Privacy Policy - Jabulani Private Villas

Privacy Policy (Jabulani Private Villas)

Effective date: 5th Jan 2026
This Privacy Policy explains how Jabulani Private Villas (“Jabulani”, “we”, “us”, “our”) collects, uses, shares, and protects personal information when you visit our website, contact us, or book a stay at our properties in Arusha (Boma Siara) and Moshi (Mjohoroni).

We aim to follow applicable data protection laws and principles, including Tanzania’s Personal Data Protection Act, 2022 (Cap. 44) and guidance from the Personal Data Protection Commission (PDPC). PDPC+2PDPC+2
If you are located in the EEA/UK (or another region with similar laws), additional rights may apply.

1) Information we collect

We may collect the following categories of personal information:

A. Information you provide to us

Contact details: name, phone number, email address, nationality/residency (e.g., EAC/Non-EAC where needed)
Booking details: dates, number of guests, unit preference, special requests
Service requests: airport transfers, day trips, town tours, self-drive car hire (on request)
Messages: information you include when contacting us via forms, email, phone calls, or WhatsApp

B. Information collected automatically

Website usage data: pages visited, device/browser type, approximate location (city/country), referral source, and similar analytics data (often via cookies or analytics tools)

C. Information collected on-site

CCTV footage in shared/common areas for safety and security (where installed)

2) How we use your information

We use personal information to:

Respond to enquiries and communicate with you
Process and manage bookings and provide guest support
Arrange requested services (transfers, tours, car hire) through our team and/or partners
Improve our website and services (performance, usability, content relevance)
Protect safety and security of guests, staff, and property (including CCTV)
Comply with legal obligations and handle complaints or disputes

3) Legal basis for processing (where required)

Depending on the situation, we process personal data based on:

Contract necessity: to handle a booking or service you request
Consent: where you voluntarily opt in (e.g., marketing messages)
Legitimate interests: to operate our business, improve services, and maintain security (balanced with your rights)
Legal obligation: where we must meet regulatory or lawful requirements

Tanzania’s PDPA emphasizes lawful, fair, transparent processing and related obligations for controllers/processors. DLA Piper Data Protection+2Clyde & Co.+2

4) Cookies and analytics

We may use cookies and similar technologies to:

Keep the site working properly
Understand how visitors use the site
Improve pages, content, and user experience

You can usually control cookies through your browser settings. Some features of the website may not work properly if cookies are disabled.

5) How we share your information

We do not sell your personal information.

We may share your data only when necessary with:

Service providers who help us run our website (hosting, analytics, website tools)
Operational partners needed to fulfill your request (e.g., transfer providers, tour partners, car hire partners)
Payment/finance providers if used for booking payments (where applicable)
Legal or regulatory authorities if required by law, or to protect rights, safety, and property

We aim to share only what is required to deliver the service.

6) International data transfers

If your information is processed or stored outside Tanzania (for example, by cloud/hosting providers), we take reasonable steps to ensure appropriate safeguards are in place.

7) Data retention

We keep personal information only as long as needed to:

Manage your booking and provide services
Maintain business records and resolve disputes
Meet legal/regulatory requirements

CCTV footage (where used) is generally retained for a limited period unless required for an incident review.

8) Security

We take reasonable technical and organizational measures to protect personal data from unauthorized access, misuse, loss, or alteration. No method of transmission or storage is 100% secure, but we work to maintain appropriate safeguards.

9) Your rights

Subject to applicable laws, you may have rights to:

Request access to your personal data
Request correction of inaccurate data
Request deletion (where appropriate)
Object to processing or request restriction (where applicable)
Request data portability (where applicable)
Withdraw consent for consent-based processing (e.g., marketing)

Tanzania’s PDPA includes data subject rights and related principles. mawasiliano.go.tz+2DLA Piper Data Protection+2
You may also have the right to lodge a complaint with the Personal Data Protection Commission (PDPC) in Tanzania. PDPC+1

10) Children’s privacy

Our services are intended for adults booking accommodation. We do not knowingly collect personal data from children without appropriate consent from a parent/guardian where required.

11) Links to third-party sites

Our website may include links to third-party websites (e.g., maps, social media). We are not responsible for the privacy practices of those sites. Please review their policies before providing personal information.

12) Changes to this policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised effective date.

13) Contact us

If you have questions, requests, or concerns about this Privacy Policy or your personal data, contact us:

Jabulani Private Villas
Email: info@jabulaniprivatevillas.com
Phone/WhatsApp: +255 784 424 268
Address: Arusha, Tanzania