This Privacy Policy describes how eSoko (“eSoko”, “we”, “us” or “our”) collects, uses, discloses and protects personal data in the course of operating the eSoko platform and related services. It is issued in accordance with the Personal Data Protection Act, No. 11 of 2022 of the United Republic of Tanzania (the “Act”) and the regulations made thereunder. By accessing or using eSoko, you acknowledge that you have read and understood this Policy.
The platform is operated by [REGISTERED ENTITY NAME], a company incorporated in the United Republic of Tanzania under company registration number [COMPANY REGISTRATION NUMBER] and trading as “eSoko”. eSoko is the data controller in respect of personal data processed through the platform and is responsible for determining the purposes and means of such processing.
eSoko is subject to the Personal Data Protection Act, No. 11 of 2022 and to the supervision of the Personal Data Protection Commission (the “Commission”) established under the Act. eSoko’s registration number with the Commission is [PDPC REGISTRATION NUMBER].
Enquiries concerning this Policy or the processing of your personal data may be directed to our Data Protection Officer, [DATA PROTECTION OFFICER NAME], at the contact details set out at the end of this Policy.
We collect and process the following categories of personal data:
We process personal data only where a lawful basis under the Act applies, including your consent, the performance of a contract to which you are a party, compliance with a legal obligation, or our legitimate interests in operating and securing the platform.
We process personal data for the following purposes: to create and administer your account; to display and personalise listings; to facilitate enquiries between seekers and agents; to process payments; to send service communications and the alerts you request; to prevent fraud and abuse; and to comply with applicable law.
Where you submit an enquiry in respect of a property, we disclose your name and contact details to the relevant agent or property owner so that they may respond to you. Such recipients act as independent data controllers in respect of their subsequent use of that data.
We engage carefully selected processors — including Selcom (Tanzania) Limited for payment processing and reputable hosting and analytics providers — who process personal data on our behalf and on our documented instructions under written contracts that impose obligations consistent with the Act. We do not sell personal data.
Personal data is stored and processed within the United Republic of Tanzania wherever practicable. Where a transfer of personal data outside Tanzania is necessary, we effect such transfer only in accordance with the Act — that is, where the recipient jurisdiction affords an adequate level of protection, where you have consented, or where the transfer is otherwise permitted and, where required, approved by the Commission.
Subject to the conditions and exceptions in the Act, you have the right to:
To exercise any of these rights, contact our Data Protection Officer using the details below. We will respond within the period prescribed by the Act.
We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting or reporting requirements, after which it is securely deleted or anonymised.
We implement appropriate technical and organisational measures — including encryption in transit, access controls and monitoring — to protect personal data against unauthorised or unlawful processing and against accidental loss, destruction or damage. In the event of a personal data breach, we will notify the Commission and affected data subjects where, and within the time, required by the Act.
If you have a concern about how we handle your personal data, please contact our Data Protection Officer, [DATA PROTECTION OFFICER NAME], at robot@esoko.co.tz or eSoko, 4th Floor, Hekima Point, 36 Mindu, Malik Rd, Dar es Salaam 21527. You also have the right to lodge a complaint directly with the Personal Data Protection Commission.
