Privacy Policy
Last updated: January 2026
Introduction
DB Destiny is a Finland-registered tour operator and digital travel services company providing curated travel packages, accommodation services, guided tours, transport coordination, and destination experiences across East Africa, including Rwanda, Tanzania, Uganda, and Kenya and Finland as well. Our primary customers are based in Europe and other Western countries, and our services are delivered through an online booking and payment platform, and local tour ground handlers to ensure service efficiency.
DB Destiny is committed to protecting personal data and ensuring full compliance with the European Union General Data Protection Regulation (GDPR), Finnish data protection laws, and applicable international privacy standards. This Privacy Policy explains how we collect, use, store, share, and protect personal data in a transparent and responsible manner.
Purpose of This Policy
This policy aims to:
- Clearly explain what personal data DB Destiny collects and why
- Describe how personal data is used, stored, and protected
- Define circumstances under which data may be shared with third parties
- Inform users of their rights under GDPR and how to exercise them
- Demonstrate DB Destiny's commitment to confidentiality, transparency, and security
Commitment to Privacy and Confidentiality
DB Destiny recognizes that personal data protection is fundamental to customer trust and business integrity. We apply strict organizational, technical, and legal safeguards to ensure confidentiality, data integrity, and availability. Personal data is processed lawfully, fairly, and only for clearly defined purposes.
Scope of the Policy
This policy applies to all individuals, companies, organizations and institutions interacting with DB Destiny through:
Digital Platforms
- Company website and booking platform
- Online payment systems
- Customer communication channels
Services
- Tour package bookings
- Accommodation reservations
- Transportation coordination
- Guided travel experiences
- Customer support services
Business Partners
- Hotels and lodges
- Tour guides and transport providers
- Payment processors
Sources of Data Collection
DB Destiny collects personal data from:
- Customers booking travel services
- Website users
- Business partners and service providers
- Payment processing systems (limited transactional data)
- Customer communications
- Automated website technologies
Types of Personal Data Collected
Personal Identification Information
- Full legal name
- Nationality
- Date of birth
- Passport details (when needed for travel arrangements)
Contact Information
- Email address
- Phone number
- Residential address
Travel & Booking Information
- Selected tour packages
- Accommodation preferences
- Transport requirements
- Special requests (dietary, accessibility, health alerts voluntarily provided)
Financial & Transactional Information
Payment references and billing information. DB Destiny does not store full card numbers or banking credentials. All payments are processed securely by our third-party provider, Stripe.
Methods of Data Collection
Online Booking Forms
Data is collected when customers create accounts, request services, or complete bookings.
Cookies and Tracking Tools
Used to analyze website usage, improve performance, and personalize user experience. Users are informed and consent is obtained.
Direct Communications
Email, phone calls, live chat, feedback forms, and customer support interactions.
Automated Systems
Technical logs, security monitoring, and platform performance data.
Third-Party Partners
Limited necessary data from accommodation providers, transport operators, and payment services.
Purposes for Data Use
DB Destiny uses personal data to:
- Process bookings and payments
- Confirm reservations and travel arrangements
- Communicate trip details and updates
- Provide customer support
- Improve service quality and platform functionality
- Prevent fraud and ensure security
- Meet legal and regulatory obligations
- Conduct internal business analytics
Data Sharing and Disclosure
DB Destiny may share data with our service providers including:
- Hotels and accommodation partners
- Tour guides and transport companies
- Local travel operators
- Payment third party for handling cancellation and refund
Data sharing occurs when:
- Necessary to provide booked services
- Approved by customer consent
- Needed to protect security and prevent fraud
DB Destiny never sells personal data.
International Data Transfers
As services are delivered in Africa, only basic data like contact information may be transferred outside the European Union solely to fulfill travel arrangements. All transfers follow GDPR safeguards including contractual protections and encrypted communications.
Data Security Measures
DB Destiny applies strong security practices including:
- Encrypted data transmission (TLS/SSL)
- Secure servers and firewalls
- Restricted staff access
- Regular security audits
- Secure backups
In case of any data breach posing risk to users, affected parties and authorities will be notified in accordance with GDPR requirements.
Data Retention Period
Personal data is retained only as long as necessary for:
- Contractual service delivery
- Legal and tax obligations
- Dispute resolution
Retention period typically ranges from 3 to 6 years, depending on legal requirements.
Rights of Data Subjects (GDPR)
Users have the right to:
- Access their personal data
- Correct inaccurate information
- Request data deletion
- Restrict processing
- Object to certain processing activities
- Request data portability
- Withdraw consent at any time
Requests can be submitted via email to support@dbdestiny.fi
Policy Updates
DB Destiny regularly reviews this Privacy Policy and may update it to reflect regulatory or operational changes. Updated versions will be published on our platform and communicated to users when required.
Contact Information
DB Destiny
Address: Vuorikummuntie 9C, Finland
Email: support@dbdestiny.fi
Phone: +358 44 929 9854