Privacy Policy

1. Scope

This Policy applies to personal data collected through our website, client onboarding, communications, and service delivery.

2. Legal Framework

We process personal data in line with the laws of the United Republic of Tanzania, including the Personal Data Protection Act (Act No. 11 of 2022, Cap. 44), the Personal Data Protection Regulations, 2023, and other applicable communications and electronic transaction laws.

3. Data We Collect

• Identity data: name, company name, job title.
• Contact data: email, phone number, address.
• Service data: project requirements, communication records, billing details.
• Technical data: IP address, browser type, device and analytics data.

4. Purposes of Processing

• Respond to inquiries and provide requested services.
• Perform and manage contracts, invoices, and support.
• Improve website performance, security, and user experience.
• Comply with legal and regulatory obligations.
• Send service and business communications (where lawful).

5. Lawful Basis

We process data based on consent, contractual necessity, legal obligations, legitimate business interests, and other lawful grounds allowed under Tanzanian law.

6. Data Sharing

We may share personal data with approved service providers, professional advisors, payment and hosting partners, or competent authorities where required by law. We require third parties to protect data confidentiality and security.

7. Cross-Border Transfers

Where personal data is transferred outside Tanzania, we apply safeguards required by the Personal Data Protection legal framework and guidance issued by the Personal Data Protection Commission.

8. Data Retention

We retain personal data only as long as necessary for the stated purposes, contractual needs, dispute handling, tax and accounting obligations, or legal compliance.

9. Data Subject Rights

Under applicable law, you may have rights to:

• Be informed about processing of your personal data.
• Access your personal data.
• Request rectification or erasure where applicable.
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with the Personal Data Protection Commission (PDPC).

10. Security Measures

We implement technical and organizational measures to protect personal data from unauthorized access, alteration, disclosure, or loss.

11. Cookies and Analytics

We may use cookies and similar technologies for performance, analytics, and user experience. You can manage cookie settings through your browser or consent tools where provided.

12. Changes to This Policy

We may update this Policy periodically. Material updates will be posted on this page with the revised date.

13. Contact and Complaints

Email: info@jafatec.com
Phone: +255 786 550 809
Location: Dar es Salaam, Tanzania

If you are not satisfied with our response, you may escalate your complaint to the Personal Data Protection Commission (PDPC), Tanzania.