Privacy Policy

Who is responsible for your information

M Travel and Tours Burundi, based in Bujumbura, manages the personal information collected through this website and our booking communications. This notice covers enquiries, trip planning, tour bookings, client accounts and the information needed to organise travel services. Our current contact details are provided below. You can use them for a privacy question or request at any time.

Information you provide

When you contact or book with us, we collect the details you submit: your name, email address, telephone or WhatsApp number, travel dates, group size, selected package and message. A tailor-made trip request may also include destinations, interests, travel style, room preferences and an indicative budget. We keep your booking reference, agreed itinerary, price, currency, payment terms and communications needed to manage the journey.

Please provide only information relevant to the service. For children, an age is usually sufficient at the enquiry stage; a responsible adult should make the booking. Do not place passport copies, card numbers, passwords or medical records in the Special requests field. If an arrangement requires additional identity or assistance information, our team will explain what is needed and how to provide it.

Why we use these details

We use your information to answer your enquiry, prepare a quotation, organise the services you request, send booking and travel updates, match payments to your booking and respond to changes, cancellations or questions. We also keep records needed for accounting, resolving disputes and protecting our customers and business.

Booking communications are service messages, not a subscription to advertising. Submitting a travel form does not enrol you in a marketing mailing list. Where applicable law requires a legal basis, booking administration relates to your requested pre-contractual steps and contract; record-keeping may meet legal obligations, and proportionate security measures protect legitimate interests. Where we rely on your consent, you may withdraw it for future use, without changing the lawfulness of earlier use.

Payments and external services

Card and other payment details are entered on WeTravel’s hosted payment page. This website does not collect or store your full card number or security code. We retain the booking currency, agreed amounts and transaction references that our team verifies. WeTravel processes payment information under its own privacy notice and terms.

If you choose WhatsApp, email or an external review link, that service also processes information under its own policies. Opening an external video is optional; the player is loaded only when you choose to view it. We do not control the independent services you visit.

Who may receive booking information

Authorised M Travel staff use booking information to deliver and support your journey. Where needed, we share relevant details with the hotels, guides, drivers, transport providers, activity operators or other suppliers involved in the agreed service. For example, a driver may need your pickup location and contact number, while a hotel may need the guest names and room arrangements.

Hosting, email and payment providers may process information to operate these services. A journey across East Africa or the use of an international provider can involve processing outside your home country, including in Burundi and the destinations in your itinerary. Where a particular legal safeguard or permission is required, the relevant arrangements must be in place. Contact us for information about the suppliers involved in your booking. We may disclose records where legally required or necessary to address a dispute.

Website storage and activity measurement

Account sign-in and security functions use essential session or authentication storage. If you select a website language, a preference may be remembered. Optional first-party activity measurement records totals such as package views, enquiries, WhatsApp or email clicks and payment-link clicks. These totals do not contain the contents of your enquiry or card details.

When this measurement is enabled, the browser may temporarily remember a broad source category, such as search, social media or direct, for the current session. The website does not use that feature to build an advertising profile. Short-lived, one-way network hashes help limit spam and duplicate events. Hosting and security systems may keep technical logs, including IP addresses and browser details, for troubleshooting and protection. A payment-link click is not treated as a verified payment.

How long records are kept

We keep enquiry and booking records for as long as needed to respond, arrange and support the requested service, settle payment or refund questions, meet applicable record-keeping duties and handle a dispute. The period depends on whether an enquiry becomes a booking, the relevant accounting obligations and whether an issue remains unresolved. We do not promise immediate deletion where a record must be retained for one of these reasons.

Private payment-summary links expire after seven days. Their expiry removes access through that link; it does not delete the underlying booking. Temporary anti-spam and activity-deduplication records expire separately. You may ask us to explain the retention criteria for your particular information.

Your choices and requests

Contact us to request access to your information, correct an error, ask for deletion or restriction, or raise an objection. Depending on the law that applies, you may also have a right to portability, to withdraw consent or to complain to the relevant supervisory authority. We may need enough information to verify your identity before releasing or changing private booking details.

Providing the contact and travel details marked as required allows us to respond and arrange your requested service. If you do not provide them, we may be unable to process the form or booking. Optional information can be left blank. Our price calculator applies the published package rules; it does not make an automated assessment of your personal eligibility for travel.

Security and changes to this notice

Access to private bookings is restricted. Client-area access is granted to a verified account for the specific bookings shared by our team. No online service can promise absolute security; please protect your account and keep private payment links to yourself.

We may update this notice as our services or practices change. The version presented when you submit a booking is recorded with the booking, together with your consent time. Material changes affecting an existing arrangement will be communicated where required.