Privacy Policy

At Powil Pearl Tours & Travel, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

1. Information We Collect

1.1 Personal Information

We collect personal information that you voluntarily provide to us when you:

• Fill out contact forms on our website
• Request quotes for our services
• Schedule Nows
• Subscribe to our newsletter
• Contact us via email or phone
• Apply for visa processing services

This information may include:

• Full name
• Email address
• Phone number
• Physical address
• Passport information
• Educational background
• Travel preferences and destinations
• Financial information (for payment processing)
• Any other information you choose to provide

1.2 Automatically Collected Information

When you visit our website, we automatically collect certain information, including:

• IP address and location data
• Browser type and version
• Operating system
• Pages visited and time spent on each page
• Referring website
• Device information

2. How We Use Your Information

We use the collected information for the following purposes:

• Service Provision: To provide visa processing, study abroad placement, and travel planning services
• Communication: To respond to your inquiries and provide customer support
• Application Processing: To process visa applications and university placements
• Marketing: To send promotional materials and service updates (with your consent)
• Website Improvement: To analyze website usage and improve user experience
• Legal Compliance: To comply with legal obligations and regulatory requirements
• Comply with legal processes
• Protect our rights and property
• Ensure user safety
• Investigate fraud or security issues

3. Legal Framework & Basis for Processing

Powil Pearl Tours & Travel operates as a licensed tour and travel operator based in Kampala, Uganda. Our collection and processing of personal data is governed by the following legal frameworks:

3.1 Uganda (Primary Jurisdiction)

Our primary operations are regulated under the Data Protection and Privacy Act, 2019 (Uganda) and the Data Protection and Privacy Regulations, 2021. We are committed to fulfilling all obligations placed on data controllers as defined under this Act, including registration with the Personal Data Protection Office (PDPO) of Uganda where required.

3.2 Kenya

Where we process data relating to individuals in Kenya, we comply with the Kenya Data Protection Act, 2019 and the associated regulations issued by the Office of the Data Protection Commissioner (ODPC).

3.3 Zambia

For data relating to individuals in Zambia, we adhere to the Zambia Data Protection Act, 2021, administered by the Zambia Information and Communications Technology Authority (ZICTA).

3.4 Tanzania & Zanzibar

For data relating to individuals in Tanzania (including Zanzibar), we comply with the Personal Data Protection Act, 2022 (Tanzania).

3.5 Legal Bases for Processing

We process your personal data on the following legal bases:

• Contract Performance: Processing necessary to fulfil service contracts (e.g., visa applications, bookings)
• Legitimate Interests: Processing for fraud prevention, security, and service improvements
• Legal Obligation: Processing required to comply with applicable laws and regulations
• Consent: Processing based on your freely given, specific, and informed consent (e.g., marketing communications)

4. Data Security

We implement appropriate security measures to protect your personal information:

• Encryption: Sensitive data is encrypted during transmission
• Access Controls: Limited access to personal information on a need-to-know basis
• Secure Storage: Information is stored on secure servers
• Regular Updates: Security systems are regularly updated and monitored
• Staff Training: Employees are trained on data protection practices

5. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes
• Enforce our agreements

Generally, we retain information for:

• Active clients: Duration of service relationship plus 7 years
• Marketing data: Until you unsubscribe or withdraw consent
• Website analytics: 24 months

6. Your Rights

Under the Uganda Data Protection and Privacy Act, 2019 and applicable laws in Kenya, Zambia, and Tanzania, you have the following rights regarding your personal information:

• Right to Access (s.28, DPPA 2019): Request a copy of the personal information we hold about you, free of charge within 21 days
• Right to Correction (s.30, DPPA 2019): Request correction or deletion of inaccurate, irrelevant, or outdated information
• Right to Deletion: Request erasure of your personal information where there is no lawful basis for continued retention
• Right to Data Portability: Request your data in a structured, commonly used, machine-readable format
• Right to Object: Object to processing based on legitimate interests or for direct marketing purposes
• Right to Restrict Processing: Request restriction of processing in specific circumstances
• Right to Withdraw Consent (s.17, DPPA 2019): Withdraw your consent at any time without affecting the lawfulness of prior processing
• Right to Not Be Subject to Automated Decisions: Not to be subject to decisions based solely on automated processing that significantly affects you
• Right to Lodge a Complaint: File a complaint with the Personal Data Protection Office (PDPO) of Uganda, the ODPC (Kenya), ZICTA (Zambia), or the relevant authority in Tanzania

To exercise any of these rights, please contact us at powilpearl@gmail.com. We will respond within 21 days as required under the Uganda Data Protection and Privacy Act.

7. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to:

• Remember your preferences
• Analyze website traffic
• Improve user experience
• Provide personalized content

You can control cookies through your browser settings. For more details, see our Cookie Policy.

8. International Data Transfers

As we provide services across Uganda, Kenya, Zambia, and Tanzania (including Zanzibar), your information may be transferred to and processed in these countries. All such transfers are conducted in accordance with:

• The Uganda Data Protection and Privacy Act, 2019 (Part VIII – Cross Border Transfer of Personal Data)
• The Kenya Data Protection Act, 2019
• The Zambia Data Protection Act, 2021
• The Tanzania Personal Data Protection Act, 2022

We only transfer personal data to countries or organisations that provide an adequate level of data protection, or where we have put in place appropriate contractual safeguards to protect your information.

9. Children's Privacy

Our services are not directed to children under 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date
• Sending an email notification for material changes