1. Who we are
Destiny Travel & Tours (Pvt) Ltd (“Destiny”, “we”, “us”) is a travel agency based at 42 Palmer Road, Milton Park, Harare, Zimbabwe. We arrange tours, accommodation, car hire, flights and visa assistance.
This policy applies to our website destinytravelzim.com, the Destiny Travel & Tours mobile app for Android and iPhone, and the services we provide through them. We are responsible for your personal information as described here, in line with Zimbabwe’s Cyber and Data Protection Act [Chapter 12:07].
2. Information we collect
Information you give us
- Account details: your name, email address and password when you create an account. If you sign in with Google or Apple, we receive your name and email address (or Apple’s private relay email) from that provider. We never see your Google or Apple password.
- Profile details: your mobile/WhatsApp number, a profile photo and, if you choose to add it, a photo of your passport’s data page so we can book flights and apply for visas on your behalf.
- Bookings: the tour, stay or vehicle you book, travel dates, room type, number of travellers and any special requests.
- Flight requests: origin, destination, stopovers, travel dates, number of travellers and extras such as accommodation or airport transfers.
- Enquiries: the details you send through our website forms, by email or on WhatsApp, such as your name, email, phone number, preferred dates and message.
Information created when you use our services
- Payment records: the amount, currency, payment method type (for example EcoCash or card), our booking reference and the payment provider’s reference and status. See Payments.
- Travel documents: e-tickets, hotel vouchers, visas and itineraries our team issues to you.
- Technical information: basic information our servers and service providers record when you connect, such as your IP address, device and app version, and error logs, used to keep the service secure and working.
3. How we use your information
| Purpose | Why we’re allowed to |
|---|---|
| Creating and managing your account and signing you in | To provide the service you asked for |
| Making, confirming and managing your bookings, flights, accommodation and visas | To perform our contract with you |
| Taking payment and confirming your booking once payment clears | To perform our contract with you |
| Sending booking confirmations, receipts, travel documents and trip updates by email, phone or WhatsApp | To perform our contract with you |
| Answering your enquiries and providing customer support | Your request and our legitimate interest in helping you |
| Keeping accounting, tax and payment records | Legal obligation |
| Preventing fraud, securing our systems and fixing problems | Our legitimate interest in running a safe service |
| Telling you about offers and new trips | Your consent, which you can withdraw at any time |
4. Payments
Online payments are processed by our payment partner ToomaPay, which supports EcoCash, Visa and ZimSwitch. When you pay, you enter your card or mobile money details on ToomaPay’s secure payment page, not in our app or website.
- We never receive or store your full card number, card security code or mobile money PIN.
- We share with ToomaPay only what is needed to take the payment: the amount, a description of the booking, and your name, email and phone number (your phone number is used for EcoCash payment prompts).
- ToomaPay tells us whether the payment succeeded, the payment method type and its reference, so we can confirm your booking.
ToomaPay handles your payment information under its own privacy policy and security obligations.
6. International transfers
Some of our service providers, including Google Firebase, store data on servers outside Zimbabwe, and international bookings require sending traveller details to suppliers in the destination country. When we transfer personal information abroad, we use reputable providers with appropriate security and only send what each booking needs.
7. How long we keep your information
- Account and profile: until you delete your account or ask us to delete it.
- Passport images and travel documents: until you delete your account, or earlier if you ask us to remove them.
- Unpaid bookings, flight requests and enquiries: as long as needed to handle them, and deleted with your account.
- Paid bookings and payment records: for as long as Zimbabwean tax and accounting laws require. If you delete your account, these records are kept in anonymised form, without your name or contact details.
8. How we protect your information
- All connections to our website, app and servers are encrypted with HTTPS.
- Passwords are managed by Google Firebase Authentication; we never store them in plain text.
- Payment confirmations from ToomaPay are digitally signed and verified before a booking is marked as paid.
- Access to customer information is limited to Destiny staff who need it to serve you.
No system is perfectly secure. If a breach affects your personal information, we will notify you and the relevant authority as the law requires.
9. Your rights and choices
Subject to the law, you can:
- Access the personal information we hold about you.
- Correct it. You can update your name, phone number and photos in the app under Account → Personal details.
- Delete your account and personal information (see below).
- Object to or restrict certain uses, and withdraw consent to marketing at any time.
- Complain to the Data Protection Authority in Zimbabwe (POTRAZ) if you believe we have mishandled your information.
To make a request, contact us using the details in Contact us. We may need to verify your identity before acting on a request.
10. Deleting your account
You can delete your account at any time in the mobile app: open Account, scroll down and tap Delete account. For security you may be asked to sign in again first.
Deleting your account permanently removes your login, profile, photos, passport image, travel documents, unpaid bookings and flight requests. Paid bookings are kept only in anonymised form for our financial records, as explained in How long we keep your information.
You can also ask us to delete your account by emailing info@destinytravelzim.com from the email address on your account.
11. Children
Our app and online booking are intended for people aged 18 and over. Parents and guardians may give us information about children travelling with them, such as names, ages and passport details, so we can book their travel. We use it only for that purpose.
12. Information stored on your device
Our app stores your wishlist of saved tours, stays and cars on your device only, along with cached images so the app loads faster. This information does not leave your device and is removed if you uninstall the app. Our website does not use advertising or tracking cookies.
13. Changes to this policy
We may update this policy as our services change. We will post the new version on this page with a new “Last updated” date, and tell you in the app or by email about significant changes.
14. Contact us
For questions about this policy or your personal information:
Destiny Travel & Tours (Pvt) Ltd
42 Palmer Road, Milton Park, Harare, Zimbabwe
Email: info@destinytravelzim.com
WhatsApp: +263 77 977 0430