, including traveller names and passport details where required.
• Lodges, camps, charter operators and airlines — to confirm rooms, transfers, and flight manifests on your behalf.
• Payment processors — to take card and bank payments. They are independently certified and process card data outside our systems.
• Insurance and emergency services — only in the event of a real incident, and only to the extent needed to get you the help you need.
• Professional advisors and authorities — accountants, auditors, and government bodies where we are required to share information by law.

We do not sell personal information. We do not share it for third-party marketing.

This site uses a small number of essential cookies to keep it working and to remember basic preferences. We also use privacy-respecting analytics to understand which pages help travellers and which do not. You can decline non-essential cookies in your browser without breaking the site.

We keep trip files for seven years after the trip ends, primarily to meet Ugandan accounting and tax obligations and to be able to assist returning travellers. Marketing contact details are kept until you unsubscribe. Free-text enquiries that do not lead to a booking are archived after 24 months.

You have the right to:

• Ask for a copy of the personal information we hold about you.
• Correct anything that is wrong or out of date.
• Ask us to delete information that we no longer need, subject to our legal obligations.
• Object to or restrict certain processing.
• Withdraw consent for marketing or analytics at any time (this does not affect anything we did before withdrawal).
• Complain to your local data protection authority.

To exercise any of these rights, write to info@wholesomeug.com. We aim to respond within 30 days.

Our team and most of our suppliers are based in Uganda, so your information will be handled here. Email, cloud storage, and payment providers we use may process data in the United States, the European Union, and the United Kingdom under standard data protection terms. By engaging us to plan a trip in Uganda you accept that these transfers are inherent to delivering the service.

We do not knowingly collect data from children except as part of a family booking made by a parent or guardian, who is responsible for the information they provide about minors travelling with them.

We protect your information with reasonable technical and organisational measures: encrypted connections, access controls, and a small team trained on what to share and when. No system is perfectly secure, so if you suspect a problem with your account or our handling of your data, contact us immediately.

When we change this policy we will update the date at the top of the page and, for material changes, notify you by email if we have your address on file. The current policy applies from the date shown.