Privacy Policy

October 1, 2026

We plan holidays, so we handle information about you and the people you travel with. This policy explains what we collect, why, who we share it with, how long we keep it, and what choices you have.

PRIVACY IN BRIEF

Question Short Answer
What do we collect? Your contact details, the details of your trip, travel document details when a booking needs them, payment records, and health or dietary details if you choose to share them.
Why? To answer your enquiry, plan and run your holiday, take payment, keep you safe, and follow the law.
Who sees it? Only the hotels, drivers, guides, boat operators and other suppliers who need it for your trip, plus our payment provider Pesapal, our service providers, and the authorities when the law requires.
Do we sell it? No. We never sell your personal data.
How long do we keep it? Only as long as we need it. Sensitive details such as passport and health information are deleted 90 days after your trip ends.
What are your rights? You can ask to see, correct, delete or restrict your data, object to its use, and withdraw consent at any time.
WHO WE ARE

Summer Vacation Tours and Safaris Partnership (“Summer Vacation”, “we”, “us”) is a tour operator in Zanzibar, Tanzania, licensed by the Zanzibar Commission for Tourism. We decide how and why your personal data is used, which makes us the data controller.

Privacy contact: Data Protection Officer, Summer Vacation Tours and Safaris, info@summervacationtours.com (please put “Privacy” in the subject line).

This policy follows the Personal Data Protection Act, 2022 of the United Republic of Tanzania. For guests in the European Economic Area and the United Kingdom, it also follows the GDPR and the UK GDPR.

It covers anyone who visits our website, contacts us, books with us or travels with us, including the people in your travelling party. It applies to information we collect on our website, by email, by phone, by WhatsApp and other messages, in person, and through a travel agent or partner who books for you.

What We Collect Examples When
Contact details Name, email address, phone or WhatsApp number, country, language When you enquire, book or message us
Trip and booking details Travel dates, names and ages of travellers, accommodation and excursion choices, flight or ferry details, special requests When you plan and confirm a booking
Travel document details Name as shown on your passport, nationality, passport number and expiry, date of birth Only when a booking, permit or supplier requires them
Health, dietary and accessibility details Allergies, dietary needs, mobility needs, medical information that affects your safety Only if you choose to give it to us
Payment records Amount paid, date, payment method and transaction reference. Card details are entered on Pesapal’s secure page, and we do not receive or store your full card number When you pay or receive a refund
Messages and feedback Emails, WhatsApp messages, call notes, reviews, photos you send us When you communicate with us
Website and device data IP address, browser type, pages visited, how you arrived, cookie and advertising identifiers When you use our website
Marketing choices Whether you agreed to receive news and offers When you sign up or opt out

Other travellers. If you give us details of other people, such as family members or friends, please make sure they know and are happy for you to do so.

Sensitive information. Health, dietary and religious or belief information, passport numbers and details about children need extra care. We ask for them only when we need them, use them only for your trip, and share them only with the people who need them to look after you.

Why We Use It Legal Basis
Reply to your enquiry and prepare a quote Steps you ask us to take before a booking (contract), or our legitimate interest in answering you
Make, manage and change your booking Contract
Share details with hotels, drivers, guides and other suppliers Contract
Take payments and issue refunds Contract and legal obligation
Look after your health, safety and special needs Your explicit consent, or to protect life in an emergency
Keep records for tax, licensing and accounting, and respond to authorities Legal obligation
Send news, offers and travel ideas by email or message Your consent. You can withdraw it at any time
Understand and improve how our website works, using Google Analytics Your consent through our cookie banner
Measure our advertising and show our ads to people who visited our site, using Meta Pixel and advertising cookies Your consent through our cookie banner
Prevent fraud and keep our systems secure Legitimate interest
Use your review or photo in our marketing Your consent
Deal with complaints and legal claims Legitimate interest and legal claims

We share the minimum needed, and only for the purposes in this policy.

Who Why They Receive It
Hotels, villas and guesthouses To confirm your reservation and welcome you
Drivers, guides, boat and excursion operators To carry out the transfers and excursions you booked
Ferry companies, airlines and attractions When we buy tickets or entry for you
Travel agents or tour operators When they booked on your behalf
Pesapal (our payment provider) and banks To process card and other online payments and refunds. Pesapal also uses your payment details under its own privacy policy (pesapal.com/privacy-policy)
Technology providers Website hosting, email and newsletter services, cloud storage, live chat and WhatsApp Business, which work for us
Google and Meta To measure how our website is used and how our advertising performs, through Google Analytics and Meta Pixel. They use that data under their own privacy policies
Accountants and professional advisers To keep our accounts and meet legal duties
Insurers If a claim needs your details
Authorities When the law requires, for example the Zanzibar Commission for Tourism, tax, immigration or police authorities

We do not sell, rent or trade your personal data. Our suppliers and service providers must protect your data and use it only for the service they give us or you.

We are based in Zanzibar, so the information you give us is processed in Tanzania. Some services we use, including Google, Meta (WhatsApp and Meta Pixel), Pesapal, our email and newsletter provider, website hosting and cloud storage, may keep or process data in other countries. Your suppliers may also be in different countries.

When data leaves Tanzania, we use providers that protect it, add contract terms or other lawful safeguards, and follow any approval the law requires.

Our website uses cookies and similar tools. We ask for your consent through our cookie banner before using any that are not essential, and you can change your choice at any time. You can also block or delete cookies in your browser settings, although some parts of the site may then work less well.

Type What It Does Tools We Use Consent
Essential Makes the site work, for example security and page loading Our website Not required
Analytics Shows us how visitors use the site so we can improve it Google Analytics Required
Advertising and measurement Measures our ads and lets us show our ads to people who visited the site Meta Pixel and advertising cookies Required
Chat and embedded content Live chat, maps and videos from other companies, which may set their own cookies Chat widgets and embedded services Required

Opting out. You can also block Google Analytics with Google’s browser add-on, and manage the ads you see in your Facebook or Instagram ad settings. We do not send your passport, health, dietary or payment details to analytics or advertising tools.

We send news and offers by email only if you agree. We also run online advertising. With your consent, tools such as Meta Pixel and advertising cookies let us measure our ads and show them to people who visited our website. You can refuse these cookies or withdraw consent at any time, and you can object to marketing at any time. You can unsubscribe at any time using the link in any email, by replying “STOP” to a message, or by telling us. We still send you messages about your booking, because those are part of the service.

We keep personal data only as long as we need it for the reasons in this policy, or as the law requires. After that, we delete it or make it anonymous.

Information How Long We Keep It
Enquiries that do not become a booking 12 months after our last contact
Booking records and payment records 7 years, or longer if the law requires
Passport and travel document details Deleted 90 days after your trip ends, unless the law requires us to keep them
Health, dietary and accessibility details Deleted 90 days after your trip ends
Messages and emails about your booking 3 years after your trip
Marketing list Until you unsubscribe, or 24 months after you last interact with us
Website analytics As set in the analytics tool, up to 14 months
Complaints and legal claims Until the matter is resolved and the legal time limits have passed

We use practical measures to protect your information: restricted access, strong passwords, secure storage, and secure connections on our website. Card payments are made on the secure page of our payment provider, Pesapal, which states that it is certified to the PCI DSS security standard for card data. Please do not send full card numbers or passport scans through WhatsApp or ordinary email unless we ask you to. If a breach puts your data at risk, we will tell the Personal Data Protection Commission and the people affected, as the law requires.

Your Right What It Means
Be informed To know what we do with your data. This policy is our way of telling you.
Access To ask for a copy of the personal data we hold about you.
Correct To ask us to fix data that is wrong or incomplete.
Erase To ask us to delete your data when we no longer need it, or when you withdraw consent.
Restrict To ask us to pause using your data while an issue is checked.
Object To object to our use of your data, including for marketing.
Withdraw consent To take back a consent you gave, at any time. This does not affect what we did before.
Move your data Where the law gives you this right, to receive your data in a common format.
Automated decisions We do not make decisions about you using automated processing or profiling.

How to use them. Email info@summervacationtours.com with “Privacy” in the subject line. We may ask you to confirm who you are. We reply within 30 days and do not charge a fee, unless a request is clearly excessive or repeated.

Complaints. Please talk to us first so that we can fix the problem. You also have the right to complain to the Personal Data Protection Commission of Tanzania (pdpc.go.tz). If you live in the European Economic Area or the United Kingdom, you can complain to your local data protection authority.

Our services are for adults. We collect information about children, such as names and ages, only from a parent or guardian, and only what we need to arrange the trip safely. A parent or guardian can ask us to see or delete a child’s information at any time.

Our website may link to other sites, such as hotels, maps and social media. We do not control them and are not responsible for their privacy practices. Please read their policies.

If you live in the European Economic Area or the United Kingdom, the GDPR or the UK GDPR gives you the rights listed above, and the legal bases in section 4 (WHY WE USE YOUR INFORMATION)  apply. If you live elsewhere, your local law may give you extra rights. Contact us and we will do our best to help.

We may update this policy when our services or the law change. The date at the top shows the latest version. If we make an important change, we will tell you by email or on our website.

Contact

Email: info@summervacationtours.com

WhatsApp / Call: +255 777 335 672

Website: summervacationtours.com

Location: Zanzibar, Tanzania