Privacy Policy

Last updated: June 2026

1. Introduction

Sura Safaris ("we," "our," or "us") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services. We process personal data in accordance with applicable data protection laws, including the United Republic of Tanzania's laws and, where applicable, the European Union's General Data Protection Regulation (GDPR).

By using our website or providing your personal information to us, you consent to the practices described in this policy. If you do not agree with any part of this policy, please do not use our website or submit personal data to us.

2. Who We Are

Sura Safaris is a Tanzania-based tour operator with Spanish and Tanzanian shareholders, with operational offices in Arusha, Tanzania, and Barcelona, Spain. For the purposes of data protection law, we act as the data controller of your personal information.

You can contact us at:

• Email: bookings@surasafaritanzania.com
• Phone (Spain): +34 634 54 18 85
• Phone (Tanzania): +255 6 240 496 76
• Address: Arusha, Tanzania / Barcelona, Spain

3. Information We Collect

We may collect and process the following categories of personal data about you:

3.1 Information You Provide Directly

• Identity data: Full name, nationality, passport details (when required for travel bookings).
• Contact data: Email address, telephone numbers (including WhatsApp), billing and residential addresses.
• Travel data: Travel dates, destination preferences, accommodation requirements, dietary restrictions, medical conditions relevant to your safari, and emergency contact details.
• Communication data: Any information you include in messages, inquiry forms, emails, or WhatsApp conversations with us.
• Financial data: Payment card details, bank account information, and billing records. Note: we do not store full credit card numbers; payments are processed through secure third-party payment gateways.

3.2 Information Collected Automatically

• Technical data: Internet Protocol (IP) address, browser type and version, time zone setting, browser plug-in types, operating system, and device type.
• Usage data: Information about how you use our website, including pages visited, time spent on pages, click patterns, and referral sources.
• Cookie data: Small text files stored on your device that help us improve your browsing experience. See Section 9 for our full Cookie Policy.

3.3 Information From Third Parties

• Travel partners: Airlines, hotels, and ground operators who process bookings on our behalf.
• Analytics providers: Google Analytics and similar services that provide anonymized usage statistics.
• Social media platforms: If you interact with us through Facebook, Instagram, Twitter, or LinkedIn.

4. How We Use Your Information

We use your personal data for the following purposes and on the following legal bases:

5. How We Share Your Information

We do not sell, rent, or trade your personal data. We may share your information only in the following circumstances:

• Service providers: With trusted third parties who perform services on our behalf, including payment processors, airlines, lodges, camps, ground transport operators, and IT service providers. These parties are contractually bound to protect your data and use it only for the specific services requested.
• Legal obligations: If required by law, court order, or governmental authority in Tanzania, Spain, or any applicable jurisdiction.
• Business transfers: In the event of a merger, acquisition, or sale of company assets, your data may be transferred as part of that transaction.
• With your consent: In any other circumstance not described above, we will seek your explicit consent before sharing your data.

6. International Data Transfers

As a company operating between Tanzania and Spain, your personal data may be transferred to, stored in, and processed in countries outside your country of residence. When we transfer data across borders, we ensure appropriate safeguards are in place, including standard contractual clauses, binding corporate rules, or reliance on adequacy decisions where applicable. By using our services, you acknowledge that your data may be transferred internationally for the purposes of fulfilling your safari booking.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. Specifically:

• Booking data: Retained for 7 years after your last booking, in accordance with Tanzanian tax and commercial record-keeping requirements.
• Inquiry data: If you inquire but do not book, we retain your data for 12 months from your last communication.
• Marketing consent: Retained until you withdraw your consent or unsubscribe.
• Website analytics: Anonymized data may be retained indefinitely for statistical purposes.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to rectification: You may request that we correct any inaccurate or incomplete personal data.
• Right to erasure ("Right to be Forgotten"): You may request that we delete your personal data, subject to legal retention requirements.
• Right to restrict processing: You may request that we limit how we process your data in certain circumstances.
• Right to data portability: You may request a copy of your data in a structured, machine-readable format.
• Right to object: You may object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at bookings@surasafaritanzania.com. We will respond to your request within 30 calendar days. We may need to verify your identity before processing your request.

9. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience. Cookies are small text files placed on your device when you visit a website.

9.1 Types of Cookies We Use

• Essential cookies: Required for the operation of our website, including navigation, accessing secure areas, and form functionality. These cannot be disabled.
• Analytics cookies: Google Analytics cookies help us understand how visitors interact with our website by collecting anonymized information about page visits, time on site, and traffic sources.
• Functional cookies: These remember your preferences, such as language settings (via the GTranslate widget), to improve your experience.
• Third-party cookies: Services like GTranslate, Google Maps, and social media embeds may place their own cookies. We do not control these.

9.2 Managing Cookies

Most web browsers allow you to manage cookies through their settings. You can delete existing cookies, block all cookies, or set preferences for specific websites. However, disabling essential cookies may affect the functionality of our website. For more information, visit www.allaboutcookies.org.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted through our website.
• Secure servers with restricted access controls and regular security audits.
• Payment processing through PCI-DSS compliant third-party gateways.
• Staff training on data protection and confidentiality obligations.
• Regular review and updating of our security practices.

While we strive to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.

11. Third-Party Links and Services

Our website may contain links to third-party websites, including social media platforms, payment gateways, GTranslate, Google Maps, and WhatsApp Web. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you interact with. We are not responsible for the privacy practices or content of external websites.

12. Children's Privacy

Our services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal data without your consent, please contact us immediately, and we will take steps to delete such information.

13. Marketing Communications

We will only send you marketing communications (newsletters, special offers, safari inspiration) if you have explicitly opted in to receive them. Every marketing email includes an unsubscribe link at the bottom. You may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. We do not share your contact details with third parties for their own marketing purposes.

14. Legal Framework

This Privacy Policy is governed by and shall be construed in accordance with the laws of the United Republic of Tanzania. Where applicable, we also comply with the European Union's General Data Protection Regulation (GDPR) for individuals within the European Economic Area (EEA). In the event of any conflict between applicable laws, the provision that affords the greatest protection to your personal data shall prevail.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. The "Last updated" date at the top of this page indicates when the policy was last revised. We encourage you to review this page periodically. If we make material changes, we will notify you through a notice on our website or via email, where appropriate.

16. Complaints and Supervisory Authority

If you have any concerns about how we handle your personal data, please contact us first at bookings@surasafaritanzania.com so that we can address your concerns directly. If you are unsatisfied with our response, you have the right to lodge a complaint with a relevant supervisory authority:

• Tanzania: The Personal Data Protection Commission (PDPC) of Tanzania, established under the Personal Data Protection Act, 2022.
• European Union: The data protection authority in your EU member state of residence.
• Spain: The Agencia Española de Protección de Datos (AEPD) — www.aepd.es.

17. Contact Us About This Policy

If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact us:

• Email: bookings@surasafaritanzania.com
• Phone (Spain): +34 634 54 18 85
• Phone (Tanzania): +255 6 240 496 76
• Address: Sura Safaris, Arusha, Tanzania / Barcelona, Spain

We aim to acknowledge all privacy-related inquiries within 5 business days and resolve them within 30 calendar days.