Last updated 25 September 2026
What we collect, activity by activity
| When you... | We collect | We use it to | We keep it for |
|---|
| Send an enquiry or ask for a quotation | Name, phone, e-mail, organisation, your message and files | Reply and prepare your quotation | 24 months |
| Place an order | Contact and delivery details, items, payment reference | Deliver, invoice, handle returns, keep tax records | At least 5 years |
| Send a gift basket | Your details, plus recipient's name, phone and address | Deliver the gift and confirm delivery to you | Recipient details: 12 months |
| Invite us to a tender or sign a contract | Contact persons' names, roles and contact details | Prepare bids and perform the contract | Contract period plus 5 years |
| Apply for a job | CV, contact details, cover note | Assess you for the role | 12 months |
| Register as a supplier | Business contacts and registration documents | Vet and pay suppliers | Relationship plus 5 years |
| Browse our website | Cookies, device and usage data | Run the site, and with your consent measure and improve it | Up to 14 months |
| Subscribe to news | E-mail or phone number | Send news and offers | Until you unsubscribe |
Things we never do
- We never sell or rent your personal data.
- We never ask for your mobile-money PIN or full card number.
- We never use a gift recipient's details to market to them without their consent.
- We never charge you to exercise your data rights, unless a request is clearly unfounded or repeated.
How to make a request
- Contact us. Use the data request form on this page, e-mail privacy@kinukazi.co.tz, or write to the Data Protection Officer at our office. Tell us which right you want to use and which of our services you used.
- Confirm who you are. We will ask for enough information to confirm your identity, usually by replying from the e-mail or phone number we hold, or a copy of an ID document which we delete after checking. Someone can act for you if they show your written authorisation.
- We respond. We acknowledge your request within 5 working days and complete it within 30 days of confirming your identity. If we cannot do all or part of what you ask, for example because tax law requires us to keep invoices, we will explain why.
- If you are not satisfied. Reply to our response and a manager will review it. You can also complain to the Personal Data Protection Commission at any time.
What you can ask for
| Right | What to ask | What happens |
|---|
| See your data | "Please send me a copy of the personal data you hold about me." | We send a copy in a common electronic format. |
| Correct your data | "My phone number or address is wrong; the correct one is..." | We update our records and tell you when it is done. |
| Delete your data | "Please delete my data." | We delete what we are not legally required to keep, and tell you what we must keep and why. |
| Object | "Please stop using my data for [purpose]." | We stop unless we have a lawful reason that overrides your objection, which we will explain. |
| Stop marketing | Unsubscribe link, reply STOP, or e-mail us | We stop within 2 working days. |
| Withdraw consent | "I withdraw my consent for [purpose]." | We stop that processing. This does not affect what we did before. |
Make a data request
