Privacy Policy
How Uvidunda Mountain Cultural Tourism Enterprise (UMCTE) and Shimulimuli Heritage Foundation (SHF) collect, process, and safeguard your personal information across our digital workspace.
Last Updated: October 2026 | Applicable to all users of umcte.shf.co.tz
1. Joint Data Controllers
This platform operates under a joint partnership between Uvidunda Mountain Cultural Tourism Enterprise (UMCTE) and Shimulimuli Heritage Foundation (SHF) ("the Partnership", "we", "us"). Together, we serve as joint controllers of personal data collected through this website.
Handles operational safety logs, local guide coordination, emergency contacts, and physical trail safety in Morogoro Region, Tanzania.
Manages web hosting, database storage, payment gateway API processing, cultural archive media, and compliance operations.
2. Information We Collect
- Full name, mobile phone number, and primary email address.
- Country of residence and nationality.
- Emergency contact details and personal tour preferences.
- Voluntarily disclosed health/fitness details for hiking safety.
- Inquiries and messages sent via our digital booking forms.
Booking reference IDs, selected excursion dates, participant counts, payment execution statuses, and mobile money/card gateway transaction references.
Device types, IP addresses, browser specifications, operating system versions, access timestamps, and anonymized user interaction logs to maintain security.
3. How We Use Your Information & Legal Basis
We process personal information to execute and verify tour bookings, manage payment operations, coordinate trail guides, and fulfill statutory tax and recordkeeping obligations under Tanzanian law.
Legal Basis for Processing
- Performance of Contract: To complete tour bookings, process payments, and deliver requested services.
- Legal Obligation: To comply with financial accounting, tax, and regulatory requirements under Tanzanian jurisdiction.
- Vital Interests: To protect participant safety and coordinate emergency response during mountain trekking.
- Legitimate Interests: To operate, secure, and improve our digital services without infringing on your privacy rights.
4. Payment Gateway Security
Transactions are completed via integrated, authorized mobile money providers (M-Pesa, Mixx by Yas, Airtel Money, Tigo Pesa) or card gateways (Visa, Mastercard).
5. Third-Party Infrastructure Services
We may utilize trusted third-party service providers to host our web workspace, manage typography assets (e.g., Google Fonts), process transactional payments, deliver communications, or evaluate performance analytics. These service providers receive access only to information necessary to perform their technical functions on our behalf and are bound by strict confidentiality requirements.
6. Medical & Field Safety Data
Due to the physical nature of mountain trekking, health information (such as severe allergies, asthma, or physical conditions) voluntarily disclosed during booking is treated as confidential. Access is restricted strictly to lead guides and emergency field coordinators for participant safety and evacuation preparedness.
7. Cultural Archives & Media Permissions
Photographs or video footage may be captured during excursions for educational archives, cultural heritage preservation, and non-commercial promotion. Guests who prefer not to appear in media archives may notify our team prior to departure, and reasonable efforts will be made to respect this preference.
8. Data Retention Schedule
Booking and payment records are retained for up to seven (7) years to comply with accounting, statutory audit, and tax requirements under Tanzanian law. Field safety logs are retained only as long as reasonably necessary for operational records.
9. Data Security & Breach Protocol
We employ SSL/TLS encryption, server access controls, and administrative monitoring. In the event of a security breach likely to affect your personal data, we will promptly investigate, take mitigation measures, and notify affected individuals as required by law.
10. Your Privacy Rights & Cookie Usage
You maintain the right to inspect, correct, update, or request the erasure of your personal records, subject to legal recordkeeping obligations.
Cookie Usage: Essential session cookies are utilized to preserve active booking transactions and secure form validation. You may adjust cookie preferences in your browser settings, though disabling essential cookies may impact booking execution.
11. International Data Transfers & Minors
International Transfers: Personal information may be processed and stored in Tanzania or on secure cloud infrastructure operated by our service providers in other jurisdictions where necessary to deliver our services.
Children's Privacy: Unaccompanied minors under 18 years of age cannot book tours independently. Personal data for minors participating in family tours must be provided with explicit parent or guardian consent.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any revised version will be published on this page with an updated "Last Updated" date. Continued use of our website or booking services following policy updates constitutes acceptance of the revised Privacy Policy.
Legal & Privacy Office
Submit data access requests, corrections, or privacy inquiries directly to our legal desk.
Shimulimuli Heritage Foundation
Holland House, 4th Floor
Ohio Street (Samora Avenue), Posta, Ilala
P.O. Box 7183, Dar es Salaam, Tanzania
Legal Desk: bookings@umcte.shf.co.tz
Privacy Desk: bookings@umcte.shf.co.tz
Domain Scope: umcte.shf.co.tz