Privacy Policy

Last updated: 3 June 2026

EzBookings ("we", "us", or "our") provides software that helps tour operators manage bookings, tour files, invoices, park fees, and related operations. This Privacy Policy explains how we collect, use, store, and protect personal data when you use EzBookings. We are committed to handling personal data responsibly and in line with Tanzania's Personal Data Protection Act, 2022.

1. Our role

Tour operators that use EzBookings decide what client and traveller information they enter and why; in respect of that information they act as the data controller, and EzBookings processes it on their behalf. In respect of the account information of the staff who log in to the platform, EzBookings determines how that information is used.

2. Information we collect

We collect the following categories of personal data:

3. How we use personal data

We use personal data to provide and operate the service — including creating and managing tour files, generating invoices and vouchers, calculating park fees, and managing user access — to keep the platform secure, and to communicate with operators about the service.

4. Legal basis

We process personal data where it is necessary to provide the service requested, to comply with our legal obligations, and for our legitimate interests in operating and securing the platform.

5. How data is stored and shared

EzBookings is built on trusted third-party infrastructure providers that process data on our behalf, namely Supabase (database and authentication) and Vercel (application hosting). We do not sell personal data, and we do not share it with third parties except as needed to operate the service or where required by law. These providers may store data on servers located outside Tanzania.

6. International transfers

Because we rely on cloud infrastructure, personal data may be transferred to and stored on servers outside Tanzania. Where this happens, we take reasonable steps to ensure the data remains appropriately protected.

7. Data security

We apply technical and organisational measures to protect personal data, including encryption of data in transit, access controls, role-based permissions, and database-level access restrictions (row-level security) designed so that one company's data cannot be accessed by another. No system can be guaranteed completely secure, but we work to protect data against unauthorised access, loss, or misuse.

8. Data retention

We retain personal data for as long as the relevant operator maintains an account and as needed to provide the service, and thereafter only for as long as required by law or to resolve disputes.

9. Your rights

Under the Personal Data Protection Act, 2022, individuals have rights in relation to their personal data, including the right to access it, to request correction of inaccurate data, to request its deletion, and to object to certain processing. To exercise these rights, contact us using the details below. Where the information was entered by a tour operator acting as the data controller, we may forward your request to that operator.

10. Children

EzBookings is a business tool intended for use by tour operators and is not directed at children.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "last updated" date at the top of this page.

12. Contact us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at ayaaz9020@gmail.com.