Data Protection Policy

1. Scope of this policy

This policy applies to personal data handled through AfricaTourVisa websites and services, including information submitted through travel inquiries, visa-support forms, application forms, document uploads, payments, bookings, customer-support messages and other service requests.

It should be read together with our Privacy Policy , Cookie Policy , and any specific terms that apply to the service being requested.

2. Our data protection principles

AfricaTourVisa aims to handle personal data responsibly and in a way that reflects the following principles:

• use personal data for clear and legitimate purposes;
• collect only information reasonably necessary for a service;
• keep information accurate where reasonably possible;
• avoid retaining personal data longer than necessary;
• apply reasonable security measures;
• limit access to people or providers who need the information;
• respect applicable privacy and data-protection rights;
• provide transparency about how information is handled.

3. Types of personal data we may process

The information required depends on the service you request.

4. How personal data may be collected

Personal data may be collected:

• directly from you when you complete a form;
• from a parent, guardian or authorized representative;
• from another traveler in a legitimate group or family application;
• through customer-support communications;
• through booking or service requests;
• through document uploads;
• through payment and transaction processes;
• through website logs, cookies or security systems;
• from service providers involved in fulfilling a requested service.

5. Why we may use personal data

Personal data may be used for purposes including:

• providing requested travel and visa-support services;
• preparing or reviewing application information;
• communicating with customers;
• processing orders and payments;
• issuing invoices or transaction confirmations;
• arranging hotels, transport, airport pickup or related services;
• providing customer support;
• preventing fraud and abuse;
• protecting website and service security;
• handling complaints and disputes;
• maintaining accounting and operational records;
• complying with legal obligations;
• improving website usability and service quality where appropriate.

6. Legal bases for processing

Depending on the circumstances and applicable law, AfricaTourVisa may process personal data on one or more appropriate legal bases.

These may include:

• Performance of a contract: where processing is needed to provide a service you requested.
• Steps before entering a contract: where information is needed to respond to a service request or quotation.
• Legal obligations: where records or information must be retained or disclosed by law.
• Legitimate interests: where reasonably necessary for security, fraud prevention, customer support, service management or protection of legal rights, subject to applicable safeguards.
• Consent: where consent is the appropriate basis, including certain optional cookies or communications.

7. Passports, identity documents and sensitive travel data

Some travel and visa-support services require identity and travel documents that contain sensitive personal information.

These may include:

• passport copies;
• passport photographs;
• birth certificates;
• travel authorization documents;
• proof of accommodation;
• flight information;
• supporting immigration documents.

AfricaTourVisa aims to limit access to such information to people or service providers who reasonably need it for the requested service.

8. Payment and financial information

Payments may be processed through independent payment providers. AfricaTourVisa may receive transaction-related information such as:

• payment status;
• transaction reference;
• amount paid;
• currency;
• billing information where applicable;
• limited payment-method information provided by the payment processor.

Full payment-card details should normally be handled by the authorized payment provider rather than being stored directly by AfricaTourVisa, where the payment system is configured in that manner.

Customers should never send payment-card passwords, online-banking passwords, one-time codes, or security credentials through ordinary email or support messages.

9. When personal data may be shared

Personal data may be shared only where reasonably necessary for legitimate purposes associated with the service.

Depending on the service, recipients may include:

• authorized AfricaTourVisa personnel;
• hosting and technology providers;
• email and communications providers;
• payment processors;
• travel, accommodation or transport providers;
• professional advisers;
• fraud-prevention or security providers;
• government or public authorities where required or specifically necessary for a requested process;
• other service providers involved in fulfilling the customer’s request.

AfricaTourVisa does not sell personal data as part of its ordinary travel and visa-support services.

10. International data transfers

Travel and visa services can involve multiple countries. Personal data may therefore be processed or transferred internationally where needed to provide a requested service.

Examples may include transfers involving:

• travel providers in the destination country;
• technology or hosting providers;
• payment providers;
• government or immigration systems where relevant to the service;
• service providers supporting international operations.

Where data-protection law requires additional safeguards for international transfers, AfricaTourVisa aims to use appropriate legal or contractual mechanisms where applicable.

11. Data security

AfricaTourVisa aims to apply reasonable technical and organizational safeguards to personal data.

Security measures may include:

• HTTPS encryption for website traffic;
• access controls;
• password and authentication protections;
• restricted administrative access;
• server and application security controls;
• fraud and abuse monitoring;
• backup and recovery procedures where appropriate;
• limited access based on operational need;
• security logging and monitoring.

No internet, email, payment or storage system can guarantee absolute security. We therefore also encourage customers to protect their own devices, passwords and email accounts.

12. Data retention

AfricaTourVisa aims to retain personal data only for as long as reasonably necessary for the relevant purpose.

Retention may depend on:

• the type of service;
• whether an application or booking remains active;
• financial and accounting requirements;
• fraud-prevention needs;
• customer-support or dispute history;
• legal obligations;
• the need to establish, exercise or defend legal rights.

When information is no longer required and there is no valid reason to retain it, it may be deleted, anonymized or securely disposed of in accordance with applicable procedures.

13. Your data-protection rights

Depending on applicable law and the circumstances, you may have rights concerning your personal data.

These may include rights to:

• request access to personal data;
• request correction of inaccurate data;
• request deletion in appropriate circumstances;
• request restriction of certain processing;
• object to certain processing;
• request data portability where applicable;
• withdraw consent where processing depends on consent;
• request information about how your data is being used.

We may need to verify your identity before responding to certain requests in order to protect personal information from unauthorized access.

14. Automated processing and profiling

AfricaTourVisa may use automated website functions to support tasks such as form validation, routing, fraud prevention, eligibility checks, or displaying information based on user selections.

Such tools should not be treated as replacing official immigration decisions. Visa, entry and immigration decisions remain with the relevant government authority.

15. Cookies and website data

AfricaTourVisa may use cookies and similar technologies for necessary website functions and, where permitted, optional analytics, preference or marketing purposes.

More information is available in our:

• Cookie Policy
• Cookie Settings

16. Children’s and minors’ data

Travel and visa processes may require information about children and minors. Such information should normally be submitted by a parent, guardian or authorized adult.

More information is available in our Children’s Privacy Policy .

17. Personal data incidents

If AfricaTourVisa becomes aware of a personal-data security incident, we may investigate the issue and take appropriate steps based on the nature of the incident.

This may include:

• containing the incident;
• investigating affected systems or records;
• resetting credentials or restricting access where necessary;
• working with relevant service providers;
• preserving relevant evidence;
• notifying affected individuals or authorities where required by applicable law.

18. Data accuracy

Customers are responsible for providing accurate information when requesting a travel or visa-support service.

If you believe personal information associated with your request is inaccurate or incomplete, contact us as soon as reasonably possible.

Certain changes may not be possible after information has already been submitted to an external provider or authority.

19. Third-party websites and services

AfricaTourVisa may interact with or link to independent providers, including payment services, hotels, travel companies, technology providers and government websites.

Those services operate under their own privacy and data-protection practices. We encourage users to review the relevant third-party privacy information where appropriate.

20. Changes to this Data Protection Policy

AfricaTourVisa may update this policy when services, technology, data-handling practices, security arrangements or applicable requirements change.

The current version published on this page applies after publication, subject to applicable law and any relevant contractual obligations.