TeranGuest

Privacy Policy

Protection of personal data

Last updated : 21 April 2026
Our commitment

Universal Technologies Africa takes the protection of your personal data seriously. This policy describes what information we collect, why we collect it, how we use it and what your rights are. We comply with Senegalese law no. 2008-12 of 25 January 2008 on personal data protection and the recommendations of the Personal Data Protection Commission (CDP).

Article 1. Data controller

The controller of personal data collected on the TerangaGuest site (www.teranguest.com) is:

  • Company name: Universal Technologies Africa SARL (UTA)
  • Address: 9 Rue Parchappe, Dakar Plateau, Senegal
  • NINEA: 007433220
  • Commercial register: SN DKR 2019 B 19441
  • Contact email: info@teranguest.com
  • Data Protection Officer (DPO): dpo@teranguest.com

Article 2. Data collected

We collect different categories of data depending on your use of the platform.

2.1 Data provided by travellers

  • Identity: last name, first name, date of birth
  • Contact details: email, phone number, postal address
  • Travel information: stay dates, destinations, number of travellers, preferences
  • Payment data: card number (encrypted and not stored in clear text), Wave / Orange Money / Free Money phone number
  • ID document: only if required by Senegalese law (national ID, passport)
  • Reviews and comments you publish on the platform

2.2 Data provided by partners

  • Legal identity: company name, NINEA, commercial register
  • Contact: representative name, phone, email, postal address
  • Establishment information: address, photos, rates, amenities, availability
  • Banking information: account details, Wave / Orange Money / Free Money number for payouts
  • Supporting documents: insurance certificate, approval certificates

2.3 Data collected automatically

  • IP address
  • Browser type and version
  • Operating system
  • Pages visited, duration, navigation path
  • Approximate geolocation (city level)
  • Cookies and similar technologies (see section 6)

Article 3. Purposes and legal bases

We process your personal data for the following purposes, relying on a specific legal basis:

PurposeData concernedLegal basis
Booking and payment managementIdentity, contact, payment, travelContract performance
Partner account managementLegal identity, banking, supporting docsContract performance
Customer service and supportContact, exchange historyLegitimate interest
Security and fraud preventionIP, navigation, paymentLegitimate interest
Platform improvementNavigation data, cookiesConsent
Newsletter and offersEmail, preferencesConsent
Legal obligations (tax, accounting)Transactions, identityLegal obligation

Article 4. Data recipients

Your personal data may be transmitted to the following recipients, strictly within the purposes described in article 3:

  • Our authorised internal teams (customer service, technical, legal, accounting)
  • The accommodation partners or providers you have selected (name, contact, stay dates only)
  • Our payment providers (Wave, Orange Money, Free Money, card processors, PayPal)
  • Our technical providers (hosting, emailing, analytics) bound by strict confidentiality clauses
  • Senegalese public authorities in case of legal obligation (justice, tax, police)

We never sell your personal data to commercial third parties.

Article 5. Transfers outside Senegal

We strive to keep all your data on servers located in Senegal. Where a transfer abroad is necessary (for example PayPal whose servers are in the United States), we ensure it is covered by appropriate safeguards under article 49 of law 2008-12:

  • Standard contractual clauses with our foreign subprocessors
  • Verification of the adequate level of protection in the destination country
  • Prior information to the user and collection of consent where required

Article 6. Cookies and similar technologies

Our site uses cookies to improve your experience. Three categories of cookies are deployed:

6.1 Strictly necessary cookies

Enable the operation of the site (authentication, security, booking cart). Do not require consent. Duration: session or 30 days maximum.

6.2 Audience measurement cookies

Allow us to analyse traffic and improve the site (Google Analytics, Matomo). Anonymised where possible. Require consent. Duration: 13 months maximum.

6.3 Personalisation and marketing cookies

Allow us to adapt content and offers (remarketing, social networks). Require explicit consent. Duration: 13 months maximum.

You can change your cookie preferences at any time via the banner shown on your first visit or via the Cookie settings button at the bottom of the page.

Article 7. Data retention

Data typeRetention period
Active traveller account dataDuration of use + 3 years after last activity
Active partner account dataDuration of contract + 10 years (accounting obligations)
Booking history5 years from end of service
Payment supporting documents10 years (accounting obligation)
Audience measurement cookies13 months maximum
Newsletter emails3 years from last interaction or until unsubscribe
ID documentsDuration necessary for the purpose, deleted as soon as possible

Article 8. Your rights

In accordance with Senegalese law no. 2008-12, you have the following rights over your personal data:

8.1 Right of access

You may obtain confirmation that personal data concerning you is being processed, and obtain a copy.

8.2 Right of rectification

You may request correction of inaccurate or incomplete data.

8.3 Right to erasure

You may request the deletion of your data, subject to our legal obligations (accounting and tax obligations in particular).

8.4 Right to object

You may object to the processing of your data for reasons relating to your particular situation, notably marketing profiling.

8.5 Right to restriction of processing

You may request temporary suspension of a processing operation while a challenge is being examined.

8.6 Right to portability

You may request to retrieve your data in a structured and readable format, to transmit it to another controller.

8.7 Right to withdraw consent

For processing based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

8.8 Right to define the fate of data after death

You may give instructions on the fate of your data after your death (retention, deletion, transmission to a third party).

How to exercise your rights

To exercise any of these rights, contact our Data Protection Officer:

  • Email: dpo@teranguest.com
  • Mail: DPO UTA, 9 Rue Parchappe, Dakar Plateau, Senegal
  • From your personal area: My data section

We respond to your request within 30 days at most. Proof of identity may be requested to verify the legitimacy of the request.

CDP appeal

If you consider that the processing of your data is not compliant with the law, you may file a complaint with the Senegalese Personal Data Protection Commission:

  • Address: NSIA Building, 3rd floor, Dakar
  • Email: contact@cdp.sn
  • Website: www.cdp.sn

Article 9. Data security

We implement technical and organisational measures to protect your data:

  • SSL/TLS encryption of all communications with the site
  • Servers hosted in Senegal in secure data centres
  • PCI DSS compliant payment system
  • Strict access control reserved for authorised personnel
  • Two-factor authentication for administrator accounts
  • Regular and encrypted backups
  • Annual external security audits
  • Staff training on data protection
  • Breach notification procedures (within 72 hours to CDP)

Article 10. Minors

TerangaGuest is not intended for children under 16. We do not knowingly collect personal data concerning minors under 16 without verifiable consent from the holder of parental authority.

In the specific context of YOG 2026 where minor athletes (14-18) are concerned, bookings concerning them must be made by a responsible adult (parent, guardian, delegation head) who certifies having the necessary authorisation.

Article 11. Policy changes

This Privacy Policy may be updated to reflect legal or technical developments. The date of last update is shown at the top of the document. Any substantial modification is communicated to users by email or by a banner on the site.

Article 12. Contact

This policy is also available in French by default on the platform.

Data Protection Officer (DPO)

Email: dpo@teranguest.com Mail: DPO UTA, 9 Rue Parchappe, Dakar Plateau, Senegal Customer service: info@teranguest.com

Universal Technologies Africa SARL · 9 Rue Parchappe, Dakar Plateau · NINEA 007433220 · RC SN DKR 2019 B 19441