Effective Date: 08/11/2024

Shumba Shuttle (“we,” “us,” or “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and protect information that identifies or can identify you (“Personal Data”) when you visit our website, https://www.shumbashuttle.com/ (the “Site”), and interact with our services.

1. Information We Collect

We collect and process the following types of Personal Data:

• Contact Information: When you fill out a form on our Site or contact us, we may collect your name, email address, phone number, and any other information you provide.
• Usage Data: We collect information on how you use our Site, including your IP address, browser type, referring pages, and the dates and times of access.
• Cookies and Tracking Technologies: We use cookies and similar tracking technologies to enhance user experience, which is subject to our [Cookie Policy](link to Cookie Policy).

2. How We Use Your Information

We use your Personal Data strictly for our operational purposes and to enhance your experience on our Site. Specifically:

• Service Provision: To manage bookings and provide the services you request.
• Customer Support: To respond to your inquiries and offer support.
• Site Metrics and Improvement: To analyze how our Site is used and improve its functionality, ensuring a better experience for all users. We use tools such as Google Analytics to gather data on website performance and user interactions. However, we do not use your data for targeted advertising, nor will your data be shared with third parties for marketing purposes.

We value your privacy and assure you that your data is used solely for our internal metrics and website improvements. Aside from Google Analytics, we do not disclose your data to any other third parties.

3. Legal Basis for Processing Personal Data

We rely on the following legal bases under GDPR to process your Data:

• Performance of a Contract: Processing is necessary to fulfil our contract with you.
• Consent: For optional activities like sending marketing communications, we will only process your data with your explicit consent.
• Legitimate Interests: We process your data to enhance our services, improve Site security, and analyze user interactions.
• Compliance with Legal Obligations: We process your data as necessary to comply with applicable laws.

4. Disclosure of Your Data

We may share your Data in the following circumstances:

• Service Providers: We engage third-party vendors to help provide our services (e.g., payment processors, and analytics providers). These parties are bound by confidentiality and data protection obligations.
• Legal Requirements: We may disclose your data to comply with legal obligations, respond to lawful requests, or protect our rights.
• Business Transfers: In the event of a merger, sale, or asset transfer, your Personal Data may be transferred to the new owner.

5. International Data Transfers

We are based in Zimbabwe, and your data may be processed outside the European Economic Area (EEA). We ensure that any data transferred outside the EEA is protected by appropriate safeguards, such as Standard Contractual Clauses or by ensuring the recipient is certified under the EU-U.S. Data Privacy Framework.

6. Data Retention

We retain your Data only as long as necessary for the purposes outlined in this Privacy Policy or as required by law. For example, transaction records are retained for tax purposes as required by law.

7. Your Rights under GDPR

Under the GDPR, you have the following rights:

• Access: You can request access to your Personal Data and obtain a copy.
• Correction: You have the right to correct any inaccurate Personal Data.
• Erasure: You can request the deletion of your data when it is no longer necessary for the purposes it was collected.
• Restriction: You can request that we restrict the processing of your data.
• Data Portability: You can request a copy of your data in a structured, machine-readable format.
• Objection: You can object to the processing of your data for direct marketing or other purposes based on your legitimate interests.
• Withdraw Consent: Where processing is based on consent, you can withdraw your consent at any time.

To exercise these rights, please contact us at info@shumbashuttle.com.

8. Security of Your Data

We take security seriously and implement measures designed to protect your Data against unauthorized access, disclosure, alteration, or destruction. However, no online transmission or storage system is completely secure, and we cannot guarantee absolute security.

9. Third-Party Links

Our Site may include links to third-party sites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any third-party sites you visit.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting a notice on our Site or by other appropriate means. Your continued use of our Site after any changes constitutes your acceptance of the updated Privacy Policy.

11. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

Email: info@shumbashuttle.com

Tell: +263 (0) 77 234 1897

Address: 31 Sloane Street, Harare, Zimbabwe