Last Updated: 17 July 2026

This Privacy Policy explains how My Markets Holdings Ltd. ("ATH", "we", "us", or "our") collects, uses, shares, and protects your personal data when you use the Africa Travel Hub mobile application and website ("Service").

If you do not agree with this Privacy Policy, please do not use the Service.

1. Who We Are

Data Controller
My Markets Holdings Ltd.
Global Business Company registered in Mauritius.

Service
Africa Travel Hub is a B2B travel management platform connecting hotels, fleet operators, tour operators, DMCs, travel agents, and guides across Africa.

Support
support@africatravelhub.com

2. Who This Policy Applies To

This Service is intended for business users and organizations.

It is not intended for children under the age of 16, and we do not knowingly collect personal information from children.

3. Information We Collect

Information You Provide

Account Information

• Email address

• Password (stored as a secure hash)

• First name

• Last name

• Phone number

• Job title

• Profile picture

• Organization name

• Organization role

• Website

• Business address

• Language preferences

• Time zone

Verification Information

• Email verification status

• Verification codes

• Phone verification status

• SMS verification

• Business registration documents (where required)

• Identity documents (where required)

Booking Information

• Guest name

• Guest email

• Guest phone number

• Country of origin

• Check-in date

• Check-out date

• Adults

• Children

• Infants

• Special requests

• Internal notes

• Booking prices

• Payment status

Payment Information

We never store full card numbers.

We receive from Stripe:

• Payment tokens

• Card brand

• Last four digits

• Expiry month and year

• Billing history

• Refund history

Communications

• Messages

• Support requests

• Feedback

Information Collected Automatically

• Device model

• Operating system

• App version

• Language

• Time zone

• IP address

• Approximate region

• Firebase Cloud Messaging token

• Login history

• Authentication logs

• Server logs

Device Permissions

The app may request the following permissions:

Permission

Purpose

Location

Show nearby properties, guides and vehicles

Camera

Scan payment cards

Microphone

Voice-to-text

Speech Recognition

Convert speech into text

Notifications

Booking and payment alerts

Storage

Save invoices and downloaded files

Voice-to-text is processed locally on your device and is not uploaded to our servers.

We Do Not Collect

We do not use:

• Advertising SDKs

• Google Analytics

• Firebase Analytics

• Crashlytics

• Sentry

• Mixpanel

• AppsFlyer

• Meta Pixel

We do not buy or sell personal data.

4. How We Use Your Information

We use your information to:

• Provide the Service

• Manage bookings

• Process payments

• Verify your account

• Protect your account

• Send booking confirmations

• Send password reset emails

• Send security alerts

• Deliver push notifications

• Provide customer support

• Meet legal obligations

• Improve the Service

We do not use automated decision-making that has legal or significant effects on users.

5. Legal Basis for Processing (EEA & UK)

Where GDPR applies, we process your data based on:

• Performance of a contract

• Legitimate interests

• Legal obligations

• Your consent

You may withdraw consent at any time.

6. Sharing Your Information

We only share data where necessary.

Service Providers

• Stripe (Payments)

• Twilio (SMS verification)

• SendGrid (Emails)

• Cloudinary (Images)

• Firebase Cloud Messaging (Notifications)

• OpenStreetMap / Nominatim (Maps)

• Supabase (Database)

• Hosting Provider

These providers process data only on our instructions.

Other Organizations

When you collaborate with another organization through Africa Travel Hub, relevant booking and contact information is shared as necessary.

Legal Requirements

We may disclose information if required by law or to protect our users and services.

Business Transfers

If Africa Travel Hub is acquired or merged, your information may be transferred as part of that transaction.

7. International Data Transfers

Your information may be processed in:

• Mauritius

• European Union

• United States

Where required, we use:

• Standard Contractual Clauses (SCCs)

• Appropriate contractual safeguards

• Encryption during transfer and storage

8. Data Retention

We retain data only as long as necessary.

• Account data: While your account is active

• Booking and payment records: Minimum 7 years

• Backups: 30 days

• Server logs: Up to 90 days

• Account deletion requests: Deleted after a 30-day grace period unless required by law

9. Your Rights

Depending on your location, you may request:

• Access

• Correction

• Deletion

• Restriction

• Data portability

• Objection

• Withdrawal of consent

You may also lodge a complaint with your local data protection authority.

Requests can be sent to:

support@africatravelhub.com

We respond within 30 days.

10. Security

We protect your information using:

• HTTPS / TLS encryption

• Secure password hashing

• Hashed OTP codes

• Token-based authentication

• Secure mobile storage

• Stripe payment tokenization

• Role-based access controls

• Encrypted backups

If you believe your account has been compromised, contact:

support@africatravelhub.com

11. Push Notifications, Email and SMS

We use:

• Firebase Cloud Messaging for push notifications

• SendGrid for transactional emails

• Twilio for SMS verification

We do not currently send marketing emails or SMS messages.

12. Cookies

The web version uses only essential browser storage for:

• Authentication

• Language preferences

• Theme preferences

We do not use advertising or tracking cookies.

13. Region-Specific Information

European Union & United Kingdom

Your GDPR rights are described in Sections 5, 7 and 9.

California (CCPA / CPRA)

California residents may request access, correction and deletion of their information.

Africa Travel Hub does not sell personal information.

Mauritius

We comply with the Mauritius Data Protection Act 2017.

Other African Countries

Where applicable, we also comply with local privacy laws including:

• South Africa POPIA

• Kenya Data Protection Act

• Nigeria NDPA

• Ghana Data Protection Act

14. Third-Party Websites

Our Service may contain links to third-party websites.

Their privacy practices are governed by their own privacy policies.

15. Changes to This Privacy Policy

If we make significant changes, we will:

• Update the "Last Updated" date.

• Notify users by email or within the app at least 14 days before changes become effective.

Continued use of the Service means you accept the updated Privacy Policy.

16. Contact Us

My Markets Holdings Ltd.

Support Email
support@africatravelhub.com