Firebrand Getaways Ltd
Last Updated: 15 October 2026
Firebrand Getaways Ltd ("Firebrand Getaways", "we", "our" or "us") respects your privacy and is committed to protecting the personal information you share with us.
This Privacy Policy explains how we collect, use, store, disclose and protect personal information when you visit our website, www.firebrandgetaways.co.ke, contact us, submit an enquiry or engage our corporate team development services.
We handle personal information in accordance with applicable data protection laws in Kenya, including the Data Protection Act, 2019, and relevant regulations.
By using our website or providing personal information to us, you acknowledge that you have read this Privacy Policy. Where consent is required by law, we will seek it separately.
We may collect the following categories of personal information, depending on how you interact with us.
When you contact us, request a proposal or enquire about our programmes, we may collect:
Full name.
Organisation or company name.
Work email address.
Telephone number.
Preferred programme or service.
Number of participants.
Preferred programme dates and venue.
Information about your organisation's team development objectives.
Any other information you voluntarily include in your enquiry or correspondence.
Please avoid submitting sensitive personal information unless it is necessary for the service and we have an appropriate lawful basis to process it.
When you visit our website, certain technical information may be collected automatically, depending on our website configuration and your consent preferences.
This may include:
IP address and approximate location.
Browser type and device information.
Operating system.
Pages visited and time spent on the website.
Referring website or traffic source.
Interactions with website links and buttons.
Website performance and usage information.
Our website may use cookies and similar technologies to support website functionality, understand visitor behaviour and improve our services.
If enabled, Google Analytics 4 may help us understand how visitors interact with our website, which pages attract interest and which marketing channels generate enquiries.
Google Tag Manager may be used to manage website measurement tags. Its presence does not, by itself, mean that all tracking technologies are activated.
Where required, we will obtain consent before using non-essential cookies or analytics technologies. You may be able to manage your preferences through our cookie controls or your browser settings.
We may use personal information for the following purposes:
Responding to enquiries and requests for information.
Preparing quotations and tailored corporate programme proposals.
Understanding an organisation's team development requirements.
Communicating about our programmes, availability and services.
Arranging and delivering agreed services.
Managing client relationships and business operations.
Improving our website, services and user experience.
Measuring website traffic and marketing performance, where permitted.
Maintaining website security and preventing misuse.
Meeting applicable legal, regulatory and contractual obligations.
We will not use personal information for purposes incompatible with the original purpose of collection unless permitted by applicable law.
We process personal information where we have an appropriate lawful basis under applicable data protection law.
Depending on the circumstances, this may include:
Your consent.
Taking steps at your request before entering into a contract.
Performing a contract with you or your organisation.
Complying with a legal obligation.
Pursuing legitimate interests, where permitted and where your rights do not override those interests.
Where processing relies on consent, you may withdraw your consent, subject to applicable legal requirements. Withdrawal does not affect processing that was lawful before consent was withdrawn.
We do not sell your personal information.
We may share personal information with trusted service providers where necessary to operate our business and deliver our services. These may include:
Website hosting and maintenance providers.
Email and business communication providers.
Analytics and website measurement providers.
Form processing and security service providers.
Professional advisers and relevant business partners where necessary.
Government authorities or other parties where disclosure is required or authorised by law.
We expect service providers handling personal information on our behalf to apply appropriate safeguards and use the information only for authorised purposes.
Where we use third-party services, their own privacy policies may also apply to the information they process.
Some service providers we use may process or store personal information outside Kenya.
Where personal information is transferred outside Kenya, we will apply the safeguards and conditions required by applicable data protection law, including any requirements relating to the destination country, appropriate safeguards and consent where applicable.
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including responding to enquiries, providing services, maintaining business records and meeting legal obligations.
Retention periods may vary depending on the nature of the information, the relationship with the client and applicable legal requirements.
When personal information is no longer required, we will take reasonable steps to delete it, anonymise it or otherwise dispose of it securely, subject to any legal retention obligations.
We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
These measures may include access controls, secure website connections, appropriate service-provider arrangements, backups and website security measures.
However, no website, electronic transmission or storage system can be guaranteed to be completely secure.
If a personal data breach occurs, we will respond in accordance with applicable legal requirements.
Subject to applicable law and any relevant limitations, you may have the right to:
Be informed about how your personal information is used.
Access personal information we hold about you.
Request correction of inaccurate, incomplete or misleading information.
Request deletion of personal information where legally applicable.
Object to certain forms of processing.
Request restriction of processing in circumstances provided by law.
Request portability of personal information where the legal requirements are met.
Withdraw consent where processing is based on consent.
Lodge a complaint with the relevant data protection authority.
To exercise your rights, please contact us using the details provided below. We may need to verify your identity before responding.
We will handle requests within the applicable legal timeframes.
We may occasionally wish to share information about our programmes, services or corporate team development offerings.
We will send direct marketing communications only where permitted by applicable law and will provide an appropriate way to opt out or withdraw consent where required.
You may request that we stop sending marketing communications at any time.
Even if you opt out of marketing, we may still send essential communications relating to an enquiry, an existing service or a legal obligation.
Our website may contain links to third-party websites or platforms, including WhatsApp and social media services.
When you follow these links or communicate with us through third-party platforms, your information may be processed under the privacy policies and terms of those providers.
Firebrand Getaways Ltd does not control the privacy practices of independent third parties. We encourage you to review their privacy policies before providing personal information.
Our website and corporate services are primarily intended for organisations and adult business representatives.
We do not knowingly collect personal information directly from children through our website unless there is a lawful and necessary reason to do so and appropriate safeguards are in place.
If you believe a child has provided personal information to us inappropriately, please contact us so that we can assess the situation and take appropriate action.
We may update this Privacy Policy from time to time to reflect changes in our services, website technologies, business practices or legal requirements.
Any updated version will be published on this page with a revised "Last Updated" date.
We encourage you to review this page periodically.
If you have questions about this Privacy Policy, wish to exercise your data protection rights or have a concern about how your personal information is handled, please contact us.
Email: firebrandgetaways@gmail.com
Telephone: 0718 833 226
Postal/Business Address: Nacico Plaza, 3rd Floor, Room 312, Nairobi, Kenya.
Website: https://www.firebrandgetaways.co.ke
We will review and respond to privacy-related requests in accordance with applicable data protection requirements.