PRIVACY POLICY
DATA CONTROLLER
The data controller responsible for this website and the services offered is:
Loofe Sky Capture Zanzibar
Kendwa, Zanzibar, Tanzania
Email: loofeskycapture@gmail.com
Phone / WhatsApp: +255 670 199 870
GENERAL INFORMATION ON DATA PROTECTION
We take the protection of your personal data seriously. We process personal data in accordance with applicable data protection principles and, where applicable, the EU General Data Protection Regulation (GDPR), particularly when our services are used by visitors from the European Economic Area (EEA).
Personal data means any information relating to an identified or identifiable person, such as name, contact details, identification documents, booking details, or location data.
This privacy policy explains what data we collect, how we use it, and your rights.
SCOPE OF APPLICATION OF GDPR
Although our company is based in Zanzibar, Tanzania, our services may be accessible to and used by customers from the European Economic Area (EEA). In such cases, we apply GDPR principles to ensure a high standard of data protection.
DATA WE COLLECT
We may collect and process the following types of personal data:
- Full name
- Email address
- Phone number / WhatsApp number
- Home country and nationality
- Booking details (rental dates, services booked, locations)
- Payment information (processed via third-party providers)
- Identification documents (e.g. passport or national ID, where required for rentals)
- Driving licence details (for car or motorbike rentals)
- Communication records (email, WhatsApp, or other messaging platforms)
- Technical data (IP address, browser type, device information)
PURPOSE OF DATA PROCESSING
We process personal data for the following purposes:
- To manage and confirm bookings and reservations
- To provide car, motorbike, jet ski, and related tourist services
- To verify identity and driving eligibility where required
- To process payments and deposits
- To communicate with customers regarding bookings and services
- To ensure safety, fraud prevention, and liability management
- To comply with legal obligations where applicable
LEGAL BASIS FOR PROCESSING (GDPR WHERE APPLICABLE)
When GDPR applies, we rely on the following legal bases:
- Article 6(1)(b): Processing necessary for the performance of a contract (bookings and rentals)
- Article 6(1)(c): Legal obligations (e.g. accounting or regulatory requirements)
- Article 6(1)(f): Legitimate interest (security, fraud prevention, service improvement, communication)
DATA COLLECTION WHEN VISITING OUR WEBSITE
When you visit our website, technical data is automatically collected by the hosting provider and stored in server log files. This may include:
- IP address
- Date and time of access
- Pages viewed
- Browser type and version
- Operating system
- Referrer URL
This data is used to ensure security, stability, and proper functioning of the website.
HOSTING
Our website is hosted by a third-party hosting provider who processes data on our behalf for technical delivery of the website.
Where required, we ensure appropriate data protection agreements are in place with our hosting provider.
CONTACT (EMAIL / WHATSAPP)
If you contact us via email, phone, or WhatsApp, we will process your data to respond to your inquiry and manage your request.
This includes all information you voluntarily provide during communication.
BOOKINGS AND RENTAL SERVICES
When you book a service (car, motorbike, jet ski, or other tourism service), we may process additional data such as:
- Rental agreements and booking confirmations
- Identity verification documents (passport/ID)
- Driving licence information (where applicable)
- Damage reports or incident records (if relevant)
This data is required to ensure safe operation of rental services, protect assets, and manage liability.
DATA SHARING
We do not sell personal data.
We may share personal data only when necessary with:
- Payment service providers (for processing payments)
- Hosting and IT service providers
- Communication tools (e.g. WhatsApp / Meta Platforms)
- Insurance providers (in case of incidents or claims)
- Legal or regulatory authorities if required by law
DATA STORAGE AND RETENTION
We store personal data only for as long as necessary for the purposes stated in this policy.
Retention periods may vary:
- Booking and rental records: as required for business and legal purposes
- Communication data: until the inquiry is resolved
- Financial records: as required by applicable accounting rules
- Identification data: only for the duration necessary for rental verification and safety purposes
Once data is no longer required, it will be securely deleted or anonymised.
COOKIES
Our website may use cookies that are necessary for basic website functionality.
We do not use cookies for profiling or advertising purposes unless explicitly stated.
You can control or delete cookies through your browser settings.
DATA TRANSFERS TO THIRD COUNTRIES
As a Zanzibar-based company, personal data may be processed outside the European Economic Area.
Where EU data protection standards apply, we take reasonable steps to ensure appropriate safeguards are in place to protect personal data.
SECURITY OF DATA
We implement reasonable technical and organisational measures to protect personal data against loss, misuse, or unauthorised access.
However, no electronic transmission or storage method is 100% secure.
YOUR RIGHTS (UNDER GDPR WHERE APPLICABLE)
If GDPR applies to your data, you have the following rights:
- Right of access to your data
- Right to rectification of incorrect data
- Right to deletion (“right to be forgotten”)
- Right to restriction of processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent at any time
To exercise these rights, you can contact us using the details provided above.
RIGHT TO COMPLAIN
If you believe your data has been processed unlawfully, you may lodge a complaint with a data protection authority in your country of residence within the EU/EEA.
EU REPRESENTATIVE
We have not appointed an EU representative under Article 27 GDPR, as we do not meet the mandatory requirements for such appointment.
CHANGES TO THIS PRIVACY POLICY
We may update this privacy policy from time to time to reflect legal, technical, or operational changes.
The latest version will always be available on our website.
