1. Who We Are

ZimTravellers is a trading name of Brewlands Investments (Pvt) Ltd, a company registered in Zimbabwe. We are a safari travel company specialising in curated Zimbabwe experiences — from day excursions to multi-day wilderness safaris.

For the purposes of the General Data Protection Regulation (GDPR) and applicable European privacy law, Brewlands Investments (Pvt) Ltd is the data controller responsible for your personal information collected through this website.

2. What Information We Collect

Information you give us directly

• Enquiry forms: your name, email address, phone number, travel dates, group size, and any details you share about your trip.
• Email newsletter signup: your name and email address when you subscribe to our mailing list.
• WhatsApp contact: your phone number and any messages you send via WhatsApp.
• Booking information: when you proceed to book, we collect additional details required to arrange your safari, including dietary requirements, fitness level, and emergency contact information.

Information collected automatically

• Analytics data: via Google Analytics 4 (GA4), we collect anonymised information about how you use our website — pages visited, time on site, device type, and approximate geographic location. Your IP address is anonymised.
• Cookies: small files stored on your device that help us remember your preferences and understand how visitors use our site. See Section 9 for full details.
• Technical data: browser type, operating system, referring URL, and page interaction data collected through standard web server logs.

Information from third parties

If you contact us via social media (Instagram, Facebook), we receive your public profile name and any messages you send. We do not purchase data from third-party data brokers.

3. How We Use Your Information

We use your information only for the purposes stated at the time of collection. Specifically:

• To respond to your safari enquiry and provide you with itinerary proposals, pricing, and availability information.
• To arrange and manage your booking — communicating with partner lodges, guides, and transport providers on your behalf.
• To send you our email newsletter if you have subscribed — inspiration, Zimbabwe travel guides, and seasonal offers. You can unsubscribe at any time.
• To improve our website using anonymised analytics data to understand which pages are most useful.
• To comply with legal obligations — financial records, tax requirements, and applicable Zimbabwe law.
• To respond to any complaints or disputes relating to a booking or service.

We do not use your information for automated decision-making or profiling that produces legal effects on you.

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) — including Norway — we process your personal data under the following legal bases as defined by GDPR Article 6:

• Consent (Art. 6(1)(a)): for newsletter subscriptions and non-essential cookies. You can withdraw consent at any time.
• Contract performance (Art. 6(1)(b)): when processing is necessary to fulfil a booking you have made or requested.
• Legitimate interests (Art. 6(1)(f)): for responding to enquiries, improving our website, and fraud prevention — where these interests are not overridden by your rights.
• Legal obligation (Art. 6(1)(c)): where required by applicable law (for example, financial record-keeping).

5. Who We Share Information With

We share your information only where necessary to deliver your safari experience or operate our business. We never sell your personal data.

Service providers and partners

• Brevo (Sendinblue): our email marketing platform, used to send newsletters and booking-related emails. Brevo processes data under GDPR-compliant terms. Brevo Privacy Policy →
• Google Analytics 4: anonymised website analytics. Data is processed under Google's terms with IP anonymisation enabled. Google Privacy Policy →
• Partner lodges and guides: when you book a safari, we share the information necessary to arrange your stay — typically your name, dietary requirements, and arrival details. These partners are bound by confidentiality obligations.
• Payment processors: if you pay a deposit online, payment is processed by our payment provider (DPO Group). We do not store your card details. DPO Privacy Policy →

Legal disclosures

We may disclose your information if required by law, court order, or to protect the rights, property, or safety of ZimTravellers, our guests, or others.

6. International Data Transfers

ZimTravellers is based in Zimbabwe, which does not currently hold an EU adequacy decision. When you submit an enquiry or subscribe to our newsletter, your data is transferred to Zimbabwe and to our service providers (Brevo, Google) who may process data in various countries.

For transfers from the EEA, we rely on Standard Contractual Clauses (SCCs) adopted by the European Commission, and on the GDPR-compliant terms of our service providers where applicable.

By submitting an enquiry or subscribing to our list, you acknowledge that your data will be transferred to Zimbabwe for the purpose of us providing you with safari planning services.

7. How Long We Keep Your Data

• Enquiry data: we retain enquiry correspondence for 3 years from the date of last contact, to allow for future bookings and dispute resolution.
• Booking records: retained for 7 years to comply with financial record-keeping requirements under Zimbabwe law.
• Email newsletter subscribers: we retain your details for as long as you remain subscribed. If you unsubscribe, your email is removed from active lists within 30 days. Anonymised analytics data may be retained.
• Analytics data: GA4 data is retained for 14 months, after which it is automatically deleted by Google.

After retention periods expire, data is securely deleted or anonymised.

8. Your Rights

If you are in the EEA (including Norway), you have the following rights under GDPR. These rights are not absolute and may be subject to limitations in certain circumstances.

• Right to access (Art. 15): request a copy of the personal data we hold about you.
• Right to rectification (Art. 16): ask us to correct inaccurate or incomplete information.
• Right to erasure (Art. 17): request deletion of your personal data where there is no lawful reason for us to continue processing it.
• Right to restrict processing (Art. 18): ask us to pause processing your data in certain circumstances.
• Right to data portability (Art. 20): receive your data in a structured, machine-readable format.
• Right to object (Art. 21): object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent: where processing is based on consent, you can withdraw at any time without affecting the lawfulness of prior processing.

Right to complain

If you believe we have mishandled your personal data, you have the right to lodge a complaint with a supervisory authority. Norwegian residents may contact Datatilsynet (the Norwegian Data Protection Authority). EU residents may contact their local supervisory authority.

9. Cookies

Cookies are small text files stored on your device when you visit a website. We use the following categories of cookies:

Strictly necessary cookies

These cookies are essential for the website to function. They cannot be disabled. They include session cookies for form submission and security tokens.

Analytics cookies

We use Google Analytics 4 to understand how visitors use our website. These cookies collect anonymised information — no personally identifiable data is sent to Google. You can opt out by adjusting your cookie preferences or by using the Google Analytics Opt-out Browser Add-on.

Managing cookies

You can control cookies through your browser settings. Note that disabling certain cookies may affect website functionality. For more information, visit allaboutcookies.org.

10. Children's Privacy

Our website and services are not directed at children under 16 years of age. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal information, please contact us immediately and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The date at the top of this page indicates when it was last revised. For material changes, we will notify active subscribers by email. Continued use of our website after changes are posted constitutes acceptance of the revised policy.

12. Contact Us

For any questions about this Privacy Policy, to exercise your rights, or to raise a concern: