Privacy Policy

Effective Date: November 2025

This Privacy Policy describes how EcoAfric ("we," "us," or "our") collects, uses, shares, and protects your personal information when you use our website, mobile applications, and services (collectively, the "Platform"). By using our Platform, you consent to the practices described in this Privacy Policy. We are committed to protecting your privacy while connecting eco-conscious travelers with verified tour operators across Africa.

1. Information We Collect

We collect information to provide and improve our eco-tourism services. The types of information we collect include:

Information You Provide Directly

• Account information: name, email address, phone number, password, and profile details
• Booking information: travel dates, destinations, number of travelers, and special requirements
• Payment information: credit card details, billing address, and transaction history
• Visa application data: passport details, nationality, travel history, employment information, and supporting documents
• Communications: messages with tour operators, customer support inquiries, and feedback
• User content: reviews, ratings, photos, and comments about eco-tourism experiences

Information for Tour Operators and Service Providers

• Business details: company name, registration number, business address, and contact information
• Verification documents: business licenses, insurance certificates, and sustainability certifications
• Tour listings: descriptions, itineraries, pricing, availability, and sustainability practices
• Banking information: for payment processing and payouts

Information Collected Automatically

• Device information: IP address, browser type, operating system, and device identifiers
• Usage data: pages visited, tours viewed, search queries, and booking patterns
• Location data: with your permission, we collect location information to provide relevant tour recommendations
• Cookies and tracking technologies: as described in our Cookie Policy

Information from Third Parties

• Social media platforms: if you connect your social accounts or sign in using social login
• Tour operators: booking confirmations, service updates, and feedback
• Visa authorities: application status updates and processing information
• Payment processors: transaction verification and fraud prevention data

2. How We Use Your Information

We use the information we collect for the following purposes:

Providing Our Services

• Create and manage your EcoAfric account
• Process tour bookings and facilitate communication with tour operators
• Handle visa applications and track processing status
• Process payments and issue refunds when applicable
• Send booking confirmations, reminders, and travel updates

Personalizing Your Experience

• Recommend tours based on your preferences and sustainability interests
• Customize content and search results for relevant destinations
• Remember your preferences and settings

Platform Operations

• Verify tour operators and service providers
• Monitor and improve Platform performance and security
• Analyze usage trends to enhance our services
• Track and display environmental and social impact metrics

Communication

• Respond to your inquiries and provide customer support
• Send service-related announcements and updates
• With your consent, send promotional offers and newsletters about eco-tourism opportunities

Legal and Safety

• Comply with legal obligations and respond to lawful requests
• Prevent fraud, abuse, and unauthorized access
• Enforce our Terms and Conditions
• Protect the rights and safety of our users, tour operators, and the public

3. How We Share Your Information

We share your information in the following circumstances:

With Tour Operators and Service Providers

When you make a booking, we share necessary information with the relevant tour operator to fulfill your reservation. This includes your name, contact details, booking details, and any special requirements you have specified.

With Visa Authorities

When you apply for a visa through our Platform, we share your application information with the relevant government authorities and visa processing partners as required to process your application.

With Service Providers

We work with third-party service providers who help us operate our Platform, including:

• Payment processors for secure transaction handling
• Cloud hosting providers for data storage
• Analytics providers to understand Platform usage
• Customer support tools to assist with inquiries
• Email and communication services

For Legal Reasons

We may disclose your information if required by law, court order, or government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

Business Transfers

If EcoAfric is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

With Your Consent

We may share your information for other purposes with your explicit consent.

4. Data Retention

We retain your personal information for as long as necessary to:

• Maintain your active account and provide our services
• Comply with legal obligations, including visa processing record requirements
• Resolve disputes and enforce our agreements
• Meet financial and tax reporting requirements

When your information is no longer needed, we will securely delete or anonymize it. Booking and transaction records may be retained for up to seven years for legal and accounting purposes. Visa application records are retained as required by applicable regulations.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit and at rest
• Secure servers with firewall protection
• Access controls limiting who can view personal data
• Regular security assessments and monitoring
• Employee training on data protection practices

While we take reasonable precautions, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security of your information.

6. Your Rights and Choices

You have the following rights regarding your personal information:

Access and Portability

You can request a copy of the personal information we hold about you and receive it in a portable format.

Correction

You can update or correct inaccurate information through your account settings or by contacting us.

Deletion

You can request deletion of your personal information, subject to legal retention requirements. Some information may be retained for legal, security, or business purposes.

Restriction and Objection

You can request that we restrict processing of your information or object to certain processing activities.

Marketing Opt-Out

You can opt out of promotional communications at any time by clicking the unsubscribe link in our emails or updating your communication preferences in your account settings.

Cookie Preferences

You can manage your cookie preferences through our Cookie Consent Tool or your browser settings.

To exercise these rights, please contact us at privacy@ecoafric.com. We will respond to your request within the timeframe required by applicable law.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Keep you logged in to your account
• Remember your preferences and settings
• Understand how you use our Platform
• Provide personalized tour recommendations
• Analyze Platform performance and improve our services
• Deliver relevant advertisements

Types of cookies we use:

• Essential cookies: Required for the Platform to function properly
• Functional cookies: Remember your preferences and enhance your experience
• Analytics cookies: Help us understand usage patterns and improve our services
• Marketing cookies: Used to deliver relevant advertisements and measure their effectiveness

You can manage your cookie preferences through our Cookie Consent Tool accessible at the bottom of each page. You can also control cookies through your browser settings, though disabling certain cookies may affect Platform functionality.

8. International Data Transfers

EcoAfric operates across multiple African countries and works with international partners. Your information may be transferred to and processed in countries other than your country of residence. When we transfer data internationally, we implement appropriate safeguards to protect your information in accordance with applicable data protection laws. These safeguards may include standard contractual clauses, data processing agreements, and ensuring recipients provide adequate levels of protection.

9. Children's Privacy

Our Platform is not intended for children under 13 years of age, or the age of consent in your jurisdiction. We do not knowingly collect personal information from children without parental consent. If a parent or guardian books travel that includes children, they are responsible for providing the children's information and must have the authority to consent on their behalf. If we learn that we have collected personal information from a child without proper consent, we will delete that information promptly.

10. Third-Party Links and Services

Our Platform may contain links to third-party websites, including tour operator websites, payment processors, and social media platforms. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you access through our Platform.

11. Tour Operator and Service Provider Privacy

Tour operators and service providers who register on our Platform are responsible for their own privacy practices when handling traveler information received through bookings. By registering, providers agree to handle personal information in compliance with applicable data protection laws and EcoAfric's data protection requirements. EcoAfric is not responsible for the privacy practices of independent tour operators.

12. Regional Privacy Rights

European Economic Area (EEA) and United Kingdom

If you are located in the EEA or UK, you have additional rights under the General Data Protection Regulation (GDPR), including the right to lodge a complaint with your local data protection authority. Our legal bases for processing include: performance of a contract (bookings), legitimate interests (Platform improvement, security), legal obligations (visa processing, fraud prevention), and consent (marketing communications).

South Africa

If you are located in South Africa, your personal information is processed in accordance with the Protection of Personal Information Act (POPIA). You have the right to access, correct, and delete your personal information, and to object to processing.

Kenya

If you are located in Kenya, your personal information is processed in accordance with the Data Protection Act 2019. You have rights including access, correction, deletion, and data portability.

Other African Jurisdictions

We comply with applicable data protection laws in all African countries where we operate. Contact us at privacy@ecoafric.com for information about your specific rights based on your location.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. When we make material changes, we will notify you by posting the updated policy on our Platform with a new effective date, and where appropriate, notify you via email or through the Platform. We encourage you to review this Privacy Policy periodically.

14. Contact Us

If you have questions about this Privacy Policy, want to exercise your privacy rights, or have concerns about how we handle your information, please contact us:

• Email: privacy@ecoafric.com
• General Support: support@ecoafric.com
• Website: www.ecoafric.com

We will respond to your inquiry as soon as possible and within the timeframe required by applicable law.