1. Introduction

Welcome to Bahari Beach Bus Services. We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you about how we look after your personal data when you visit our website, use our mobile app, make bookings, and travel with us. It also explains your privacy rights and how the law protects you.

Bahari Beach Bus Services operates intercity and regional bus transportation services throughout Tanzania. This policy applies to all personal data collected through our website, mobile applications, at our ticket offices, on our buses, and through our customer service channels.

2. Information We Collect

We collect several types of information from and about users of our services, including:

2.1 Personal Information

• Identity Data: Full name, date of birth, gender, nationality, and government-issued ID numbers (when required for certain routes)
• Contact Data: Physical address, email address, and telephone numbers
• Payment Data: Credit/debit card details, mobile money information, bank account details (we do not store complete payment card information on our servers)
• Travel Data: Booking history, travel preferences, frequent destinations, seat preferences, and special requirements
• Loyalty Program Data: Membership ID, points balance, rewards history (if applicable)

2.2 Technical and Usage Data

• Device Information: IP address, browser type and version, device type, operating system
• Usage Data: Pages visited, features used, booking patterns, click-through paths, time spent on pages
• Location Data: General location based on IP address and, if permitted, precise GPS location from mobile devices
• CCTV Footage: Video recordings from security cameras at our terminals and on our buses for safety and security purposes

3. How We Collect Your Information

We use different methods to collect data from and about you, including:

• Direct Interactions: Information you provide when booking tickets, creating an account, filling out forms, or corresponding with us
• Automated Technologies: Cookies, server logs, and similar technologies when you visit our website or use our mobile app
• In-Person Collection: Information collected at our ticket offices or on our buses
• Third Parties: We may receive information about you from business partners, technical service providers, and analytics providers

4. How We Use Your Information

We use the information we collect for various purposes, including:

• Service Provision: Processing and managing your ticket bookings, providing transportation services, and facilitating payments
• Customer Service: Responding to your inquiries, resolving complaints, and providing support
• Communication: Sending service-related notifications such as booking confirmations, schedule changes, and travel alerts
• Service Improvement: Analyzing usage patterns to enhance our website, mobile app, and transportation services
• Personalization: Tailoring your experience and providing content relevant to your travel preferences
• Marketing: Communicating about promotions, upcoming services, and other news if you have opted to receive such communications
• Safety and Security: Ensuring the security of our passengers, staff, and assets through CCTV monitoring and identity verification
• Legal Compliance: Fulfilling our legal obligations, including maintaining travel records as required by transportation regulations

5. Legal Basis for Processing

We process your personal data on the following legal grounds:

• Contract Performance: Processing necessary to fulfill our contractual obligations to you when you book and travel with us
• Legitimate Interests: Processing necessary for our legitimate business interests, such as improving our services and ensuring safety
• Legal Obligation: Processing necessary to comply with our legal obligations under Tanzanian law and transportation regulations
• Consent: Processing based on your specific consent, such as for marketing communications

6. How We Protect Your Information

We implement appropriate technical and organizational security measures to protect your personal information, including:

• Encryption: Secure Socket Layer (SSL) technology to encrypt data transmitted between your device and our servers
• Access Controls: Restricted access to personal data with appropriate authentication measures
• Physical Security: Secured premises and proper disposal of physical documents containing personal information
• Staff Training: Regular privacy and security training for all staff members who handle personal data
• Data Minimization: Collecting only the information necessary for the specified purposes
• Regular Security Assessments: Periodic reviews and updates of our security practices

While we strive to use commercially acceptable means to protect your personal data, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which we collected it, including:

• Booking information is retained for 3 years after your journey for customer service and legal purposes
• Account information is retained as long as your account remains active, plus 1 year after account closure
• CCTV footage is typically retained for 30 days unless required for incident investigation or legal proceedings
• Financial records are kept for 7 years as required by tax and accounting regulations

8. Sharing Your Information

We may share your personal information with:

• Service Providers: Payment processors, IT service providers, customer support services, and other vendors who perform functions on our behalf
• Business Partners: Hotels, tour operators, and other transportation services with whom we have partnerships, but only with your consent
• Regulatory Authorities: Government agencies, law enforcement, and other public authorities when required by law
• Professional Advisors: Lawyers, auditors, and insurers who provide consultancy, legal, insurance, and accounting services

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

We do not sell, rent, or trade your personal information to third parties for their marketing purposes without your explicit consent.

9. International Transfers

Some of our external third-party service providers may be based outside Tanzania, which may involve a transfer of your personal data outside the country. Whenever we transfer your personal data internationally, we ensure a similar degree of protection is afforded to it by implementing appropriate safeguards.

10. Your Rights

Under applicable data protection laws, you have the following rights regarding your personal information:

• Right to Access: You can request copies of your personal data we hold
• Right to Rectification: You can request that we correct any inaccurate or incomplete personal data
• Right to Erasure: You can request that we delete your personal data in certain circumstances
• Right to Restrict Processing: You can request that we restrict the processing of your personal data in certain circumstances
• Right to Data Portability: You can request that we transfer your personal data to another organization or directly to you
• Right to Object: You can object to our processing of your personal data in certain circumstances
• Right to Withdraw Consent: You can withdraw consent at any time where we are relying on consent to process your personal data

To exercise any of these rights, please contact us using the details provided in the "Contact Us" section. We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data.

11. Cookies and Similar Technologies

We use cookies and similar tracking technologies to enhance your experience on our website and mobile app. These technologies help us understand how you use our services, remember your preferences, and improve our offerings.

Types of cookies we use:

• Essential Cookies: Required for the operation of our website and services
• Analytical/Performance Cookies: Allow us to recognize and count visitors and analyze how users navigate our website
• Functionality Cookies: Used to recognize you when you return to our website
• Targeting Cookies: Record your visits to our website, the pages you visit, and the links you follow

You can set your browser to refuse all or some browser cookies or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of our website may become inaccessible or not function properly.

12. Changes to This Privacy Policy

We may update our Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new Privacy Policy on our website and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically for any changes.

13. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact our Data Protection Officer:

• By email: privacy@baharbeach.com
• By phone: +255 749 784 444
• By mail: Data Protection Officer, Bahari Beach Bus Services, Ubaruku, Mbarali District, Mbeya, Tanzania

You have the right to make a complaint at any time to the relevant data protection authority. However, we would appreciate the chance to address your concerns before you approach the authority, so please contact us in the first instance.

Last Updated: August 15, 2023