Privacy policy
Access and health information is the most sensitive thing you will send us. Here is what happens to it.
Privacy policy
What we collect, why, and what we will not do with it.
What you send us. When you write to us: your name, email, phone number if you give one, travel dates, party size, and whatever you choose to tell us about access needs or requirements. Nothing is taken from a form you do not send — what you type is not read as you type it, and an abandoned form leaves nothing behind.
What we count. If you agree when asked, we record which pages you read, in order, how long each was on screen, your device class, the site you arrived from, and the country the connection reports. That is held against a temporary visit number that lives in your browser tab and dies with it. It is first-party only: it does not follow you to any other site, and it is never sold, shared or passed to an advertising network. The cookies page lists every field and lets you change your answer.
Access and health information is special category data. Under GDPR it carries extra protection, and it is the most sensitive thing you will send us. It is used to plan your journey and to brief the properties you will stay at. It is never used in marketing, never put in an email subject line, and never shared with anyone who is not operating part of your trip.
The access profile is not collected at all. The builder on the access page runs entirely in your browser. What you tick there is never sent to us and never counted — that page is excluded from the visit count by design — and it reaches us only if you put it in an enquiry yourself.
Who sees it. Your planner, the guide assigned to you, and the specific properties on your itinerary — each told only what they need to do their part. Enquiries are held in a database that only a signed-in member of Montero staff can read.
What we do not do. We do not sell data, we do not run advertising trackers, we set no cookies, and we do not store your IP address.
Your rights. Access, correction, deletion, portability, the right to object, and the right to withdraw consent at any time without giving a reason. Write to the address on the contact page and we will respond within thirty days.
Retention period for enquiry data — not yet set (subject to confirmation).
Visit records are deleted after 90 days; confirm that this is the period Benny wants (subject to confirmation).
Data controller's registered name and address (subject to confirmation).
Whether a Data Protection Officer is required (subject to confirmation).
Lawful basis recorded for each category of processing — consent for the visit count, legitimate interest or contract for enquiries (subject to confirmation).
The database is hosted outside Tanzania; the region and the transfer basis must be stated here (subject to confirmation).
Not legal advice, and not reviewed by a lawyer. This document is a good-faith draft written for a prototype. A Tanzanian lawyer must review and rewrite it, and the company's registered details must replace the placeholders, before it has any effect. (subject to confirmation)
Tell us what you have in mind.
One conversation with the person who would plan it, and an honest answer about whether we are the right company for the trip.
Free, and with no obligation. A real planner replies within 24 business hours, East Africa Time. No payment is taken to enquire.