Welcome to Tanganyika Tours & Travel Ltd (“we”, “us”, “our”). We are committed to protecting your privacy and handling your personal information in a transparent and secure manner. This Privacy Policy explains what information we collect, why we collect it, how we use it, and your rights in relation to that information.

1. Information we collect

We collect information you provide directly to us and information collected automatically when you use our website and services.

a) Personal information you provide

• Full name, title and date of birth (when needed for bookings)
• Contact details: email address, telephone number, postal address
• Travel documentation: passport or ID number, nationality (for bookings/visas)
• Payment information (processed by secure third-party payment providers)
• Emergency contact information
• Special requests and health or accessibility needs where provided voluntarily

b) Information collected automatically

• IP address, device and browser information
• Website usage data (pages visited, time on page, referrer)
• Cookies and similar tracking technologies

2. How we use your information

We use personal data for the following purposes:

• To process and confirm travel bookings and reservations
• To communicate important trip information, changes, and emergency notices
• To provide personalised travel services and itineraries
• To handle payments, refunds and fraud prevention (via third-party processors)
• To respond to enquiries, feedback and complaints
• To send marketing communications where you have consented; you can opt out anytime
• To improve and secure our website, detect abuse and maintain records for legal purposes

3. Legal bases for processing (where applicable)

For users in jurisdictions where a legal basis is required (for example, under the GDPR), we rely on one or more of the following:

• Performance of a contract (processing booking and travel services)
• Consent (for marketing communications and optional services)
• Compliance with legal obligations (tax, immigration, safety and reporting)
• Legitimate interests (improving services, preventing fraud), where not overridden by your rights

4. Sharing your information

We do not sell your personal information. We may share data with:

• Service providers and partners required to deliver travel services (hotels, airlines, local guides, transport operators)
• Payment processors and financial institutions for payment handling
• Government, immigration or safety authorities when required for travel and legal compliance
• Third-party service providers (IT providers, CRM, email platforms) under contract with confidentiality requirements
• Professional advisers or law enforcement where necessary to comply with legal obligations or protect rights

5. International transfers

Some partners or service providers may operate outside Uganda. When personal data is transferred across borders, we put in place appropriate safeguards (e.g., contractual protections) to ensure a similar level of protection.

6. Data retention

We retain personal data only as long as necessary to provide services, comply with legal obligations and for legitimate business purposes. When data is no longer required we will securely delete or anonymise it.

7. Security

We use administrative, technical and physical measures to protect personal data. Although we take reasonable steps to protect your data, no system is completely secure and we cannot guarantee absolute security.

8. Cookies & tracking

Our website uses cookies and similar technologies to provide basic site functionality, analyze usage and deliver tailored content. You can control cookie preferences through your browser settings. To learn more, see our cookies section below.

9. Cookies — brief overview

Types of cookies we use include:

• Essential cookies — required for site functionality (e.g., session management)
• Performance & analytics cookies — help us understand how visitors use our site
• Functional cookies — remember preferences (language, currency)
• Marketing cookies — used by third parties for advertising and remarketing (only with consent)

10. Your rights

Under the Data Protection and Privacy Act (2019) of Uganda and other applicable laws, you may have rights including:

• Access to a copy of personal data we hold about you
• Request correction or deletion of inaccurate or unnecessary data
• Object to or restrict processing in certain circumstances
• Withdraw consent at any time where processing is based on consent
• Lodge a complaint with the Personal Data Protection Office (PDPO) in Uganda

To exercise your rights, please contact us using the details in the Contact Us section below. We may request information to confirm your identity before fulfilling requests.

11. Children’s privacy

Our services are not intended for children under 18. We do not knowingly collect personal information from minors. If you believe we have collected information from a child, contact us and we will take steps to delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised policy on our website and update the “Effective Date” at the top. Significant changes will be communicated through our usual channels.

13. Contact us