Privacy Policy

This Privacy Policy explains how kollatuneztours ("we", "us") collects, uses, stores, and protects personal information when you use our website, book tours, participate in community chats, or interact with our services. We are committed to processing your data responsibly and in accordance with applicable data protection legislation, including Nigerian data protection laws and international privacy principles.

We collect personal information necessary to deliver travel and booking services: - Account & Profile Data: Full name, email address, phone number, location, and optional profile image. - Booking & Ticket Data: Selected tour, travel dates, guest count, total cost, buyer name, buyer email, ticket code, and booking status. - Payment Verification Data: Payment method, bank transfer confirmation notes, transaction identifiers, and verification status. We do NOT collect or store credit/debit card numbers on our servers. - Communication & Reviews: Messages sent via our contact form, tour reviews, community chat messages, and media uploads. - Legal Acceptance Records: Durable audit records of your explicit acceptance of Terms & Conditions and acknowledgement of Privacy Policy (including timestamp, version, unique consent ID, and document hash).

We collect minimal technical information strictly required for security, authentication, and service operation: - Authentication Session Cookies: Essential HTTP-only session cookies issued by our authentication system (Better Auth) to keep you signed in securely. - Device Awareness for Security: Our backend records the request User-Agent string strictly to power our new-device sign-in alert feature (notifying you if an account sign-in occurs from an unrecognized browser/device). - Browser Local Storage: We store non-sensitive display preferences (such as remembering that the cookie notification was acknowledged) in your browser's local storage. This is not a cookie and is not used for cross-site tracking. - Zero Advertising Trackers: We do NOT deploy third-party advertising cookies, social media tracking pixels, Meta Pixel, or Google Analytics.

We process personal data for legitimate business purposes: 1. To process, confirm, issue tickets for, and administer your tour bookings. 2. To verify payments and maintain manual accounting reconciliation. 3. To send essential transactional notifications (booking confirmation, trip reminders, payment verification). 4. To provide customer support and respond to inquiries. 5. To maintain auditable compliance records demonstrating explicit agreement to terms. 6. To enforce safety rules, prevent fraud, and secure user accounts.

We do not sell, rent, or trade your personal data. We share data only where necessary: - Tour Guides & Local Logistics Partners: Traveler names and headcounts necessary to deliver booked excursions. - Transactional Email Service (Resend): To deliver confirmation emails and booking tickets. - Cloud Infrastructure (Convex & Vercel): Cloud infrastructure hosting the application database and frontend.

We implement administrative and technical safeguards including role-based access control (admin isolation), encrypted HTTPS transport in transit, server-side session tokens, and database access rule enforcement.

Account and booking records are retained for the duration of your account and as required for legal, tax, and accounting purposes. Legal acceptance records (audit trail of terms agreed at checkout) are stored in Convex as durable, immutable business records to preserve historical evidence of agreement.

Under applicable data protection laws, you have the right to: - Access the personal information we hold about you. - Request correction of inaccurate profile data. - Request deletion of your account (subject to legal retention requirements). - Withdraw consent for optional communications. To exercise these rights, email Kollatuneztours@gmail.com.

For privacy-related questions, data access requests, or compliance inquiries, please contact: kollatuneztours Email: Kollatuneztours@gmail.com Business / Contact Address: 23 Ibadiaran Street, Onigbongbo, Maryland, Lagos, Nigeria Registered Business Address: [REGISTERED BUSINESS ADDRESS TO BE CONFIRMED BY BUSINESS OWNER/COUNSEL] Phone: +234 812 345 6789 Note: A separate Data Protection Officer email does not currently exist. All inquiries are handled through the official contact email above.