Privacy Policy
What we collect when you enquire, why we hold it, who else sees it, and how to make us delete it.
Who we are
eXvo Travel is a Tanzanian safari operator based in Kibanda Maziwa, Sakina, Arusha, Tanzania. We are the data controller for personal information collected through exvotravel.com and through direct correspondence with us.
For any question about this policy, or to exercise any of the rights set out below, write to hello@exvotravel.com.
What we collect
We collect only what we need to answer your enquiry and, if you travel with us, to run your journey safely.
- Information you give us in the enquiry form: your name, email address, WhatsApp or phone number, country of residence, travel dates, number of nights, who is travelling, accommodation preference, the interests you select, and anything you write in the notes field.
- Information you give us by email, WhatsApp or phone during planning.
- If you book: traveller names as shown on passports, passport numbers, dates of birth, nationality, dietary requirements, relevant medical or mobility information, emergency contact details, and travel insurance details.
- Payment confirmations. We do not see or store your full card number. Payments are handled by the payment provider.
- Basic technical information about your visit, described in our cookie policy.
Why we hold it, and on what legal basis
We use your information to reply to your enquiry, prepare an itinerary and quote, make bookings with camps, lodges, airlines and park authorities on your behalf, keep you informed before and during travel, and meet Tanzanian legal and tax obligations.
- To take steps at your request before entering a contract: answering your enquiry and quoting.
- To perform our contract with you: booking and running your journey.
- To comply with a legal obligation: tax records, park and immigration requirements.
- Our legitimate interests: running and improving the business, and keeping records of correspondence.
- Your explicit consent, which we ask for separately where we need to handle health or dietary information, or send you anything not related to your enquiry.
Who else sees it
We share only what is necessary, only with parties who need it to deliver your journey.
- Camps, lodges and hotels we book on your behalf: names, dates, dietary and accessibility needs.
- Airlines and charter operators for internal flights: names as shown on your passport, and weights where the aircraft requires it.
- Tanzanian park and conservation authorities, where registration is required for entry.
- Our email and hosting providers, named below.
- Tanzanian authorities where we are legally required to disclose.
- We do not sell your information, and we do not share it with advertisers or data brokers. Ever.
The services we use
This website is hosted by Vercel Inc. Enquiry notifications are sent using Resend, and our own email is hosted by Zoho on European servers. Each of these processes personal data on our instructions only.
If you contact us by WhatsApp, that conversation is also processed by WhatsApp under its own privacy terms.
International transfers
We are based in Tanzania, so if you enquire from outside Tanzania your information is transferred here. Some of our service providers store data in the European Union and the United States. Where personal data of travellers in the UK or EEA is transferred, we rely on standard contractual clauses or equivalent safeguards offered by those providers.
How long we keep it
Enquiries that do not become bookings are kept for two years, in case you come back to us, and then deleted.
Booking records are kept for seven years after travel, which is what Tanzanian tax and accounting rules require. Passport and health details are deleted within twelve months of your return, since we have no reason to hold them longer.
Your rights
Wherever you live, we will honour these requests. If you are in the UK or EEA they are rights you hold under the UK GDPR or EU GDPR.
- Ask for a copy of the personal information we hold about you.
- Ask us to correct anything inaccurate.
- Ask us to delete your information, where we are not legally required to keep it.
- Ask us to restrict how we use it, or object to our using it.
- Ask for your information in a portable format.
- Withdraw consent at any time, where we relied on your consent.
- Complain to your local data protection authority (in the UK, the Information Commissioner’s Office).
Marketing
We do not add enquirers to a mailing list. If you ask to hear from us, or tick the newsletter box, you can unsubscribe from any message we send and we will stop immediately.
Children
This website is not directed at children, and we do not knowingly collect information directly from anyone under sixteen. Where children travel with you, we collect their details from the adult making the booking.
Security
Enquiries are transmitted over an encrypted connection and held in accounts protected by two-factor authentication. No system is perfect, and we will tell you promptly if a breach affects your information.
Changes to this policy
If we change this policy we will update the date at the top of this page. Where a change materially affects travellers with an active booking, we will tell them directly rather than relying on this page.
Questions about this policy
Write to us and a person will answer. We do not use a legal inbox that nobody reads. If something here is unclear or you think it is wrong, we would rather hear it than not.
