Privacy Policy

1. Information collected

Yombah collects information provided directly when registering an account or using the platform:

• Account information: name, email address, phone number, and password.
• Operator information: company name, registration number, bank account details, and identity/registration documents.
• Booking information: trip selections, seat choices, payment confirmation, and travel history.
• Flight passenger information: full name, date of birth, nationality, and passport or travel document details — required by airlines to complete the booking.
• Device and usage data: IP address, browser type, operating system, and pages visited.

2. How information is used

Collected data is used to:

• Provide, operate, and improve the Yombah platform.
• Process bookings, payments, and issue e-tickets.
• Verify operator identities and business registrations.
• Send service notifications, booking confirmations, and support responses.
• Comply with legal and regulatory obligations in The Gambia.

3. Data sharing

Yombah does not sell personal data. Information may be shared with:

• Stripe — to process card payments securely. Payment card data is handled directly by Stripe and is never stored by Yombah. Stripe's privacy policy applies: stripe.com/privacy.
• Mobile money providers (Wave, Afrimoney, QMoney, APS Wallet, and others) to process mobile payment transactions.
• Airlines and airline GDS systems (via Duffel) — passenger details including name, date of birth, and passport information are shared with the relevant airline solely to complete flight bookings.
• Cloud storage providers for document and data hosting.
• Government or regulatory bodies where required by law.

4. Payment card data

Yombah does not collect, process, or store payment card numbers, CVV codes, or other card credentials. All card transactions are handled directly by Stripe, a PCI DSS-compliant payment processor. Yombah receives only a tokenised confirmation of payment. Mobile money transactions are processed by the respective mobile money provider and are subject to their privacy practices.

5. Data retention

Personal data is retained for as long as an account is active or as needed to provide services. Operator verification documents are retained for compliance purposes. Account deletion requests can be submitted to support@yombah.com.

6. Security

Yombah uses industry-standard encryption and access controls to protect your data. Authentication tokens are stored client-side and transmitted over HTTPS. Passwords are never stored in plain text.

7. Your rights

You have the right to access, correct, or delete your personal information. To exercise these rights, contact Yombah at support@yombah.com. Requests will be responded to within 30 days.

8. Changes to this policy

This Privacy Policy may be updated from time to time. Registered users will be notified of material changes via email or an in-app notice. Continued use of Yombah after changes take effect constitutes acceptance of the updated policy.