Privacy Policy
Last Updated: 18 August 2026
At Mashimba Tours, we respect your privacy and are committed to protecting your personal information.
This Privacy Policy explains how we collect, use, store, and protect personal information when you visit and use our website mashimbatours.com, contact us, request information about our tours, or otherwise interact with our services.
This Privacy Policy is intended to provide information in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), where and to the extent the GDPR applies.
1. Who We Are
The data controller responsible for your personal information is:
Mashimba Tours
Email: info@mashimbatours.com
Phone / WhatsApp: +255 625 581 790
Address: Arusha, Tanzania
For questions regarding this Privacy Policy or the processing of your personal information, you can contact us using the details above.
2. What Personal Information We Collect
Depending on how you interact with our website, we may collect the following information.
Information You Provide Directly
When you contact us, request a quote, inquire about a safari or tour, or communicate with us, you may provide:
- Full name
- Email address
- Telephone number
- WhatsApp number
- Country of residence
- Preferred travel dates
- Number of travelers
- Preferred destinations or activities
- Accommodation preferences
- Travel requirements
- Information contained in your messages
- Any other information you voluntarily provide
We ask that you do not provide sensitive personal information unless it is necessary for your travel arrangements.
Information Collected Automatically
When you visit our website, certain technical information may be collected automatically, including:
- IP address
- Browser type and version
- Device type
- Operating system
- Approximate location
- Pages visited
- Date and time of visits
- Time spent on pages
- Referring websites
- Website interactions
- Other technical and usage information
Some of this information may be collected through cookies and similar technologies.
3. How We Use Your Personal Information
We may use your information for the following purposes:
Responding to Inquiries
When you contact us or request information about a tour, we use your information to:
- Respond to your inquiry
- Answer your questions
- Prepare a personalized travel proposal
- Recommend suitable tours or destinations
- Communicate with you about your travel plans
- Follow up regarding your inquiry
Providing and Organizing Travel Services
If you decide to book a tour with us, we may use your information to:
- Organize your trip
- Communicate with relevant travel service providers
- Coordinate transportation
- Arrange accommodation
- Organize guides and activities
- Manage your travel arrangements
- Communicate important information regarding your trip
Website Improvement and Analytics
We may use information about how visitors use our website to:
- Understand website traffic
- Improve website content
- Improve website functionality
- Understand which pages and content are most useful
- Monitor website performance
Marketing
Where permitted by applicable law and, where required, with your consent, we may use information and cookies for marketing and advertising purposes.
This may include measuring advertising campaigns, showing relevant advertisements, and understanding how visitors interact with our website.
4. Legal Basis for Processing
Under the GDPR, personal information must be processed on a valid legal basis. Depending on the circumstances, we may rely on one or more of the following legal bases.
Performance of a Contract or Steps Before Entering Into a Contract
When you contact us about a tour or request a travel proposal, we may process information that is necessary to respond to your request and take steps at your request before entering into a contract.
If you book a tour with us, we may process the information necessary to provide and manage the services you have requested.
Legitimate Interests
We may process certain information where this is necessary for our legitimate business interests, provided that those interests do not override your fundamental rights and freedoms.
This may include:
- Maintaining and improving our website
- Website security
- Preventing misuse or fraud
- Managing business communications
- Understanding website performance
- Improving our services
Consent
Where consent is required, we will ask for your consent before processing your personal information for the relevant purpose.
This may apply, for example, to certain:
- Marketing communications
- Non-essential cookies
- Analytics technologies
- Advertising technologies
- Meta Pixel
- Google Ads technologies
You may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal.
Legal Obligations
We may process personal information where necessary to comply with applicable legal or regulatory obligations.
5. Contact Forms and Quote Requests
Our website may contain contact forms, inquiry forms, or “Get a Quote” forms.
When you submit information through these forms, we use the information to respond to your request and provide information about our services.
The information may include your name, email address, telephone number, travel dates, number of travelers, and details about the trip you are interested in.
We do not sell the information submitted through our contact forms.
6. WhatsApp Communication
We may offer WhatsApp as a way to communicate with us regarding travel inquiries and services.
If you choose to contact us through WhatsApp, information that you provide through that service may be processed by WhatsApp/Meta in accordance with their own terms and privacy policies.
You are not required to use WhatsApp to contact us and may use alternative communication methods provided on our website.
7. Google Analytics
We use Google Analytics to help us understand how visitors use our website.
Google Analytics may collect information such as:
- Website usage information
- Pages visited
- Approximate geographic information
- Device information
- Browser information
- Traffic sources
- Website interactions
We use this information to understand website performance and improve our content and services.
Where required by applicable law, Google Analytics will only be activated after obtaining the user’s consent through our cookie consent mechanism.
8. Google Ads
We may use Google Ads and related Google advertising technologies to promote our services and measure the effectiveness of advertising campaigns.
Depending on the configuration of these services, advertising technologies may use cookies or similar technologies to understand interactions with advertisements and our website.
Where consent is required by applicable law, these technologies will only be activated after obtaining the appropriate consent.
You may withdraw or change your cookie preferences at any time through our cookie settings.
9. Meta / Facebook Pixel
Our website may use the Meta Pixel or similar Meta technologies.
These technologies may help us:
- Measure the effectiveness of advertising
- Understand how visitors interact with our website
- Measure conversions
- Improve advertising campaigns
- Reach relevant audiences
Where required, Meta Pixel technologies will only be activated after obtaining your consent through our cookie consent mechanism.
Meta may process certain information in accordance with its own privacy policies and terms.
10. Cookies
Our website uses cookies and similar technologies.
Cookies may be divided into different categories.
Strictly Necessary Cookies
These cookies are necessary for the website to function properly.
They may be used for purposes such as:
- Website security
- Basic functionality
- Remembering certain technical preferences
- Cookie consent management
These cookies generally do not require consent where they are strictly necessary for the service requested by the user.
Analytics Cookies
Analytics cookies help us understand how visitors use our website.
For example, we may use Google Analytics.
Where required, these cookies will only be placed after obtaining your consent.
Advertising Cookies
Advertising cookies may be used by services such as Google Ads or Meta to measure advertising activity and, depending on the configuration, support targeted or personalized advertising.
Where required, these cookies will only be activated after obtaining your consent.
You can change or withdraw your cookie preferences at any time through the cookie settings available on our website.
11. Google Maps
Some pages of our website may use Google Maps to display locations, destinations, meeting points, or other geographic information.
When Google Maps is loaded, Google may process certain technical information, including information about your device and interaction with the map.
Depending on how Google Maps is implemented on our website, certain cookies or similar technologies may be used.
Where required, Google Maps will be loaded only after the appropriate consent has been obtained.
12. Newsletter and Marketing Communications
If you voluntarily subscribe to our newsletter or marketing communications, we may use your email address to send you:
- Travel information
- Tanzania travel tips
- Safari recommendations
- Special offers
- News and updates
- Other marketing communications related to our services
Where consent is required, we will only send marketing communications after receiving your consent.
You can unsubscribe from marketing emails at any time by using the unsubscribe link included in our emails or by contacting us directly.
Your withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.
13. Sharing Personal Information With Third Parties
We do not sell or rent your personal information.
However, we may share certain information with trusted third parties when this is necessary to operate our business, respond to your request, or provide travel services.
Depending on the circumstances, these parties may include:
- Safari and tour partners
- Local guides
- Accommodation providers
- Transportation providers
- Activity providers
- Website hosting providers
- Email service providers
- Analytics providers
- Advertising platforms
- Communication providers
- IT and technical service providers
- Professional advisers
- Government authorities where legally required
We aim to share only the information reasonably necessary for the relevant purpose.
14. International Transfers of Personal Information
Because our business provides travel services in Tanzania and uses international technology and service providers, your personal information may be processed or transferred to countries outside the European Economic Area (EEA).
These countries may include countries where our travel partners, service providers, or technology providers operate.
Where personal information is transferred outside the EEA, we will take appropriate steps required by applicable data protection law.
Depending on the circumstances, this may include relying on:
- An adequacy decision of the European Commission
- Standard Contractual Clauses
- Other legally recognized safeguards
15. How We Protect Your Information
We take reasonable technical and organizational measures designed to protect personal information against:
- Unauthorized access
- Unauthorized disclosure
- Loss
- Misuse
- Alteration
- Destruction
However, no internet transmission or electronic storage system can be guaranteed to be completely secure.
For this reason, while we take reasonable steps to protect your information, we cannot guarantee absolute security.
16. How Long We Keep Your Information
We keep personal information only for as long as reasonably necessary for the purposes for which it was collected.
The retention period may depend on:
- The nature of the information
- The purpose for which it was collected
- Whether you have an ongoing relationship with us
- Legal or regulatory requirements
- Legitimate business requirements
For example, information relating to a travel inquiry may be retained for a reasonable period to manage the inquiry and potential future communication.
Information relating to completed bookings may be retained for longer where necessary for accounting, legal, tax, dispute resolution, or other legitimate business purposes.
Where information is no longer required, we will take reasonable steps to delete or anonymize it.
17. Your Rights Under the GDPR
Depending on your circumstances and applicable law, you may have the following rights:
Right of Access
You may request access to the personal information we hold about you.
Right to Rectification
You may request correction of inaccurate or incomplete information.
Right to Erasure
In certain circumstances, you may request that we delete your personal information.
Right to Restriction
In certain circumstances, you may request that we restrict the processing of your personal information.
Right to Data Portability
Where applicable, you may request your personal information in a structured, commonly used, and machine-readable format.
Right to Object
You may have the right to object to certain types of processing, including processing for direct marketing purposes.
Right to Withdraw Consent
Where we process your information based on consent, you may withdraw your consent at any time.
Rights Relating to Automated Decision-Making
Where applicable, you may have rights regarding decisions based solely on automated processing, including profiling, where such decisions produce legal or similarly significant effects.
18. How to Exercise Your Rights
To exercise any of your applicable privacy rights, please contact us:
Email: info@mashimbatours.com
Please include enough information to allow us to identify your request and verify your identity where reasonably necessary.
We will respond to valid requests within the timeframe required by applicable law.
19. Right to Lodge a Complaint
If you believe that we have processed your personal information unlawfully or have not adequately addressed your privacy concerns, you have the right to lodge a complaint with a competent data protection authority.
You may contact the data protection authority in your country of residence, place of work, or the location where you believe an infringement occurred, as applicable.
20. Third-Party Websites
Our website may contain links to third-party websites, including:
- Social media platforms
- Accommodation providers
- Travel-related services
- Tourism websites
- External booking or information platforms
We are not responsible for the privacy practices, security, or content of third-party websites.
We recommend reviewing the privacy policies of any third-party websites you visit.
21. Children’s Privacy
Our website is intended for a general audience.
We do not knowingly collect personal information from children where such collection would require parental consent under applicable law.
If you believe that a child has provided personal information to us without appropriate consent, please contact us so that we can take appropriate action.
22. Automated Decision-Making
We do not currently use personal information to make decisions based solely on automated processing that produce legal or similarly significant effects on individuals.
23. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect:
- Changes to our services
- Changes to our website
- Changes in technology
- Changes in third-party services
- Changes in applicable laws or regulations
When we update this Privacy Policy, we will publish the revised version on this page and update the “Last Updated” date.
24. Contact Us
If you have any questions about this Privacy Policy or how we process personal information, please contact us:
Mashimba Tours
Email: info@mashimbatours.com
Phone / WhatsApp: +255 625 581 790
Address: Arusha, Tanzania
Website: mashimbatours.com