Privacy Policy
What personal information Asoupe Travel collects, why, which services receive it, and the choices and rights you have.
Last updated: 20 October 2026
1. Who we are
Asoupe Travel, based in Arusha,Tanzania, is responsible for the personal information described in this policy (the “data controller”). TIN N/A. We handle it in line with Tanzania's Personal Data Protection Act, 2022 and with sections 7, 17 and 26 of our Safari Travel Agreement (the “Agreement”), which every traveller signs before a safari. For guests in the European Union, the United Kingdom and other places with similar laws, section 3 also gives the legal basis for each use.
Questions about your data: info@asoupe.co.tz.
If anything here differs from the Agreement you signed, the Agreement applies to your booking.
2. Information we collect
| When | What we collect |
|---|---|
| You send an enquiry, quote request or contact form | Name, email, phone or WhatsApp number, travel dates, number of travellers, your budget if you give it, your message and, if you allowed analytics, how you found the site (for example the search engine or advert). |
| You chat with our AI assistant | Your questions and the assistant's answers, which we keep in a conversation log, the page you were on, your IP address (also used to limit the number of questions per visitor) and your approximate location worked out from it. |
| You use the live chat | Your messages, name and email if you give them, and the pages you visit while the chat is open. The chat is run by Tawk.to. |
| You create an account or log in | Name, email and password. Passwords are stored only in hashed form. Your IP address is checked to block repeated failed logins. |
| You subscribe to our newsletter | Your email address. |
| You fill in our safari feedback questionnaire or leave a review | Your ratings and comments, name, country, trip details and, if you give it, your email. For a paper questionnaire we also keep the scan, which only our staff can open. Your comment and name are published only if you allow it and our team approves it; “What could we do better” is never published. |
| You open a proposal we sent you | That it was opened, and when, with your IP address, device, browser and approximate city and country. |
| You book and sign the Agreement | For each traveller: full name, nationality, passport number, date of birth, contact details, dietary and medical notes, and emergency contact. For the signature: signer's name and email, the signature, date and time, IP address, browser details and approximate location (from your IP address, or from your device if you allow it). |
| You pay | Payments are processed by Pesapal. We receive the amount, status and reference, not your full card number. |
| You browse the website | Our own visit statistics record which tours and destinations you look at and clicks on contact buttons, with device type, referring site, approximate country where known and a one-way code (hash) of your IP address. Google Analytics is used only if you accept it. See section 5. |
| During your safari | Photos and videos, used for marketing only if you consent (see section 11). |
3. Why we use it
The words in brackets are the legal basis for guests covered by the EU or UK GDPR.
- To answer you and prepare quotes, because you asked us to (steps before a contract).
- To run your safari under the Agreement: national park permits (TANAPA and NCAA), domestic flight manifests, lodge and camp registration, and emergency medical response such as flying doctor registration, Agreement 17 (contract).
- To meet legal duties, including tax and accounting records and reporting to Tanzanian immigration and wildlife authorities, Agreement 26 (legal obligation).
- To protect our clients and business, for example to verify payments, prevent fraud and repeated failed logins, and keep a record of what was agreed and signed (legitimate interests).
- To see whether proposals reach you and to know when to follow up (legitimate interests).
- To count visits and improve the website: Google Analytics and advertising measurement only with your consent; our own visit statistics as described in section 5 (consent, or legitimate interests for counts without any identifier).
- To send our newsletter and use safari photos in marketing, only with your consent (consent).
- Health and dietary details, see section 4 (explicit consent, and vital interests in an emergency).
Our team reviews every quote. Decisions about your booking are not made by automated systems alone. The AI assistant only answers questions.
4. Health and dietary details
Medical conditions, allergies, mobility needs and dietary requirements are sensitive information. We ask for them so your safari is safe (Agreement 14 and 20), use them only for that purpose, and share them only with the people who need them: your guide, your lodges and camps, and medical or evacuation services in an emergency. By providing them, you consent to this use. You can ask us to update or remove them at any time, but then we may not be able to cater for your needs.
5. Cookies and visit statistics
When you first visit, a banner lets you choose. Nothing optional is switched on until you choose it.
| Cookie | Set by | What it does | Kept for |
|---|---|---|---|
| PHPSESSID | This website | Strictly necessary: keeps forms, quotes and logins working. | Until you close the browser |
| asoupe_cookie_consent, asoupe_cookie_consent_v2, asoupe_visitor_id | This website | Strictly necessary: remembers your cookie choice. We keep a record of the choice with a hashed IP address, browser details and country, to show what you agreed to. | 12 months |
| asoupe_sid | This website | Our own visit statistics: links the pages of one visit so we can see which pages lead to enquiries. Not shared with anyone. Not set after you reject analytics. | 30 days |
| _ga, _ga_… | Google Analytics | Analytics, only after you accept it. Before that Google receives only cookieless signals (Google consent mode). | Up to 2 years |
| Chat cookies (for example twk_…) | Tawk.to | Keeps the live chat working and remembers your conversation. | Set by Tawk.to |
Our own visit statistics. They count views of tour and destination pages, enquiries and quote requests, and clicks on WhatsApp, phone, email and share buttons, with the details listed in section 2. They start when you arrive. If you choose “Reject Non-Essential”, or switch analytics off, we still count these, but without the asoupe_sid cookie, a visit id or the IP code, so they cannot be linked to you or to each other.
Embedded content. Videos from YouTube or Vimeo on some pages, the Google map on our contact page and the maps on tour pages and proposals (OpenStreetMap) load from those services, which receive your IP address and may set their own cookies.
You can change your choice at any time: open cookie preferences.
6. Who receives it
We share only what each party needs:
- Safari services: lodges, camps and hotels, domestic airlines, guides and drivers, and other suppliers in your itinerary.
- Authorities: TANAPA, the Ngorongoro Conservation Area Authority, immigration and other authorities where permits or the law require it.
- Emergency services: medical and air evacuation providers, such as AMREF Flying Doctors, if you need help.
- Marketing partners: only images you consented to, and only to produce our marketing (Agreement 7).
- Professional advisers, such as accountants and lawyers, where needed.
These services process information for us:
| Service | What for | What it receives |
|---|---|---|
| Our hosting company | Runs the website and its database | Everything stored on the website |
| Our email provider | Sends and receives our email, including confirmations and quotes | Names, email addresses and message content |
| Pesapal | Card and mobile money payments | Your payment details, amount and reference |
| Notify Africa (SMS), WasenderAPI (WhatsApp) | Alerts our staff to new enquiries and messages | Name, contact details and a summary of the enquiry (staff can switch off contact details in alerts) |
| WasenderAPI | Carries WhatsApp messages between you and our business number | Your WhatsApp number, profile name and the messages you exchange with us |
| Anthropic Claude | Writes the AI assistant's answers, on the website and to WhatsApp messages sent to our business number | Your questions and the conversation so far |
| Tawk.to | Live chat | Chat messages, details you give, pages visited and IP address |
| Google Analytics | Website statistics, only with your consent | Pages visited, device and approximate location |
| ip-api.com | Estimates city and country from an IP address | The IP address of people who open a proposal, use the AI assistant or sign the Agreement |
| BigDataCloud | Turns device location into a place name when you sign the Agreement | Your device location, only if you allow it in the browser |
| Google Fonts and code libraries (cdnjs, unpkg, jsDelivr) | Fonts and page code | Your IP address and browser details when a page loads |
When you click a WhatsApp button, you continue in WhatsApp, which is run by Meta under its own policy.
We never sell personal information and never publish passport details (Agreement 17).
7. Transfers outside Tanzania
Several of the services in section 6 store or process data outside Tanzania, for example in the European Union or the United States. We transfer only what is needed for the purposes in this policy, and only with the safeguards Tanzanian data protection law requires.
8. Security
The website uses an encrypted (HTTPS) connection. Client records can be opened only with a staff login, passwords are hashed, and signed Agreements are protected with a digital fingerprint (hash) so any change can be detected. No system is completely secure, so if you think your information has been misused, contact us straight away.
Payment fraud. We never change our bank details by message without formal confirmation. Pay only to the accounts on our official invoice, and call us if you receive unexpected payment instructions (Agreement 3.4).
9. How long we keep it
- Enquiries that do not lead to a booking: as long as needed to follow up with you. You can ask us to delete them at any time.
- Bookings, signed Agreements, invoices and payment records: as long as Tanzanian tax, accounting and tourism rules require, and as long as needed to deal with any claim.
- Passport and medical details: used for your trip, and not kept longer than these records require.
- Newsletter: until you unsubscribe.
- Cookie choices: the cookie for 12 months; the record of your choice as long as we may need to show it.
- Other records (visit statistics, chat and AI-assistant conversations, proposal views): as long as they are useful for running and improving our service. We have not yet set fixed periods for these; when we do, we will list them here.
10. Your rights
Under Tanzania's Personal Data Protection Act, 2022, you can:
- Ask what information we hold about you, why, and who receives it, and request a copy.
- Ask us to correct information that is wrong, out of date or misleading.
- Ask us to delete your information, where the law allows.
- Object to our use of your information, including for marketing, and ask us to restrict its use.
- Withdraw consent you have given, such as for the newsletter, photo use or cookies. This does not affect what was done before.
- Receive information you gave us in a common electronic format, where the law gives you that right.
- Not be subject to decisions made only by automated means.
Email info@asoupe.co.tz to use these rights. We may need to confirm your identity first. If you are not satisfied with our answer, you can complain to the Personal Data Protection Commission of Tanzania. Guests in the EU or UK can also complain to the data protection authority where they live.
Some information must be kept while your booking is active or the law requires it. If so, we will tell you.
11. Photos and videos
The Agreement asks whether you consent or do not consent to us using photos and videos in which you or your group can be identified for marketing. We follow your choice. You can withdraw consent in writing for future use. Material already printed or published before we receive your request does not have to be withdrawn. We never publish passport, financial or private contact details with images (Agreement 7).
12. Children
This website is not directed at children. Details of children travelling with a family are given to us by a parent or guardian and used only to arrange the trip. We do not use identifiable photos of children for marketing without a parent's or guardian's consent (Agreement 7). If you think a child has sent us information directly, contact us and we will delete it.
13. Newsletter and marketing
We send the newsletter only to people who sign up for it. To stop receiving it, use the unsubscribe link in the email where there is one, or email info@asoupe.co.tz. Messages about your own booking are not marketing and will still be sent.
14. Other websites
Links to other websites, such as lodges, payment pages, WhatsApp or social media, are covered by those sites' own privacy policies.
15. Changes to this policy
We will post any changes on this page and update the date at the top.
16. Contact
- Asoupe Travel, Arusha,Tanzania
- Email: info@asoupe.co.tz
- Telephone: +255 767 558 506
See also our Terms & Conditions.