Privacy policy

1. Introduction

Nottech Company Limited ("Nottech", "we", "our", or "us"), a technology company based in Arusha, Tanzania, is committed to protecting the privacy and personal data of individuals who access and use the Mwanga Application ("Mwanga" or the "Platform"). Mwanga is an e-commerce facilitation platform that enables sellers to list products and interact with customers primarily through messaging channels, while supporting order placement and payment through integrated third-party services..

We recognize that trust is fundamental in digital ecosystems, particularly where communication and commerce intersect. Accordingly, we are committed to ensuring that personal data is processed in a lawful, fair, and transparent manner, consistent with the principles of the Personal Data Protection Act of Tanzania, 2022, as well as internationally recognized data protection standards, including principles reflected in the General Data Protection Regulation (GDPR).

This Privacy Policy provides a comprehensive explanation of how personal data is collected, used, stored, disclosed, and protected when users interact with Mwanga.

2. Nature of the Platform and Data Processing Role

Mwanga operates primarily as a technology facilitator rather than a direct transactional intermediary. The Platform enables sellers and customers to connect and transact via messaging channels, while payments are handled by independent, regulated third-party providers.

In this context, Nottech acts as a data controller for the limited personal data collected through the Mwanga system, while other service providers (such as messaging and payment platforms) act as independent data controllers for the data processed within their systems.

This distributed architecture ensures that sensitive data, particularly financial information and message content, is handled by specialized platforms designed with advanced security and compliance frameworks.

3. Categories of Personal Data Collected

Mwanga is designed with a data minimization principle, ensuring that only necessary data is collected to deliver the service effectively.

For sellers, the Platform collects identifying and operational information such as names, business identifiers, contact details linked to messaging accounts, and product-related data including descriptions, pricing, and images. This information enables sellers to present their offerings and engage with potential buyers.

For customers, personal data is primarily collected through voluntary interaction, typically including phone numbers, order details, and delivery information shared during communication. Given that interactions occur through messaging platforms, much of the conversational data is not stored directly by Mwanga.

In addition, limited technical and usage data may be collected automatically, including system logs, timestamps, and interaction metadata. This data is used strictly for maintaining system performance, improving user experience, and ensuring operational integrity.

4. Purpose of Data Processing

Personal data is processed for clearly defined and legitimate purposes. These include facilitating communication between sellers and customers, enabling product listing and discovery, supporting order coordination, and improving the reliability and functionality of the Platform.

Data is also processed to ensure the security of the Platform, prevent fraud or misuse, comply with legal obligations, and support customer service operations. Where applicable, processing is based on user consent, contractual necessity, compliance with legal requirements, or legitimate business interests that do not override user rights.

5. Payments and Financial Data Handling

Mwanga integrates with third-party payment service providers to facilitate secure financial transactions. Payments are conducted through external payment links, and all financial data is processed exclusively within the infrastructure of the payment provider.

Mwanga does not collect, process, or store sensitive financial information such as bank account details, payment card numbers, or mobile money credentials. This design ensures that financial data remains under the control of licensed payment processors and significantly reduces the risk of exposure or misuse.

Users are encouraged to review the privacy policies of the respective payment providers to understand how their financial data is handled.

6. Messaging and External Platform Integration

The Platform relies on messaging infrastructure provided by external services to enable communication between users. These services operate independently and are governed by their own privacy policies and data protection practices.

While Mwanga facilitates interactions between users, it does not control how data is processed once it is transmitted through external messaging systems. Users should therefore be aware that communication conducted through such platforms is subject to the terms and privacy frameworks of those services.

7. Data Sharing and Disclosure

Nottech does not sell or commercially exploit personal data. Personal data is disclosed only where necessary to support the operation of the Platform or where required by law.

Data may be shared with trusted service providers that support hosting, analytics, or system functionality, provided that such providers adhere to strict confidentiality and data protection obligations. Disclosure may also occur where required by legal or regulatory authorities, or where necessary to protect the rights, safety, and security of users or the Platform.

All disclosures are limited to what is necessary and proportionate to the purpose for which they are made.

8. Cross-Border Data Transfers

Given the integration with global service providers, personal data may be processed or stored in jurisdictions outside Tanzania. In such cases, Nottech ensures that appropriate safeguards are in place to protect personal data, including reliance on contractual protections and adherence to internationally recognized data protection standards.

9. Data Security Measures

Nottech implements appropriate technical and organizational measures to protect personal data from unauthorized access, loss, misuse, or alteration. These measures include secure server infrastructure, encryption of data in transit, controlled access to systems, and continuous monitoring for potential vulnerabilities.

While we strive to maintain a high level of security, users should be aware that no system can guarantee absolute protection. Users are therefore encouraged to take appropriate precautions when sharing personal information.

10. Data Retention Policy

Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected, including providing services, complying with legal obligations, and resolving disputes. Once data is no longer required, it is securely deleted or anonymized.

11. User Rights

In accordance with applicable data protection laws, users have the right to access their personal data, request correction of inaccurate information, request deletion of their data, and object to or restrict certain forms of processing.

Users also have the right to withdraw consent where processing is based on consent, without affecting the lawfulness of processing conducted prior to withdrawal.

Requests related to these rights can be submitted using the contact information provided in this Policy.

12. Children's Privacy

Mwanga is not intended for use by individuals under the age of 18. Nottech does not knowingly collect personal data from minors. If such data is identified, it will be promptly deleted.

13. Updates to This Privacy Policy

This Privacy Policy may be updated periodically to reflect changes in legal requirements, technological developments, or operational practices. When updates are made, the revised version will be published with an updated effective date.

Continued use of the Platform after such updates constitutes acceptance of the revised Privacy Policy.

14. Contact Information

For inquiries, requests, or concerns regarding this Privacy Policy or the handling of personal data, please contact:

Nottech Company Limited
Arusha, Tanzania
Email: info@nottech.co.tz (recommended to use official domain)
Phone: +255 763194804

15. Legal Basis and Compliance Statement

Nottech processes personal data in accordance with the Personal Data Protection Act, 2022 (Tanzania) and aligns its practices with internationally recognized standards, including GDPR principles such as lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, and confidentiality.

16. Consent

By accessing or using the Mwanga Application, users acknowledge that they have read, understood, and agreed to this Privacy Policy and consent to the collection and processing of their personal data as described herein.