Travel means trusting someone with your passport, your money and your movements. Here is exactly what Travolla does with that information — and what we will never do.
Travolla Uganda Ltd. ("Travolla", "we", "us") is a Ugandan travel company operating this booking platform. We are the data controller for the personal information described in this policy.
Contact: contact.travolla@gmail.com · 0703700046 / 0708982025 · Plot 12, Kampala Road, Kampala, Uganda.
Account details: your name, email address, phone number and password (stored only as a one-way cryptographic hash — we never see it).
Verification data: the one-time passcode issued when you first create an account, and the time it was confirmed.
Booking details: travellers, arrival and departure dates, flight, accommodation and ground-transport selections, venues or parks, and any special requests you send us.
Travel documents: where a bundle includes an air ticket, the passenger names, dates of birth and passport details required by the airline to issue that ticket.
Payment data: the amount, currency, channel and reference of your transaction. Card numbers, PINs and Mobile Money credentials are entered on Pesapal's secure checkout and are never transmitted to, or stored by, Travolla.
Technical data: IP address, device and browser type, and pages visited, used to keep the service secure and working.
To create and verify your account and keep it secure.
To quote, confirm, ticket and coordinate your bundle — this includes sharing only the necessary details with the airline, property and transport operator serving your trip.
To take payment through Pesapal and to reconcile and settle partner payouts.
To send you booking confirmations, itinerary changes and support messages.
To detect fraud, prevent abuse and comply with Ugandan law.
Operational copies of signup and booking notices are delivered to our company inbox so our team can act on your trip.
We process your data to perform the travel contract you enter into with us, to meet our legal obligations, and — for optional marketing — on the basis of your consent, which you may withdraw at any time.
We do not sell your personal data. We do not share it with advertisers.
Travel suppliers: airlines, hotels, lodges, AirBnb hosts and transport operators fulfilling your specific booking.
Pesapal: our licensed payment processor, for authorising and settling your payment.
Infrastructure providers: our hosting and database provider, which stores data encrypted at rest and in transit.
Authorities: where we are legally compelled to disclose, and only to the extent required.
All traffic is encrypted with TLS. Database rows are protected by row-level security so one traveller can never read another traveller's bookings.
Administrative access is restricted to named Travolla staff accounts holding an explicit admin role, and every administrative view of booking data is logged.
New accounts must confirm a one-time passcode sent to the registered email before the account is usable.
Payment credentials never touch our servers.
Booking and payment records are retained for seven years to satisfy Ugandan tax and accounting requirements.
Passport details supplied for ticketing are retained only as long as the airline requires and are deleted thereafter.
Account data is deleted within 30 days of you closing your account, except records we must keep by law.
Under Uganda's Data Protection and Privacy Act, 2019 you may request access to your data, correction of inaccurate data, deletion, a portable copy, or restriction of processing.
Write to contact.travolla@gmail.com and we will respond within 30 days. You may also lodge a complaint with the Personal Data Protection Office of Uganda.
We use strictly necessary cookies and local storage to keep you signed in and to remember your booking progress. We do not use third-party advertising cookies.
Accounts are for adults aged 18 and over. Children may be included as travellers on a booking made by a responsible adult.
We will post any change to this policy on this page and update the date below. Material changes will also be emailed to registered travellers.
Last updated 2 September 2026.
