Privacy Policy

Who We Are & Our Commitment

Visit Benin Republic (“we”, “us”, “our”) operates the website visitbeninrepublic.com as the official tourism and investment platform for Benin Republic, West Africa. We are committed to protecting your personal data and respecting your privacy rights.

This Privacy Statement explains how we collect, use, store, share, and protect your personal information when you use our website, make bookings, sign up for our newsletter, or communicate with our team. It also explains the rights you have over your data.

For EU and Finnish users: This Privacy Statement has been prepared to comply with the General Data Protection Regulation (GDPR) (EU) 2016/679 and applicable national data protection laws. Visit Benin Republic acts as the Data Controller for personal data processed in connection with this website.

For purposes of GDPR, our Data Protection contact is: [email protected]

Personal Data We Collect

We collect personal data in the following ways:

Data You Provide Directly

DATA CATEGORYEXAMPLESWHEN COLLECTED
Identity DataFull name, date of birth, nationality, passport numberTour/package bookings; visa enquiries
Contact DataEmail address, phone number, postal addressBookings, contact forms, newsletter signup
Travel DataFlight details, arrival dates, accommodation preferences, dietary requirements, accessibility needsTour bookings; trip planning
Financial DataCard type, last 4 digits, billing address (full card data processed by payment partner only)Payment for bookings
Communications DataContent of emails, chat messages, review submissions, support requestsAny correspondence with us
Marketing PreferencesNewsletter subscription status, communication preferencesSignup forms; account settings
Partnership DataBusiness name, property details, pricing, bank details (for partners)Partnership onboarding
Job Application DataCV, cover letter, work history, qualificationsCareer applications

Data Collected Automatically

When you visit the Site, we automatically collect certain technical data:

  • Device data: IP address, browser type and version, device type, operating system;
  • Usage data: Pages visited, time spent, links clicked, referral source, search queries within the Site;
  • Cookie data: See our separate Cookie Policy for full details.

Data from Third Parties

We may receive data about you from third parties including our payment processors, analytics providers, social media platforms (where you interact with our content), and partner tour operators where you make a booking through them to travel with us.

How We Use Your Personal Data

We use your personal data only for specified, explicit, and legitimate purposes:

  • To process and fulfil bookings — confirming tours, packages, and accommodation; coordinating with local guides and operators; managing payments and refunds;
  • To communicate with you — sending booking confirmations, pre-departure information, itinerary updates, and post-trip follow-ups;
  • To provide customer support — responding to enquiries, resolving disputes, and providing travel assistance;
  • To send marketing communications — newsletter, destination updates, and special offers (only with your consent, and you may unsubscribe at any time);
  • To improve our services — analysing how the Site is used to improve content, navigation, and user experience;
  • To comply with legal obligations — tax records, anti-money-laundering requirements, and regulatory compliance;
  • To protect our business — detecting fraud, enforcing our Terms of Use, and protecting the safety of our users and staff;
  • For investment and partnership facilitation — managing partner onboarding, investor enquiries, and related correspondence.

    We will not use your data for any purpose incompatible with the purpose for which it was originally collected without your explicit consent.
Legal Basis for Processing (GDPR)

Under the GDPR, we must have a lawful basis for processing your personal data. We rely on the following bases:

PROCESSING ACTIVITYLEGAL BASIS
Processing tour and package bookingsPERFORMANCE OF CONTRACT
Taking payment and issuing refundsPERFORMANCE OF CONTRACT
Sending booking confirmation and pre-travel infoPERFORMANCE OF CONTRACT
Sending marketing newsletters and promotionsCONSENT
Setting non-essential cookies (analytics, marketing)CONSENT
Analysing Site usage for improvementLEGITIMATE INTERESTS
Fraud prevention and securityLEGITIMATE INTERESTS
Retaining financial recordsLEGAL OBLIGATION
Responding to regulatory requestsLEGAL OBLIGATION

Where we rely on consent, you have the right to withdraw consent at any time without affecting the lawfulness of processing before withdrawal. Where we rely on legitimate interests, you have the right to object — see Section 7.

How We Share Your Data

We do not sell your personal data to third parties. We share your data only in the following circumstances:

Service Providers

We share data with trusted third-party service providers who assist in operating our business, including:

  • Payment processors (e.g. Stripe, PayPal) — to process your payments securely;
  • Local tour operators and guides — to coordinate your tour or package;
  • Accommodation providers — where accommodation is included in a booked package;
  • Transport providers — for airport transfers, car hire, and ground transport;
  • Email and CRM platforms — to send communications and manage customer relationships;
  • Analytics providers (e.g. Google Analytics) — to analyse website usage (pseudonymous data only);
  • IT and hosting providers — for website operation and data storage.

All third-party service providers are bound by data processing agreements and are required to process data only on our documented instructions.

Legal Requirements

We may disclose your data to competent authorities (including law enforcement and tax authorities) where we are legally required to do so, or to protect the rights, property, or safety of Visit Benin Republic, our customers, or others.

Business Transfers

If Visit Benin Republic is involved in a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you by email and/or a prominent notice on the Site before your data is transferred.

No Sale of Data: We will never sell, rent, or trade your personal data to third-party marketers. Your data is used exclusively to provide and improve the services you have requested from us.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting obligations. Our standard retention periods are:

DATA TYPERETENTION PERIODREASON
Booking & transaction records7 yearsLegal / tax obligation
Customer account data3 years after last activityContractual / legitimate interests
Marketing consent recordsUntil withdrawn + 3 yearsGDPR accountability requirement
Customer support communications3 years from resolutionLegitimate interests / dispute resolution
Job application data6 months (unsuccessful), 5 years (hired)HR/legal compliance
Website analytics data26 months (aggregated only after 14 months)Service improvement
Financial / fraud prevention recordsUp to 10 yearsLegal obligation

When data is no longer required, it is securely deleted or anonymised.

Your Rights Under GDPR

If you are located in the European Union (including Finland) or the UK, you have the following rights over your personal data:

YOUR RIGHTWHAT IT MEANS
Right of AccessYou can request a copy of all personal data we hold about you (Subject Access Request).
Right to RectificationYou can ask us to correct inaccurate or incomplete personal data.
Right to ErasureYou can ask us to delete your personal data (“Right to be Forgotten”) where there is no compelling reason for its continued processing.
Right to RestrictionYou can ask us to restrict processing of your data in certain circumstances — for example while accuracy is disputed.
Right to Data PortabilityYou can request your data in a structured, machine-readable format and transfer it to another controller.
Right to ObjectYou can object to processing based on legitimate interests or for direct marketing purposes at any time.
Right to Withdraw ConsentWhere processing is based on consent, you can withdraw it at any time without affecting previous lawful processing.
Rights re Automated DecisionsYou have the right not to be subject to solely automated decisions that have legal or significant effects on you.

To exercise any of these rights, email [email protected] with the subject line “Data Rights Request”. We will respond within 30 days. We may ask you to verify your identity before actioning your request.

Right to Lodge a Complaint

If you are unhappy with how we have handled your data, you have the right to lodge a complaint with your national data protection authority. For Finnish users, this is the Tietosuojavaltuutetun toimisto (Data Protection Ombudsman) at tietosuoja.fi. For other EU users, contact your national supervisory authority.

International Data Transfers

As a platform operating between Europe and West Africa, some of your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). These include:

  • Benin Republic — where our operational team and local tour partners are based. Benin Republic is not currently the subject of an EU adequacy decision;
  • United States — where some of our cloud services and SaaS providers are hosted.

Where data is transferred outside the EEA, we ensure appropriate safeguards are in place:

  • Standard Contractual Clauses (SCCs) approved by the European Commission;
  • Data processing agreements with all third-party processors;
  • Transfer Impact Assessments where required by GDPR guidance.

You may request a copy of the specific safeguards in place for any transfer by contacting [email protected].

Booking Data Transfer: When you book a tour or package with us, it is necessary to transfer certain data (your name, contact details, dietary/accessibility requirements) to our local guides and operators in Benin Republic in order to fulfil your booking. This transfer is necessary for the performance of your contract with us.

Data Security

We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, loss, alteration, or disclosure. Our security measures include:

  • TLS/SSL encryption for all data transmitted via the website;
  • Encrypted storage for sensitive personal and financial data;
  • Payment data handled exclusively by PCI-DSS compliant payment processors — we never store full card numbers on our systems;
  • Access controls limiting staff access to personal data on a need-to-know basis;
  • Regular security assessments and staff training on data protection;
  • Secure deletion procedures for data no longer required.

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and affected individuals without undue delay, as required by GDPR Article 33 and 34.

Despite our best efforts, no security measure is 100% infallible. If you suspect your account has been compromised, contact us immediately at [email protected].

Children’s Privacy

Our website is not directed at children under the age of 16 (or the applicable age in your country for consent to data processing). We do not knowingly collect personal data from children without verified parental or guardian consent.

If you are a parent or guardian and believe your child has provided us with personal data without your consent, please contact us at [email protected] and we will delete the information promptly.

Children included in family tour bookings may have their data collected as part of the booking process. This data is collected from the booking adult, used solely for the purpose of fulfilling the booking, and retained only for the period required by law.

Data Protection Contact & Updates

If you have any questions, concerns, or requests relating to this Privacy Statement or to your personal data, please contact our privacy team:

Visit Benin Republic — Privacy Team
Email: [email protected]
Subject line: “Privacy Enquiry” or “Data Rights Request”
Response time: Within 30 days

General Contact: [email protected]

Changes to This Statement

We may update this Privacy Statement from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will update the “Last Updated” date at the top of this page and, where appropriate, notify you by email. We encourage you to review this Statement periodically.

Proceed Booking