This Privacy Policy explains how SAFIRINAMI
("we", "our", or "us") collects, uses, discloses and safeguards your information when you use
our website and services. Please read this policy carefully.
If you do not agree with its terms, please discontinue use of our services.
1Information We Collect
We collect information you provide directly to us and information collected automatically through your use of our services.
Information you provide:
- Name, email address, phone number and nationality when you register or make a booking
- Payment information (processed securely through our payment partners — we do not store full card numbers)
- Travel preferences, special requirements and booking history
- Communications you send to us including support requests and feedback
Information collected automatically:
- IP address, browser type and operating system
- Pages visited, time spent and referring URLs
- Device identifiers and cookie data
- Transaction and booking metadata
2How We Use Your Information
We use the information we collect to:
- Process and confirm your bookings, issue tickets and send itinerary details
- Send booking confirmations, reminders and cancellation notices via SMS or email
- Process payments and issue refunds
- Provide customer support and resolve disputes
- Improve our website, services and route offerings
- Detect and prevent fraud, unauthorized access and abuse
- Comply with our legal obligations
- Send promotional communications only if you have opted in
We will never sell your personal data to third parties for their own marketing purposes.
3Sharing of Information
We may share your information with:
- Service providers — payment processors (AzamPay, Selcom), SMS providers and email delivery services who process data on our behalf
- Bus operators and tour guides — to facilitate your booked journey or tour
- Legal authorities — when required by law, court order or to protect our rights
- Business transfers — in connection with a merger, acquisition or sale of assets, subject to confidentiality obligations
All third parties are contractually required to keep your data confidential and use it only for the purpose of providing services to us.
4Data Retention
We retain your personal information for as long as necessary to provide our services and comply with our legal obligations:
- Account and booking records: 5 years from last activity (for financial and tax compliance)
- Payment transaction records: 7 years (statutory requirement)
- Support communications: 2 years
- Marketing preferences: until you unsubscribe or request deletion
- Website analytics (anonymised): indefinitely
You may request deletion of your personal data at any time — see Section 5 and our Data Deletion page.
5Your Rights & Choices
Depending on your jurisdiction you have the following rights regarding your personal data:
- Access — request a copy of the personal data we hold about you
- Correction — request correction of inaccurate or incomplete data
- Deletion — request erasure of your data (subject to legal retention obligations)
- Portability — receive your data in a structured, machine-readable format
- Objection — object to processing based on legitimate interests
- Withdrawal of consent — withdraw marketing consent at any time
6Cookies & Tracking
We use cookies and similar technologies to:
- Keep you signed in across pages (session cookies — essential)
- Remember your preferences such as language and route selections
- Analyse website traffic via Google Analytics (anonymised IP)
- Prevent CSRF attacks (security token cookies)
You can control cookies through your browser settings. Disabling cookies may affect site functionality. We do not use third-party advertising cookies.
7Data Security
We implement appropriate technical and organisational measures to protect your personal information:
- HTTPS encryption for all data in transit
- Bcrypt hashing for all stored passwords
- Payment data processed entirely by PCI-compliant payment gateways
- Access controls ensuring only authorised staff can view booking data
- Regular security reviews and updates
No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. In the event of a data breach we will notify affected users as required by law.
8Children's Privacy
Our services are not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us immediately at support@safirinami.co.tz and we will delete the information promptly.
9International Data Transfers
Your information may be processed in countries outside Tanzania where our service providers operate. When we transfer data internationally we ensure appropriate safeguards are in place including contractual protections. By using our services you consent to this transfer.
10Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by:
- Posting the new policy on this page with an updated "Last updated" date
- Sending an email notification to registered users for significant changes
Your continued use of our services after changes take effect constitutes acceptance of the updated policy.
11Contact Us
If you have questions, concerns or requests regarding this Privacy Policy or your personal data, please contact our Data Protection Officer: