1. Introduction

Tanzania Destination ("Company," "we," "us," or "our") operates the website tanzaniadestination.co.tz (the "Website"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Website and use our services.

We are committed to protecting your privacy and ensuring transparency about our data practices. Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our Website.

2. Information We Collect

2.1 Information You Provide Directly

We collect information you voluntarily provide through various forms on our Website, including:

• Contact Forms: Name, email address, phone number, and message content
• Booking & Planning Forms: Full name, email, destination preference, travel dates, group size, accommodation preferences
• Newsletter Subscription: Email address
• Review & Feedback Forms: Name, email, rating, and review text
• User Account Information: Login credentials (if applicable)

2.2 Information Collected Automatically

When you visit our Website, we automatically collect certain information, including:

• Device Information: Browser type, device type, operating system, IP address
• Usage Data: Pages visited, time spent on pages, links clicked, referring website
• Cookies & Similar Technologies: Session cookies for authentication and functionality (stored securely with HTTPOnly flag)
• Analytics Data: Aggregated data about user interactions to improve our Website

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: Process your booking requests, planning inquiries, and travel arrangements
• Communication: Respond to your inquiries, provide customer support, and send confirmations
• Marketing: Send promotional emails, newsletters, and updates about new packages (only if you subscribed)
• Improvement: Analyze Website usage to improve functionality, user experience, and content
• Security: Monitor and prevent fraudulent activities, unauthorized access, and security threats
• Compliance: Comply with legal obligations and regulatory requirements
• Review Management: Moderate and display customer reviews and feedback

4. Data Storage & Security

Data Storage: We store your information in a secure SQLite database. The data is retained as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by law. You can request deletion of your personal data at any time by contacting us.

Security Measures: We implement comprehensive security measures to protect your information:

• HTTPS encryption for all data transmitted over the internet
• HTTPOnly cookies that cannot be accessed via JavaScript
• Secure password hashing (bcryptjs) for any stored credentials
• Rate limiting to prevent brute-force attacks
• Content Security Policy (CSP) headers to prevent injection attacks
• Regular security monitoring and updates

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but take all reasonable precautions.

5. Sharing of Information

Third Parties: We do not sell, trade, or rent your personal information to third parties. However, we may share your information in the following circumstances:

• Service Providers: Payment processors, email service providers, and hosting providers who assist in delivering our services (bound by confidentiality agreements)
• Legal Requirements: When required by law, court order, or government request
• Business Transfer: In the event of merger, acquisition, or sale of assets
• Your Consent: When you explicitly authorize us to share information

No Cookie-Based Tracking: We do not use third-party cookies for targeted advertising or behavioral tracking. We use only functional cookies necessary for Website operation.

6. Your Privacy Rights

Depending on your location, you may have the following rights:

6.1 General Rights (All Users)

• Right to Access: Request a copy of the personal data we hold about you
• Right to Correction: Request correction of inaccurate or incomplete information
• Right to Deletion: Request deletion of your personal data (subject to legal obligations)
• Right to Opt-Out: Unsubscribe from marketing communications at any time

6.2 GDPR Rights (European Users)

If you are located in the European Union, you have additional rights under the General Data Protection Regulation (GDPR):

• Right to withdraw consent at any time
• Right to data portability
• Right to restrict processing
• Right to lodge a complaint with a supervisory authority

6.3 How to Exercise Your Rights

To exercise any of these rights, please contact us at info@tanzaniadestination.co.tz or call +25562079200. We will respond to your request within 30 days.

7. Cookies & Tracking

Session Cookies: We use secure session cookies to maintain your login status and provide a seamless experience. These cookies are essential for Website functionality and do not track you across the internet.

Cookie Preferences: You can control cookies through your browser settings. Disabling cookies may affect Website functionality.

No Third-Party Tracking: We do not use Google Analytics, Facebook Pixel, or other third-party tracking services. We do not engage in behavioral targeting or retargeting.

8. Newsletter & Marketing Communications

When you subscribe to our newsletter, your email is stored securely with an "active" status. We will only send you:

• Promotional content about our safari packages and tours
• Travel tips and destination information
• Updates about new services and special offers

You can unsubscribe from marketing emails at any time by:

• Clicking the "Unsubscribe" link in any email we send
• Contacting us directly at info@tanzaniadestination.co.tz
• Calling us at +25562079200

9. Children's Privacy

Our Website is not directed to children under the age of 13. We do not knowingly collect personal information from children. If we become aware that a child under 13 has provided us with personal information, we will promptly delete such information. Parents or guardians who believe their child has provided information to us should contact us immediately.

10. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, or as required by applicable law. Specifically:

• Booking Information: Retained for the duration of your travel and 2 years after for accounting purposes
• Newsletter Subscribers: Retained until you unsubscribe
• Customer Reviews: Retained indefinitely (unless you request deletion)
• Contact Form Data: Retained for 1 year from submission
• Session Data: Automatically deleted after session expiration

11. International Data Transfers

If you are accessing our Website from outside of Tanzania, your data may be transferred to, stored in, and processed in Tanzania and other countries. By using our Website, you consent to the transfer of your information to countries outside of your country of residence, which may have different data protection rules.

12. Third-Party Links

Our Website may contain links to third-party websites and services. This Privacy Policy applies only to our Website. We are not responsible for the privacy practices of third-party websites. We encourage you to review the privacy policies of any websites you visit through links on our Website.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, and other factors. We will notify you of material changes by posting the revised policy on our Website and updating the "Last Updated" date. Your continued use of our Website after changes become effective constitutes your acceptance of the revised Privacy Policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

We will respond to your inquiry within 30 days of receipt. If you are not satisfied with our response, you may have the right to lodge a complaint with your local data protection authority.

15. Compliance & Certifications

We comply with applicable data protection laws, including GDPR for European users. While we are not currently certified under specific data protection programs, we maintain security practices consistent with industry standards.