Last Updated: March 13, 2026 Data Controller: Asili Explorer Tanzania Safaris & Adventures Location: P.O. BOX 13401, Arusha, Tanzania

1. Introduction

Asili Explorer Tanzania Safaris (“we,” “us,” or “our”) is committed to protecting the privacy and security of our guests’ personal data. This policy outlines how we collect, use, and safeguard your information in compliance with the Tanzania Personal Data Protection Act (2022) and international standards such as the General Data Protection Regulation (GDPR).

2. Information We Collect

To provide a personalized safari experience and fulfill legal park requirements, we collect:

• Identification Data: Full name, nationality, gender, and date of birth.

• Contact Data: Email address, phone number, and physical address.

• Travel Documentation: Passport copies (mandatory for TANAPA and NCAA park permits and domestic flights).

• Health & Preferences: Dietary restrictions, allergies, and physical fitness levels relevant to trekking or safari activities.

• Financial Data: Payment details processed through secure, encrypted third-party gateways (e.g., DPO Group or bank transfers).

3. Purpose of Processing

In accordance with the PDPA, we process your data under the following legal bases:

• Contractual Necessity: To book your lodges, vehicles, and expert guides.

• Legal Obligation: To register your entry into National Parks and comply with Tanzanian tax (TRA) and immigration laws.

• Legitimate Interest: To improve our services and ensure your safety during “Active Adventures.”

• Consent: For marketing communications (newsletters), which you may withdraw at any time.

4. Data Sharing and Disclosure

We do not sell your data. We share information only with essential service providers:

• National Authorities: TANAPA, NCAA, and the Tanzania Wildlife Management Authority (TAWA).

• Logistics Partners: Domestic airlines (e.g., Coastal Aviation, Regional Air) and accommodation providers.

• Emergency Services: AMREF Flying Doctors or local medical facilities if an emergency arises.

• Cloud Services: Secure CRM and hosting providers located in jurisdictions with equivalent data protection laws.

5. Data Retention

We retain personal data only for as long as necessary:

• Booking Records: Kept for 7 years to satisfy Tanzanian financial and audit regulations.

• Marketing Data: Retained until you withdraw consent.

• Passport Copies: Deleted or securely archived once travel is completed and park audits are finalized.

6. Your Rights

Under the PDPA 2022, you have the following rights:

• Right to Information: To know why your data is being collected.

• Right to Access: To request a copy of your data held by Asili Explorer.

• Right to Rectification: To correct inaccurate or incomplete information.

• Right to Erasure: The “Right to be Forgotten,” subject to legal retention periods.

• Right to Object: To stop the processing of your data for direct marketing.

7. Security Measures

We implement rigorous technical and organizational measures, including:

• SSL Encryption for all website inquiries and data transmissions.

• Restricted Access: Only authorized staff managing your booking can view sensitive documents.

• Secure Payment Gateways: We do not store full credit card details on our local servers.

8. International Data Transfers

As a Tanzanian company, your data is stored on servers in Tanzania. For international guests, we ensure that transfers comply with the PDPA’s cross-border regulations, providing safeguards equivalent to those in your home country.

9. Contact Our Data Protection Officer

If you have questions regarding this policy or wish to exercise your rights, please contact:

Email: [habari@asilitanzaniasafaris.com]

Phone: +255 767 140 150

Address: Plot No. 8, Kaloleni Street, Arusha, Tanzania