1) Who we are
“BerkwoTravel”, “we”, “our”, and “us” refer to BERKWO TRAVEL LTD, a company registered in Uganda and operating the BerkwoTravel platform at berkwotravel.com.
2) Information we collect
- Account & identity: name, email, phone, profile info, authentication identifiers (including Google Sign-In data if you choose that method).
- Booking details: trip selections, dates, headcount, preferences, messages with operators, gorilla permit requirements.
- Payment metadata: payment status, amounts, processor references (via Stripe, Flutterwave, or mobile money providers). We do not store full card numbers or mobile money PINs.
- Device & usage: IP, device/OS, browser, approximate location, log data, diagnostics.
- Push notifications: device tokens for booking reminders and service updates (if you opt in).
- SMS preferences and messages: phone numbers, consent or opt-out records, and delivery information for transactional and, where separately authorized, promotional SMS messages.
- Cookies & similar: session, security, analytics, and preference cookies (see Cookies below).
3) How we use data
- Provide and operate the platform, process bookings, and facilitate payments.
- Verify identity, prevent fraud/abuse, and ensure platform security.
- Send transactional messages (confirmations, reminders, service notices).
- Send promotional SMS messages only where you have provided the required marketing consent.
- Improve features, analytics, and customer support.
- Comply with legal and tax obligations.
4) Legal bases (EEA/UK)
We rely on: (a) performance of a contract (to provide bookings/services), (b) legitimate interests (security, improvement), (c) consent where required (e.g., certain cookies/marketing), and (d) legal obligations.
7) Data retention
We keep personal data only as long as needed for the purposes above, to meet legal/tax requirements, resolve disputes, and enforce agreements. Retention periods vary by data type.
8) Security
We employ technical and organizational safeguards appropriate to the nature of the data, including:
- Encrypted data transmission (HTTPS/TLS)
- Firebase App Check for API protection
- Password policies with expiration for administrative accounts
- Rate limiting and abuse prevention
No method of transmission or storage is 100% secure.
9) Your rights
Depending on your region, you may have rights to access, correct, delete, or export your data, and to object or restrict certain processing. You may also withdraw consent where processing is based on consent.
Requests: Email [email protected]. We may need to verify your identity.
10) SMS communications
We use your phone number to send transactional SMS messages related to your account, bookings, rides, reminders, payments, customer support, and service updates. These messages may be sent through Twilio or another messaging provider and may incur message and data rates.
We send promotional SMS messages, such as offers and discounts, only where you have separately opted in. You can withdraw marketing consent at any time by replying STOP or contacting [email protected]. Reply HELP for assistance. Opting out of marketing messages does not stop essential transactional messages about an active booking or account.
We retain consent, opt-out, and delivery records as needed to honor your preferences, provide the Service, prevent abuse, and meet legal and compliance obligations.
11) Children
The service is not directed to children under the age required by local law for independent consent. We remove data obtained in violation of this policy upon notice.
12) International transfers
We may transfer, store, and process information in countries other than yours. Where required, we use appropriate safeguards (e.g., standard contractual clauses).
13) Changes to this policy
We will update this page and adjust the effective date when we make material changes.
14) Contact
Questions about privacy? Email [email protected].