Waves and Wonders Tanzania ("we", "us", "our") plans tailor-made holidays in Zanzibar and Tanzania. This policy explains what personal information we collect when you use this website or contact us, why we collect it, and the choices you have. We aim to follow the Tanzanian Personal Data Protection Act, 2022 and, where it applies to you, the EU and UK GDPR.
Information we collect
- Information you give us: your name, email address, phone or WhatsApp number, travel dates, number of travelers, trip interests, budget and any message you send through our inquiry form, by email, by phone or on WhatsApp.
- Information we need to arrange your trip: once you book, we may ask for passport details, dates of birth, flight details, dietary needs and health information relevant to your activities. We ask only for what hotels, airlines and operators require.
- Technical information: to protect the site from spam and abuse, we keep a one-way scrambled (hashed) version of your IP address with each inquiry. Our web host may also keep standard server logs.
How we use your information
- To reply to your inquiry and prepare quotes and itineraries.
- To book and manage your trip with hotels, transport and activity providers.
- To keep records, handle payments, and meet legal and tax duties.
- To protect our website and prevent spam or fraud.
- To contact you about your trip. We send marketing emails only if you ask us to, and you can opt out at any time.
Why we are allowed to use it
We use your information to take steps at your request before a contract and to perform it, because we have a legitimate interest in running and protecting our business, because the law requires it, or because you have given your consent. You can withdraw consent at any time.
Who we share it with
We do not sell your personal information. We share only what is needed with the people who help deliver your trip: hotels, airlines and ferry operators, drivers, guides and activity providers, and our safari specialists, Upcountry Adventures, if you ask us to include a safari or Kilimanjaro climb. We also use service providers for web hosting, email and secure payments. Where required by law, we may share information with authorities.
Third-party services on our website
Our pages load fonts from Google Fonts, and the weather widget on the home page fetches forecasts from Open-Meteo. These providers receive your IP address and browser details when your browser connects to them. If we embed a Google Map, YouTube video or social feed, that provider may also collect information. See our cookie policy for details. Links to other websites, including those of our partners, are covered by their own policies.
International transfers
Your trip involves people in several countries, and our service providers may store data outside Tanzania. When we transfer data, we take reasonable steps to make sure it stays protected.
How long we keep it
We keep inquiry and booking records for as long as needed to deal with your trip, answer questions and meet legal and accounting duties. As a general rule, inquiries that do not become bookings are deleted within 24 months, and booking records are kept for the period required by law.
Security
We use access controls, password protection and secure connections to protect your information. No system is completely secure, so please avoid sending card numbers or passport scans by ordinary email. We will tell you the safest way to send them.
Your rights
You can ask us to give you a copy of your information, correct it, delete it, restrict or object to how we use it, or move it to another provider. You can also withdraw consent at any time. To do so, email us at the address below. We will reply within a reasonable time and may need to confirm your identity first.
Children
Our website is for adults. When you book for children, you confirm that you have the right to share their information with us.
Changes to this policy
We may update this policy from time to time. The date at the top of the page shows when it last changed.
Contact and complaints
For questions or requests about your information, email [email protected] or message us on WhatsApp at +255 684 224 307. If you are not satisfied with our answer, you may complain to the data protection authority in your country, or in Tanzania, the Personal Data Protection Commission.