Privacy policy

1. Who is responsible

For company accounts and the running of the platform: TCH-S SARL, [to be completed].

For bookings: the transport company concerned, with TCH-S SARL acting on its behalf. [TO CONFIRM: roles with the lawyer]

2. Data processed

Travellers: passenger names, phone number, e-mail address (optional), language, trip, seats, payment reference and status (mobile money number charged, operator reference). Barka Go never sees your mobile money PIN.

Company staff: name, e-mail address, role, stations, sign-ins, two-factor authentication.

Technical data: IP address, device and browser type, security logs. Only one cookie is used, to keep you signed in; no advertising or audience measurement cookies.

3. Why

Issuing and sending your ticket, informing you about your trip (delays, cancellations, reminders): performance of the contract and consent given at booking.

A company's offers by e-mail: only if you ticked the box provided; one-click unsubscribe.

Security, fraud prevention, invoicing and accounting obligations: legal obligations and legitimate interest.

4. Who receives the data

The company operating your trip; the mobile money operator chosen to pay (Orange, MTN).

Our technical providers: OVH (hosting, France), Cloudflare (domain name, protection, backups), Resend (e-mail delivery, United States), and for WhatsApp, KoraFlow (coming). They use the data only to provide this service. [TO CONFIRM: safeguards for transfers outside your country]

Your data is never sold.

5. Retention

Bookings, payments and invoices: 10 years (accounting obligations). Security logs: 1 year. Backups: 30 days. Staff accounts: while active. Consent to offers: until you unsubscribe. [TO CONFIRM]

6. Security

Encrypted connections (HTTPS), protected passwords, mandatory two-factor authentication for managers, each company's data separated in the database, companies' payment access keys encrypted, daily encrypted backups off the server.

7. Your rights

You can ask to access, correct or delete your data (unless we must keep it), and withdraw your consent to offers at any time. Write to [to be completed] with your booking reference.

You may also contact your country's data protection authority (in Cameroon: law no. 2024/017 of 23 December 2024). [TO CHECK: competent authority per country]

8. Minors

A minor may travel with a ticket booked by an adult, who then gives their own contact details.

9. Changes

This policy may change; the update date is shown at the top of the page.