Politique de confidentialité

Last updated: 11 November 2026

This policy explains what personal data Riftvoya collects when you use riftvoya.com, plan or book a trip, sign up for our checklist or apply to become a partner agency; why we collect it; who we share it with; how long we keep it; and the rights you have. We have written it in plain language. If anything is unclear, email hello@riftvoya.com or message us on WhatsApp at +256 702 017 741.

The short version

We collect only what we need to plan, book and support your trip.
Before you pay a deposit, agencies see your trip details but never your name, email or phone number.
Card details are handled by our payment providers. We never see or store your full card number.
We never sell your data, and we only send marketing emails if you asked for them.
You can ask us to see, correct, export or delete your data at any time.

1. Who we are

Riftvoya is a travel marketplace operated by Joseph Kato Sseruwu, Plot 31 Ntinda–Kisaasi Road, Kampala, Uganda. We connect travellers with licensed local tour operators ("agencies") in Uganda. For the personal data described in this policy, Riftvoya is the data controller: we decide how and why it is used. Once you book, the agency you choose also becomes responsible for the data it needs to run your trip.

Privacy contact: hello@riftvoya.com. Please put "Privacy" in the subject line so we can prioritise your request.

2. What we collect

Information you give us

Trip requests: your name, email, country, travel month, trip length, number of travellers (including children’s ages if you tell us), budget, interests, preferred travel style and any notes you write, plus the date and wording of the consent you gave.
Your account: if you sign in to My trips, your login email and the trips, quotes, messages and payments linked to it.
Messages: everything you send to agencies or to us through Riftvoya, and messages you send us by email or WhatsApp.
Bookings and payments: the quote you chose, amounts, payment status, dates and payment references. Card and wallet details are entered directly with our payment providers.
Checklist and newsletter sign-ups: your email address and the date you signed up.
Agency and job applications: company details, contact person, licence and registration numbers, documents uploaded, and for job applications your CV and contact details.
Feedback and reviews: anything you tell us about your trip after you travel.

Information collected automatically

Technical data such as IP address, browser and device type, operating system, language, pages viewed, links clicked, the site that referred you and approximate location (country or city, derived from your IP address).
This is collected through cookies and similar technologies set by our website platform, Wix, as explained in section 8.

Information from others

From agencies: the quotes they prepare for you, booking confirmations, permit details and updates about your trip.
From payment providers: confirmation that a payment succeeded, failed or was refunded.
From people travelling with you: if someone books for a group, they may give us your name and details needed for the trip. They should tell you about this policy.

Sensitive information

We do not ask for sensitive information. If you choose to tell us about health, mobility or dietary needs so the trip can be planned safely, we use it only for that purpose and share it only with the agency that needs it. Please share only what is necessary.

3. How we use your data, and why we are allowed to

To match your request with two Riftvoya Verified agencies and send you their quotes. Basis: your request and consent, and taking steps to enter into a contract with you.
To run your booking: taking deposits and balances, paying the agency, sending confirmations and reminders, and passing your name and email to the one agency you booked after your deposit. Basis: performing our contract with you.
To review messages before delivery, remove contact details shared too early, prevent fraud and keep the platform safe. Basis: our legitimate interest in a safe, trusted marketplace.
To answer questions, handle changes, cancellations, refunds and complaints. Basis: performing our contract and our legitimate interests.
To send the checklist and occasional planning tips if you asked for them. Basis: your consent, which you can withdraw at any time.
To check agencies before they join and keep records of their licences. Basis: our legitimate interest in only working with licensed, trustworthy operators.
To understand how the site is used and improve it. Basis: our legitimate interests and, where required, your consent to cookies.
To meet legal duties, such as tax and accounting records, and to respond to lawful requests from authorities. Basis: legal obligation.

We do not use your data for automated decisions that have legal or similarly significant effects on you.

4. Who we share it with

Agencies matched to your request: trip details only (dates, group size, budget, interests and notes), with no name, email or phone number.
The agency you book: after your deposit, your name and email, plus details needed to run the trip and buy permits (for example, passport details if permits require them).
Service providers who work for us: Wix.com (website hosting, member accounts, forms, email and analytics), Wix Payments and PayPal (payments), and email and messaging services we use to reply to you. They may use your data only to provide their service to us.
Professional advisers such as accountants or lawyers, where needed.
Authorities, when the law requires it or to protect someone’s safety.
A buyer or investor, if Riftvoya is ever sold or restructured, under the same protections as this policy.

We never sell your personal data and we do not share it with advertisers.

5. International transfers

Some of our service providers store or process data outside Uganda, including in the European Union and the United States. Where this happens we rely on their contractual commitments and recognised safeguards, such as standard contractual clauses, to keep your data protected to the standard required by Uganda’s Data Protection and Privacy Act, 2019 and, where it applies, the EU and UK GDPR.

6. How long we keep it

Trip requests that do not lead to a booking: up to 24 months, then deleted or anonymised.
Bookings, payments and related messages: up to 24 months after your trip, or longer where tax, accounting or legal claims require it (normally up to 7 years for financial records).
Checklist and newsletter emails: until you unsubscribe.
Agency records: while the agency is a partner, and for up to 24 months after it leaves.
Job applications: up to 12 months, unless you ask us to delete them sooner.
Website analytics: according to Wix’s retention settings, usually up to 24 months.

7. How we protect it

Your data is stored on Wix’s secure infrastructure and sent over encrypted (HTTPS) connections. Access to trip requests and messages is limited to the Riftvoya team who need it, using individual accounts. Agencies only see what they need. Payments are processed by certified payment providers. No system is perfectly secure, but if a breach affects your data we will tell you and the relevant authority as the law requires.

8. Cookies and similar technologies

Our website uses cookies, small files stored on your device, through our platform Wix:

Essential cookies keep the site working, secure and signed in. These cannot be switched off.
Analytics cookies help us understand which pages are useful and fix problems.
Marketing cookies, if we use them in future, would help us measure advertising. We will only set them with your consent where the law requires it.

You can accept or reject non-essential cookies through the cookie banner, and you can delete or block cookies in your browser settings. Blocking essential cookies may stop parts of the site, such as My trips, from working.

9. Emails from us

We send service emails about your request and booking, such as quotes, payment confirmations and reminders. We only send planning tips and offers if you signed up for them. Every marketing email has an unsubscribe option, or you can simply reply and ask us to stop.

10. Your rights

Depending on where you live, you have the right to:

ask for a copy of the personal data we hold about you;
have inaccurate data corrected;
have your data deleted, where we no longer need it or you withdraw consent;
receive your data in a portable format;
object to, or ask us to restrict, how we use it;
withdraw consent at any time, without affecting what we did before;
complain to a data protection authority.

To use any of these rights, email hello@riftvoya.com. We may ask you to confirm your identity first. We reply within 30 days and do not charge a fee. You can complain to Uganda’s Personal Data Protection Office or to the data protection authority in your own country, but we would appreciate the chance to put things right first.

If you live in California or another US state with privacy laws, you have similar rights to know, delete and correct your data. We do not sell or share personal data for cross-context behavioural advertising.

11. Children

Riftvoya is for adults planning trips. We do not knowingly collect data directly from anyone under 18. If you include children in a trip request, such as their ages for permit rules, we use that only to plan the trip. If you think a child has sent us their data, contact us and we will delete it.

12. Links to other websites

Our pages link to other websites, such as park authorities, WhatsApp and payment providers. Their own privacy policies apply when you use them.

13. Changes to this policy

We may update this policy as Riftvoya grows. We will change the date at the top, and if the changes are significant we will tell you by email or on the website before they apply.

14. Contact us

Riftvoya, exploitée par Joseph Kato Sseruwu
Plot 31 Ntinda–Kisaasi Road, Kampala, Ouganda
E-mail : hello@riftvoya.com
Téléphone et WhatsApp : +256 702 017 741