Privacy policy

This document is a placeholder template prepared by Savunda for the demo build. Final language must be reviewed by qualified legal counsel before public launch. Last reviewed by counsel: pending.

Savunda collects the information you give us directly when you request a quote, build a trip, complete a booking, leave a review, or contact our team. That includes:

• Identity data — full legal name as printed in your passport, date of birth, nationality, and (for international flights or park-fee invoicing) passport number and expiry date.
• Contact data — email address, phone or WhatsApp number, and a mailing address if we need to courier travel documents.
• Trip data — preferred dates, group size, accommodation tier, dietary requirements, mobility considerations, prior safari experience, and any free-text notes you share with our planning team.
• Payment data — when you pay through PayPal or a bank transfer, the payment processor handles your card or account number directly. We see only the transaction reference, amount, currency, and the email PayPal returns to us. We never store full card numbers on our servers.
• Device & usage data — IP address, browser and operating system, the pages you visit on https://savunda.com, and the referring URL. This is collected automatically through cookies and server logs, subject to the consent choices described in our cookie policy.

We do not knowingly collect data from children under 18. Bookings on behalf of minors must be made by a parent or legal guardian.

We collect personal data for a small number of specific purposes:

• To prepare an accurate quote and itinerary for your trip in Tanzania.
• To confirm your booking with our ground partners — camps, lodges, transport providers, Kilimanjaro porter co-operatives, and park authorities — many of whom require traveller names and passport details for permits.
• To process payments, refunds, and gift-certificate redemptions through PayPal and our banking partners.
• To send you booking confirmations, joining instructions, pre-departure briefings, and post-trip follow-ups via email (delivered through [Resend](https://resend.com/legal/privacy-policy)).
• To respond to support enquiries, complaints, and emergency communications during your trip.
• To improve our website, marketing and product offering through aggregated analytics.
• To meet our legal and regulatory obligations in Tanzania and USA, including tax records and tour-operator reporting.

Inside Savunda LLC, access to traveller data is limited to staff who need it for their job — planners, guides, accountants, and the engineering team that maintains our booking systems. We hold the data on encrypted infrastructure operated by reputable cloud providers in the European Union and the United States.

We share data with third parties only where it is necessary to deliver your trip:

• Camps, lodges, and ground operators in Tanzania receive the names, ages, dietary needs and arrival dates of your party.
• Tanzania National Parks Authority (TANAPA) and other permit issuers receive passport details where required for park entry.
• [Resend](https://resend.com/legal/privacy-policy) processes our transactional email so we can deliver confirmations and joining instructions.
• [PayPal](https://www.paypal.com/legalhub/privacy-full) processes deposit and balance payments. PayPal's own privacy policy governs anything you submit on their checkout.
• [Sentry](https://sentry.io/privacy/) receives anonymised error reports when our website encounters a bug — these may contain a session identifier but never payment data.
• [Plausible](https://plausible.io/privacy), [Google Analytics 4](https://policies.google.com/privacy), [Google Tag Manager](https://policies.google.com/privacy), and the [Meta pixel](https://www.facebook.com/policy.php) receive anonymised pageview and conversion data subject to your consent choices in our cookie policy.

We do not sell your personal data, and we do not share it with advertisers for cross-context behavioural advertising.

The following companies act as sub-processors on our behalf. Each maintains its own published privacy notice, which we recommend you review:

• [Resend](https://resend.com/legal/privacy-policy) — transactional email delivery.
• [PayPal](https://www.paypal.com/legalhub/privacy-full) — payment processing for deposits, balances, and refunds.
• [Sentry](https://sentry.io/privacy/) — error and exception tracking on our web and admin apps.
• [Plausible](https://plausible.io/privacy) — privacy-friendly, cookie-less aggregate analytics.
• [Google Analytics 4](https://policies.google.com/privacy) / [Google Tag Manager](https://policies.google.com/privacy) — site analytics and tag orchestration.
• [Meta pixel](https://www.facebook.com/policy.php) — conversion attribution for paid social.

Each sub-processor has its own data-processing agreement. Where required, Savunda LLC maintains a DPA on file.

We review this list at least annually and update it when we add or remove a vendor.

We use a small set of strictly necessary cookies to keep you signed in, remember your consent choices, and attribute referral traffic. Analytics and advertising cookies are loaded only after you opt in through the banner. See our full cookie policy for the complete list, including how to opt out at any time.

We keep different categories of data for different periods, governed by what we need them for:

• Trip files (booking records, itineraries, supplier confirmations) — seven years after the trip completes, to satisfy tax record-keeping in USA and Tanzania.
• Marketing email subscribers — until you unsubscribe, then a tombstone record forever so we honour the opt-out.
• Quote requests that did not convert to a booking — 24 months, after which we delete or anonymise them.
• Customer-service tickets — three years after resolution.
• Server logs and analytics — 14 to 26 months depending on the system, then aggregated.

You may request earlier deletion at any time, subject to legal obligations that require us to keep certain records.

Depending on where you live, you have some or all of the following rights over your personal data:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to fix data that is inaccurate or incomplete.
• Deletion — ask us to erase data we no longer need a lawful basis to hold.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing for direct marketing or based on our legitimate interests.
• Restriction — ask us to pause processing while a dispute is resolved.
• Withdraw consent — for processing that relies on consent (e.g. analytics cookies, newsletter signups), you can withdraw at any time.

To exercise any right, email the address below. We will respond within 30 days, or sooner if your local law requires.

Privacy enquiries and rights requests should be sent to privacy@savunda.com. The controller of your personal data is Savunda LLC, registered in USA, with operating offices in Arusha, Tanzania.