Punguzo Privacy & Policy

Introduction

Welcome to Punguzo. We are committed to protecting your privacy and handling your personal data in accordance with the Tanzania Personal Data Protection Act, 2022 and relevant global standards.

This Privacy Policy explains how Punguzo Africa. ("Punguzo", "we", "our", or "us") collects, uses, shares, and protects your personal data when you use our services through mobile money platforms, websites, or mobile apps.

By using our services, you consent to the terms described in this policy.

Legal Basis for Processing

We collect and process your data based on your explicit consent, where necessary to perform a contract, comply with legal obligations, or protect our legitimate business interests.

You have the right to withdraw your consent at any time and to object to certain types of processing, as outlined below.

Information We Collect

We may collect the following types of personal data:

• Identity Data (e.g., name, phone number, national ID or business registration number)
• Transaction Data (e.g., product purchases, mobile money payments, delivery records)
• Technical Data (e.g., IP address, device type, app usage data, location with permission)

We collect this data to provide, improve, and secure our services.

How We Use Your Data

We use your data to:

• Enable transactions and product listings
• Verify merchant and customer identities
• Process payments through mobile money services
• Deliver customer support and logistics
• Comply with regulatory requirements in Tanzania
• Detect fraud and enhance platform security

Data Sharing and Disclosure

We may share your data with trusted third parties where necessary:

• Mobile money operators (e.g., M-Pesa, TigoPesa)
• Logistics and delivery providers
• Regulators or government agencies (upon legal request)
• Technology service providers under confidentiality agreements

We do not sell your personal data.

Your Rights

Under Tanzanian law, you have the right to:

• Access the personal data we hold about you
• Request corrections or deletion of your data
• Withdraw your consent to processing
• Object to direct marketing and automated decision-making
• File a complaint with the Personal Data Protection Commission

To exercise any of these rights, please contact us at privacy@punguzo.com

Data Security and Retention

We apply appropriate technical and organizational safeguards to protect your personal data from unauthorized access, loss, or misuse. These include encryption, access control, and secure cloud hosting.

We retain personal data only as long as necessary to fulfill our obligations, including legal and tax requirements. Inactive account data may be deleted or anonymized after 24 months.

International Data Transfers

Your data may be processed outside Tanzania where permitted by law. We ensure adequate safeguards are in place, or obtain your explicit consent where required for such transfers.

Marketing Communications

We may send you promotional offers via SMS, email, or in-app messages. You can opt out of marketing at any time by replying STOP, unsubscribing, or adjusting your notification settings.

Children’s Privacy

Punguzo does not knowingly collect or process data from individuals under the age of 18. If we become aware that such data has been collected, we will delete it promptly.

Updates to this Policy

We may update this Privacy Policy from time to time. When we make changes, we will notify you via SMS, email, or in-app notifications. The most current version will always be available on our website.

Contact Us

If you have any questions, requests, or complaints regarding this Privacy Policy or your data, contact us at:

Punguzo Africa
Email: privacy@punguzo.com
Phone: +255 750 780 711
Website: www.punguzo.com

You may also contact the Personal Data Protection Commission of Tanzania for unresolved issues.