Privacy Policy

Last updated: 28 October 2026

1. Who we are

Iconic Expeditions (“we”, “us”) operates this website, iconic-expeditions.com. For the purposes of data protection law we are the responsible party / data controller for the personal information described here.

Privacy contact: hello@iconic-expeditions.com

2. What we collect, and why

When	What	Why	Lawful basis
You send an enquiry or ask for a quote	Name, email, phone or WhatsApp, travel dates, party size, interests, anything you write in the message	To reply, plan your trip and send a quote	Steps you ask us to take before a contract; our legitimate interest in answering enquiries
You book a trip	The details needed to arrange it, which can include names, dates of birth, passport details, nationality, dietary and medical needs, emergency contact and flight details	To arrange flights, lodges, transfers, permits and visas, and to keep you safe on the trip	Performing our contract with you; legal obligations; your consent for health information
We invoice and receive payment	Name, billing details, payment reference. We invoice you; we do not take card payments on this site	To bill, keep accounting records and meet tax law	Contract; legal obligation
You subscribe to our newsletter	Email address, name if given	To send travel stories and offers	Your consent; you can unsubscribe at any time
You use the site	Pages viewed, device and browser type, approximate location, how you arrived, interactions with forms and buttons	To understand what helps visitors and to improve the site	Your consent where required (analytics and marketing cookies); otherwise our legitimate interest in securing and running the site
You write a comment	Name, email, comment text, IP address and browser string	To publish your comment and prevent spam	Legitimate interest

We do not knowingly collect information from children. We do not sell your personal information.

3. Cookies and similar technologies

When you first visit we ask which cookies you accept, and you can change your choice later. Declining analytics and marketing does not stop you using the site or sending an enquiry.

Necessary: keep the site working and secure, and remember your choices. These do not need consent.
Analytics: Google Analytics and Google Tag Manager, to count visits and see how pages are used.
Marketing: the Meta (Facebook) pixel, to measure and improve our advertising.
Embedded services: videos and review widgets, such as Trustpilot, SafariBookings and Tripadvisor, may set their own cookies when their content loads.

4. Who we share information with

We share only what is needed with:

Travel suppliers: lodges, camps, airlines, charter operators, transfer companies, guides, park and permit authorities, and visa or insurance providers, so they can deliver your trip. Some are outside your country.
Service providers that run our website and communications: website hosting (Namecheap EasyWP), delivery and security (Cloudflare), team sign-in (WorkOS), website development and maintenance (Nyuchi Web Services), places and maps data (Mukoko Kweli), email delivery (including SendGrid), newsletters (Mailchimp), analytics and tag management (Google), spam protection (Google reCAPTCHA), advertising measurement (Meta), media sharing (Pinterest) and our review platforms (Trustpilot, SafariBookings and Tripadvisor).
Professional advisers, insurers, banks and authorities where the law requires or to protect our legal rights.
A buyer or successor, if our business is sold, on the same terms as this policy.

Our sub-processors

These companies handle personal information on our behalf. We name them so you can see who they are and why we use them.

Sub-processor	What they do for us	Where they are
Namecheap (EasyWP)	Hosts this website and its database	United States
Cloudflare	Delivers and protects this website (network, caching and security) and stores images	United States, with a global network
WorkOS	Sign-in for our team: staff email addresses and sign-in records. Visitors do not use it	United States
Nyuchi Web Services (Nyuchi Africa)	Builds, maintains and secures this website, with access to its administration	Zimbabwe
Mukoko Kweli (Nyuchi Africa)	Places and maps data used on this website	Zimbabwe
Trustpilot	Collects and shows customer reviews	Denmark

5. Moving information across borders

Travel involves sending your details to suppliers in the country you visit, and our providers store data in several countries. Where we send personal information outside your country we use safeguards the law accepts, such as contracts that require the recipient to protect it.

6. How long we keep it

Enquiries that do not become bookings: only as long as needed to respond and for a reasonable period afterwards, then deleted.
Booking and accounting records: as long as tax and accounting law requires.
Newsletter subscriptions: until you unsubscribe.
Analytics: for the retention period set in Google Analytics.

7. Your rights

Depending on where you live, you may ask us to: tell you what we hold; correct it; delete it; restrict or object to how we use it; give you a copy in a portable format; and withdraw consent at any time (this does not affect earlier use). Email hello@iconic-expeditions.com and we will reply within the time the law requires. You also have the right to complain to your data protection authority: in South Africa, the Information Regulator (inforegulator.org.za); in the EU or UK, your local supervisory authority.

8. Keeping it secure

We use access controls, encrypted connections and trusted providers, and we limit who can see booking details. No system is perfectly secure. If a breach affects you, we will tell you and the regulator as the law requires.

9. Changes

We will post changes here and change the “Last updated” date. If a change matters to you, such as a new use of your information, we will tell you directly.