Privacy Policy

Who we are

Visit Dzaleka is the official booking and information portal for guided visits to Dzaleka Refugee Camp. The data controller is Dzaleka Connect. You can reach us at contact@mail.dzaleka.com with any question about this policy or about information we hold.

Information we collect

We collect only what we need to arrange and support a visit:

• Account details — your name, email address and password (stored only as a cryptographic hash, never in readable form).
• Booking details — the date and time you request, group size, tour type, meeting point, languages you prefer, and any accessibility needs or notes you choose to share so your guide can prepare.
• Contact details — a phone number or messaging handle where we can reach you about your visit, including on the day.
• Payment status — whether a booking has been paid, and by which method (cash, Airtel Money or TNM Mpamba). We do not collect or store card numbers, mobile money PINs or bank credentials.
• Technical data — pages viewed, approximate region, browser type and referring site, used to understand which information visitors need and to keep the service secure.

How we use it

We use your information to confirm and run your booking, to assign and brief a guide, to send you booking confirmations and reminders, to answer your questions, to process and reconcile payment, and to keep aggregate statistics about how many people visit and what that means for community income. We also use it to detect and prevent fraud and abuse of the platform.

We do not sell personal information. We do not share it with advertisers. We do not use it to build advertising profiles.

Who we share it with

Your name, group size and visit time are shared with the guide assigned to you, so they can meet you. Where camp access requires it, visitor names may be shared with camp authorities or UNHCR implementing partners for entry clearance. We use service providers to run the platform — hosting, our database and transactional email — and they process data on our instructions only. We disclose information to authorities only where the law requires it.

Photography and community consent

Dzaleka is a place where tens of thousands of people live. Photographing residents requires their explicit consent, and your guide will tell you where photography is not appropriate. If you send us photographs, we will not publish any image that identifies a resident without that person's recorded permission. If you appear in a photograph on this site and want it removed, email us and we will take it down.

How long we keep it

Booking records are kept for up to seven years, which is what we need for financial and reporting obligations. Account data is kept while your account is open. Analytics data is aggregated and stops being personally identifying within 14 months. If you close your account, we delete or anonymise your personal data except where we must retain a record.

Your rights

You can ask us for a copy of the information we hold about you, ask us to correct it, ask us to delete it, or object to a particular use. Email contact@mail.dzaleka.com and we will respond within 30 days. You can unsubscribe from any non-essential email using the link in the message; we will still send operational messages about a booking you have made.

Security

The site is served over HTTPS. Passwords are hashed with bcrypt. Access to booking data is restricted by role, and administrative actions are recorded in an audit log. No system is perfectly secure, and we will tell affected people promptly if a breach puts their data at risk.

Cookies

We use a small number of cookies, mainly to keep you signed in and to measure usage. The Cookie Notice explains each one and how to control them.

Children

This platform is not intended for children under 16. Where a young person is part of a visiting group, we ask that a responsible adult makes the booking and provides the contact details.

Changes and contact

If we change this policy materially we will note it here and, where the change affects an active booking, email you. Questions, requests and complaints go to contact@mail.dzaleka.com, or via the contact page.