Privacy Policy

Kilimanjaro Tours ("we", "us") operates this website and the Kilimanjaro trekking and Tanzania safari services described on it. Our registered address and company details are shown on the Contact page .

We only collect information that you choose to give us or that is needed to run the website securely:

• Trip requests and contact messages — your name, email address, phone number (optional), country (optional), trip preferences (trip type, route or destination, dates, group size, budget range, accommodation style) and anything you write in the message field.
• Newsletter sign-ups — your email address and the page you subscribed from.
• Account data (when accounts are enabled) — name, email address, a securely hashed password, and your consent and session preferences.
• Consent-based visit statistics — if you click "Allow" on the privacy banner, we record the page viewed, your country (derived from your browser language or network region, never from precise location), the date and time, and the fact that consent was given. We do not record IP addresses, device identifiers, coordinates or any other personal data. If you click "Decline", nothing is recorded.
• Security logs — to protect forms from abuse we keep a short-lived, one-way hashed token derived from your connection for rate limiting. The hash cannot be reversed to identify you and expires automatically.

• To reply to your enquiry and prepare the itinerary or quote you asked for.
• To arrange your trip if you go on to book — for example securing national park permits, which the Tanzania National Parks Authority requires traveller details for.
• To send the newsletter you subscribed to, until you unsubscribe.
• To understand which parts of the site interest visitors, in aggregate only, using the consent-based statistics above.
• To keep the website secure and to prevent spam and abuse.

We do not sell personal data and we do not use it for third-party advertising.

We process enquiry and booking data because it is necessary to respond to your request and to perform the contract you ask us to enter into. Newsletter emails and visit statistics are based on your consent, which you can withdraw at any time. Security processing is based on our legitimate interest in keeping the site and its users safe.

Only where needed to deliver your trip: national park authorities for permits, lodges and camps you will stay at, transport and flight providers, and — if you take out travel insurance through a partner — that insurer. Each receives only the details it needs. We also use hosting and email providers to run the website and send messages; they act under our instructions.

• Enquiries and contact messages: kept while we handle your request and for a reasonable period afterwards in case you return to book .
• Booking records: kept for the period required by Tanzanian tax and company law.
• Newsletter subscriptions: until you unsubscribe.
• Visit statistics: stored in aggregate form and never linked to an individual.
• Rate-limiting tokens: minutes to hours, then discarded.

Data is stored in a database with access restricted to authorised staff. Passwords are hashed and never stored in plain text. Forms are protected against forgery and automated abuse, and all administrative actions require a signed-in administrator account. We keep the software behind the site up to date.

Depending on where you live (including under the GDPR and Tanzania's Personal Data Protection Act), you may have the right to:

• ask for a copy of the personal data we hold about you;
• ask us to correct inaccurate data;
• ask us to delete data we no longer need, subject to legal record-keeping obligations;
• withdraw consent for the newsletter or visit statistics at any time;
• object to or restrict certain processing; and
• complain to your local data protection authority.

To exercise any of these rights, email inquiry@kilimanjarotours.co.tz.

The website uses a single session cookie that is essential for security (it protects forms and, when accounts are enabled, keeps you signed in). Your choice on the privacy banner is remembered in your browser's local storage so we do not ask again. No advertising or third-party tracking cookies are set. Fonts and icon files are loaded from Google Fonts and jsDelivr, which may see your browser's request for those files.

We will update this page when our practices change and show the date of the latest version at the top. Significant changes will be highlighted on the website.

Questions, requests or concerns about how your data is handled can be sent to inquiry@kilimanjarotours.co.tz or through the Contact page.