Privacy & Community Trust
How we protect your privacy while building authentic travel communities. Effective from 1st January 2024.
Our Commitment to Transparency
At Zula, we believe that building trust with our community requires complete transparency about how we handle your personal information. This policy explains our practices in plain language because you deserve to understand exactly how your data supports our mission of connecting quality-conscious travelers with exceptional experiences.
About Zula & Our Community Partnership Model
Zula operates as a discovery platform that connects travelers who appreciate authentic quality with businesses that demonstrate genuine craftsmanship and cultural character. When you visit our website, download our mobile application, communicate with our team, or use the Zula platform as either a traveler or business partner, the data controller is Zula Vibe Ltd, registered in Uganda.
Our partner businesses who showcase their experiences through our platform may also act as data controllers for customer information. We encourage you to contact them directly to understand their specific data management practices, as we believe transparency should extend throughout our entire community ecosystem.
Information We Gather to Serve Our Community
For Website Visitors & Curious Travelers
We collect information when you explore our content or reach out to learn more about authentic travel experiences.
- Your browsing journey: How you discovered our platform, which destinations capture your interest, time spent exploring cultural content, and engagement with our educational materials. We use cookies and similar technologies to understand what types of authentic experiences resonate with different travelers.
- Communication preferences: When you contact our team through phone, email, inquiry forms, or chat, we record these interactions along with your location, language preferences, contact details, and the nature of your travel interests or questions.
- Community research: Information about exceptional businesses and cultural experiences that we research through public sources and trusted industry connections to enhance our curation capabilities.
- Content preferences: Your choices regarding newsletters, cultural insights, destination guides, and the types of authentic experiences that align with your travel values.
For Our Business Community Partners
We gather information necessary to build meaningful partnerships with businesses that demonstrate authentic quality and cultural character. This may include details about your team members, ownership structure, or stakeholders.
- Partnership identification: Names, email addresses, contact numbers, birthdates, government identification (such as passport or driver's license), and secure account credentials for platform access.
- Financial partnership details: Bank account information, routing codes, tax identification numbers, account holder details, and addresses necessary for transparent revenue sharing.
- Experience transaction records: Details of bookings, guest interactions, service descriptions, pricing information, billing addresses, and location data from completed cultural experiences and authentic encounters.
- Platform engagement data: Device types, operating systems, access patterns, network information, login records, IP addresses, and location data that help us optimize your partnership experience.
- Quality verification information: Details from identity verification services, financial institutions, social media presence, and public sources that help us confirm your business's authenticity and community standing.
- Communication preferences: Your choices about receiving partnership updates, community insights, marketing resources, and the types of collaborative opportunities that interest you.
For Travelers Booking Authentic Experiences
We collect information when you create an account, book cultural experiences, or engage with our community of quality-conscious travelers.
- Travel profile information: Your name, home address, email address, and where required by law or financial institutions, government identification for secure booking processes.
- Secure payment details: Payment card information for booking authentic experiences (we never store complete card numbers or security codes, prioritizing your financial privacy).
- Banking information: When necessary, bank account details, routing codes, account holder information, tax identification, and other financial data you provide or consent for us to access directly.
- Experience booking records: Details of your cultural bookings, business partners you've engaged with, experience descriptions, payment amounts, billing addresses, devices used, and locations where you've discovered authentic quality.
- Platform interaction data: Device information, operating system details, platform identifiers, network data, access records, IP address, and derived location information that enhance your discovery experience.
- Trust and safety verification: When our banking partners or fraud detection systems identify potentially suspicious activity, we use identity verification services and public data to protect both you and our business community.
- Community engagement preferences: Your choices about receiving travel insights, cultural education content, destination recommendations, and community updates that align with your authentic travel interests.
How We Use Your Information to Build Community
Delivering Exceptional Discovery Experiences
We use your information to provide the curated discovery services that help you find authentic quality and genuine cultural character.
- Connecting community members: We use identification, contact, and financial information to facilitate meaningful connections between quality-conscious travelers and exceptional business partners.
- Personalized community communication: We use your data to send booking confirmations, share relevant cultural insights, customize recommendations based on your authentic travel preferences, and provide responsive community support.
- Protecting community trust: We verify partner business authenticity, evaluate experience quality, assess booking legitimacy, and prevent fraudulent activity that could harm our community's trust in authentic discovery.
Supporting Our Community Partnership Mission
We use personal information to advance our legitimate mission of connecting travelers with authentic quality while protecting everyone's privacy through careful data minimization, access controls, and where possible, data aggregation and anonymization.
- Enhancing discovery capabilities: We analyze community data to:
- Develop better systems for identifying authentic quality and cultural character
- Improve how quickly we can process bookings for exceptional experiences
- Understand how travelers engage with cultural content to create more meaningful educational resources
- Sharing cultural appreciation: We use community insights to share authentic travel opportunities, recommend experiences that align with your values, communicate cultural education and travel insights, and participate in events that celebrate quality craftsmanship.
- Protecting community interests: When necessary to safeguard our community's trust and legal rights, we use personal data for legal compliance, regulatory requirements, audit processes, and in connection with business partnerships that strengthen our cultural discovery mission.
Meeting Legal Obligations & Community Safety
We use personal information to comply with legal requirements and protect our community during exceptional circumstances.
- Community trust verification: We conduct thorough verification of business partners and, when necessary, travelers to prevent money laundering and protect against illegal activities. This includes verifying identities, screening for sanctions and criminal activity, and monitoring for suspicious behavior that could harm our community.
- Legal compliance requirements: In exceptional circumstances, we may be legally required to provide personal data to tax authorities, law enforcement, courts, or other parties in connection with legal claims, investigations, or litigation that affects community safety.
How We Share Information Within Our Community
Our sharing philosophy: We only share personal information when it directly serves your travel experience or protects our community. We never sell personal data for profit or share it for purposes unrelated to authentic travel discovery.
- Facilitating authentic experiences: We share necessary personal data with financial institutions, business partners, and travelers involved in bookings to deliver the cultural experiences you've requested.
- Partner platform integration: When you book through integrated partner applications or create accounts through our collaborative partners, we share relevant information to provide seamless, authentic discovery experiences.
- Global community operations: We share data among Zula Vibe companies in countries where we facilitate authentic travel experiences, governed by this privacy approach and used exclusively for providing and promoting quality-focused travel discovery.
- Business partnership changes: If ownership or control of our community platform changes, we may transfer personal data to new partners. Any new owners must comply with legal requirements and, if they plan different data uses, will ensure these remain lawful and community-focused.
- Trusted service providers: We work with carefully selected service providers who access personal data only when providing essential services like technology infrastructure, cultural content development, marketing analytics, and community research tools. We impose strict requirements on how these providers store, use, and protect community data.
- Community safety situations: In exceptional circumstances, we share personal data with government agencies and other parties when we believe it's reasonably necessary to comply with legal requirements, enforce community agreements, protect platform security, safeguard our travelers and business partners from harm, or respond to emergency situations.
International Community & Data Protection
Zula operates from our headquarters in Uganda, serving a global community of travelers and business partners. Personal data may be stored and accessed by service providers in various countries, including the European Union. When we work with providers in countries that don't provide EU-level data protection standards, we implement legal mechanisms that require them to protect data to EU standards, such as Privacy Shield agreements, binding corporate rules, or standard contractual data protection clauses.
Our authentic travel discovery services connect communities worldwide. When you book experiences with business partners in other countries, personal data will be transferred as necessary to complete these cultural exchanges and facilitate meaningful travel connections.
Your Rights & Choices in Our Community
Community empowerment: We believe you should have control over your personal information and clear choices about how it's used to enhance your authentic travel experiences.
Most data we collect supports essential platform operations, community safety, and legal compliance requirements. Throughout our platform, we clearly indicate where you can make choices or provide consent. When you grant consent, you can withdraw it anytime to stop further processing. You can also opt out of marketing communications, request to stop profiling for direct marketing, or adjust cookie preferences.
Your Data Protection Rights Include:
- Access: Request a copy of your personal data in our community platform
- Correction: Update or correct inaccurate personal information
- Deletion: Request removal of your personal data (subject to legal requirements)
- Restriction: Limit how we process your information
- Portability: Obtain your data in a format you can share with other platforms
- Objection: Object to certain types of data processing
These rights may be limited when we have legal requirements to process your data for community safety or regulatory compliance. To exercise your data protection rights, please contact our community team at: info@zulavibe.com
If you have unresolved concerns about how we handle your personal information, you have the right to file a complaint with an EU data protection authority in your country of residence or work, or where you believe a privacy breach has occurred.
How Long We Keep Your Information
Zula retains personal data only as long as necessary to provide authentic travel discovery services to our community. We also keep information for legitimate business purposes including legal compliance, dispute resolution, fraud prevention, and enforcing community agreements. Retention periods vary based on data types and purposes, considering factors such as:
- Community service requirements: How long we need personal data to develop and maintain discovery services, secure community platforms, process experience bookings, prevent fraudulent activity, and maintain appropriate business records.
- Your community choices: When you request data deletion or withdraw consent, we process data only briefly to implement your request, while keeping records of your choices to respect them in the future.
- Legal and community obligations: We retain data when required by law, regulation, or contractual obligations. For example, we maintain booking records and verification information for periods required by payment systems and may preserve data relevant to legal investigations or community protection litigation.
Updates to Our Community Privacy Approach
We may update this privacy policy as our community grows and evolves. When we make significant changes that affect how we handle your personal information, we'll notify you through email or prominent notices on our platform. We believe transparency about privacy changes is essential for maintaining community trust.
Questions About Privacy?
Our community team is here to help you understand how we protect your privacy while facilitating authentic travel discoveries.
Contact us: info@zulavibe.com