Privacy policy

1. Data controller

The controller of your personal data is Frank Makoye, operating as Zanzibar Roots Tours & Safari. For any data protection questions, please contact xxx.

2. What we collect

From the form and your messages: your name, email address, phone or WhatsApp number, hotel name, dates, number of people and the content of your message. Providing data is voluntary, but we cannot reply without contact details.

3. Why and on what legal basis

Answering your request and running your tour: Art. 6(1)(b) GDPR (steps before a contract and performance of a contract).

Accounting: Art. 6(1)(c) GDPR (tax obligations).

Establishing, pursuing or defending legal claims: Art. 6(1)(f) GDPR (our legitimate interest).

4. Who receives your data

Service providers we use: website hosting (Cloudflare), form handling and email (xxx). If you message us on WhatsApp, WhatsApp (Meta) also processes your data.

Guides and drivers in Zanzibar, to the extent needed for your tour (name, hotel, date, number of people). This is a transfer outside the European Economic Area, to Tanzania, necessary to perform the contract (Art. 49(1)(b) GDPR).

5. How long we keep data

Requests without a booking: as long as needed to reply and continue the conversation. After a booking: for the limitation period for claims and as long as tax law requires (usually 5 years from the end of the tax year).

6. Your rights

You have the right to access, rectify and erase your data, to restrict processing, to data portability and to object to processing based on our legitimate interest.

You may also lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw.

7. Cookies

This website does not use analytics or marketing cookies.