Privacy Policy

We collect information that helps us deliver and improve our Services for businesses and professionals. This may include:

• Account and profile data: name, work email, organisation name, role, and similar identifiers you provide when you register, book a consultation, or communicate with us.
• Usage and technical data: device type, browser, approximate location derived from IP address, pages viewed, and interactions with our website or applications, including through cookies and similar technologies as described in our Cookie Policy.
• Communications: content of emails, forms, chat, or support requests, and metadata needed to respond and maintain records.
• Business and billing data: where you purchase or trial paid offerings, billing contact details and transaction references as required to process payments and meet tax and accounting obligations.

We do not intentionally collect sensitive categories of personal data unless there is a clear business need and a lawful basis; where we do, we limit use and protect it in line with this Policy and applicable law.

We use personal data to:

• Provide, operate, and secure the Services you request.
• Respond to enquiries, support requests, and consultation bookings.
• Send service-related notices and, where permitted, marketing communications you can opt out of at any time.
• Analyse usage in aggregate to improve product experience, reliability, and performance.
• Comply with legal obligations, enforce our terms, and protect the rights and safety of Gwanta, our users, and the public.

Where we rely on consent (for example, certain cookies or marketing emails), you may withdraw consent without affecting the lawfulness of processing carried out before withdrawal.

We align our practices with Tanzania's Personal Data Protection Act (PDPA) and related regulations. That means we aim to process personal data lawfully, fairly, and transparently; collect data for specified, explicit, and legitimate purposes; limit collection to what is adequate and relevant; keep data accurate and, where appropriate, up to date; and retain it only as long as necessary for those purposes or as required by law.

We implement appropriate technical and organisational measures—including access controls, encryption where appropriate, staff training, and vendor oversight—to protect personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage.

Where we use processors (such as cloud hosting or email delivery), we require them contractually to meet comparable protection standards and to process data only on our instructions, except where the law requires otherwise.

We retain personal data for as long as your account is active or as needed to provide the Services, resolve disputes, enforce agreements, and meet legal, tax, and accounting requirements. Retention periods vary by data category; for example, marketing suppression lists may be kept longer than transient server logs.

When retention is no longer necessary, we delete or anonymise data where feasible. Aggregated or de-identified information may be retained for analytics without identifying you.

Depending on your situation and applicable law, you may have the right to request access to, correction of, or deletion of your personal data; to restrict or object to certain processing; to data portability where technically feasible; and to lodge a complaint with a supervisory authority.

To exercise these rights, contact us at privacy@gwanta.com. We will respond within a reasonable period and may need to verify your identity before fulfilling certain requests.

For privacy-related questions or requests, email privacy@gwanta.com. General enquiries can be submitted via our contact page.