Travel sites often ask for names, email addresses and payment details, so it helps to know how that data is generally treated. This page is a neutral explainer based on the type of policy that was posted on the archived Book Africa Travel site. It does not describe data practices on this website, which does not run accounts, forms or payments.
Websites usually collect personal details only when a visitor chooses to provide them, for example by registering, placing an order, filling in a form, replying to a survey or joining a newsletter. Typical fields are name, email, mailing address, phone number and payment information. A visitor can usually decline, though some features may then be unavailable.
Sites also gather technical data about how people use them: browser type, device, operating system, the internet provider and similar aggregate details. This information does not identify a person on its own.
Cookies are small files that a browser stores to remember settings or measure usage. Browsers let you refuse cookies or warn you when one is sent, though some parts of a site may stop working. Common categories are:
Operators typically cite a few purposes: answering support requests, personalising the experience, improving the site, processing transactions and sending occasional emails, which usually include a way to unsubscribe.
A reasonable site uses secure practices for storing and processing data. Sensitive exchanges should travel over an encrypted (SSL/TLS) connection; look for the padlock symbol before entering card details.
Pages may link to partners and advertisers whose practices the site does not control. Ad networks, including large search-company ad services, may use cookies to recognise a browser and show ads based on earlier visits. Most networks give users the option to opt out through their own settings.
Operators may update their policy and normally ask visitors to check back. Using the site is generally treated as acceptance. If you disagree, the usual advice is to stop using the site.
For related reading, see the terms overview.
Depending on where you live, privacy laws can give you rights over your data. In the European Union, the General Data Protection Regulation allows people to ask for access to their data, ask for corrections, request deletion in certain cases and object to some kinds of processing. Some US states, such as California, offer comparable rights to know what is collected and to opt out of its sale or sharing. A site that serves visitors from these places should explain how to exercise these rights.
Good policies state how long data is kept and with whom it may be shared, for example payment processors, email services and the tour providers who need your name to deliver a booking. Be wary of policies that say data may be shared with unnamed “partners” without limits.
Most travel sites are intended for adults and say they do not knowingly collect data from young children. Parents who book family trips should provide children’s details only where required.
Strictly necessary cookies are needed for a site to work. Other categories, such as advertising cookies, should in many regions be optional and switchable. A statement that merely says that using the site equals accepting all cookies is weaker than a proper choice screen.
