This policy explains what personal information Tanzania Tour Operators (TTO) collects, why we collect it, who we share it with and what choices you have. We try to collect only what we need.
1. Who is responsible for your information
Tanzania Tour Operators (TTO) (“we”, “us”) decides how and why your information is used on this website, and is the “controller” of it. You can contact us about your information at [email protected].
When you send a request to a tour operator, place to stay or restaurant, we pass your details to that business. From then on the business also decides how it uses them for your trip, and its own privacy practices apply as well. Please ask the business if you want to know more.
2. What we collect
When you just browse
- Which pages are viewed. We keep a daily count for each tour, operator, stay and restaurant page so partners can see how many people looked at their listing. This count is not tied to your name, and we do not store your IP address for it. A small cookie stops us counting the same page twice for you in one day (see the Cookie Policy).
- Technical information that your browser sends automatically (such as device type, browser and approximate location from your IP address), which our hosting and security tools process to keep the website working and safe.
When you create an account
- Your name, email address and password (stored in scrambled form), and a profile photo if you add one.
- The items you save, and your account settings.
When you send a request
- Your name, email address, phone or WhatsApp number, and nationality or country.
- Trip details: the tour, stay or restaurant, dates, number of adults and children, rooms or time, an estimated total, how you prefer to be contacted, and your message.
- The business’s reply, the status of your request, and (if you are signed in) a link to your account so you can follow it.
When you write a review
- Your review, rating, title, trip details, the name and country you choose to show, and any photos you upload. Photos can contain information such as the place and time they were taken.
When a business joins or claims a listing
- The contact person’s name, email, phone, role and password, business details, photos, and, for tour operators, licence and registration documents. We may also keep a note of how we checked that the person may manage the business.
When you write to us
- Your message and our replies.
3. Why we use it
| What we do | Why we are allowed to |
|---|---|
| Run your account, pass your request to the business you chose, show you its reply | It is needed to provide the service you asked for (contract) |
| Check that requests, reviews and listings are genuine, prevent spam and fraud, keep the website secure | Our legitimate interest in a safe and trustworthy marketplace, and legal duties |
| Publish reviews and moderate them | Your consent when you submit, and our legitimate interest in useful reviews |
| Count page views and understand which pages are useful | Our legitimate interest in improving the website and in telling partners how their listings perform (where the law requires consent for this, we ask for it) |
| Send service emails (confirmations, replies, security notices, account changes) | Contract and legitimate interest |
| Keep records and answer legal requests | Legal obligations |
We do not sell your personal information. We do not send you marketing emails unless you have clearly asked for them, and you can stop them at any time.
4. Who we share it with
- The business you contact. Your request goes to the people who manage that business, and to our team if the business has no manager yet. It is shown in their dashboard and sent by email.
- The public, for reviews. A published review shows your name (or the name you chose), country, text, rating and photos, and is visible to anyone.
- Service providers who help us run the website, such as web hosting, email delivery, security, backups and map tile providers. They may only use your information to provide their service to us.
- Authorities and advisers when the law requires it, to protect people’s safety or our rights, or when we obtain legal, accounting or insurance advice.
- A new owner if the business behind Tanzania Tour Operators (TTO) is sold or merged, in which case this policy continues to apply.
Pages with maps load map images from a map provider, and some destination pages can show a YouTube video (loaded in YouTube’s privacy-enhanced mode). Those providers receive your IP address and device details when your browser loads their content.
5. Sending information abroad
Your information may be processed in Tanzania and in other countries where our providers work, and the businesses you contact may be anywhere you plan to travel. Where we transfer information out of the country we take steps to keep it protected, such as contracts that require the receiver to look after it properly.
6. How long we keep it
- Account information: while your account is open. If you close it, we delete your account, including your sign-in and saved items.
- Requests: kept so the business and we can follow up, handle complaints and keep records. When you close your account they stay with the business, no longer linked to you.
- Published reviews: while they remain useful and accurate, or until you ask us to remove yours (see below).
- Partner documents: while the business is listed, and afterwards as long as we need them for legal or checking purposes.
- Page-view counts: as daily totals for up to 400 days.
We then delete the information or make it anonymous, unless the law requires us to keep it longer.
7. Your choices and rights
Depending on where you live (for example under the Personal Data Protection Act, 2022 of Tanzania, or the GDPR if you are in the European Economic Area or the UK), you may have the right to:
- ask what information we hold about you and receive a copy;
- have wrong information corrected;
- ask us to delete your information, or to restrict or stop using it;
- object to uses based on our legitimate interest, and withdraw consent you gave earlier;
- move your information to another service;
- complain to the data protection authority in your country. In Tanzania this is the Personal Data Protection Commission.
Most account details can be changed or deleted yourself in your account settings. For anything else write to [email protected]. We may need to confirm who you are first, and we will reply within the time the law allows. To remove a request that was already passed to a business, please also contact that business, as it holds its own copy.
8. How we protect it
We use secure connections, limit access to the team members and partners who need it, scramble passwords, and check requests for signs of abuse. No system is completely secure, so please use a strong, unique password and tell us at once if you suspect a problem.
9. Children
The website is meant for adults. We do not knowingly collect information from anyone under 18. If you travel with children, only an adult should send the request, and you should give children’s details (such as their number and ages) only as far as the trip needs. If you think a child has given us information, write to us and we will delete it.
10. Changes
We may update this policy. The date at the top shows the latest version, and we will tell you about important changes on the website or by email.
11. Contact
Questions or requests about your information: [email protected]. Also see our Terms of Use and Cookie Policy.