Privacy

How we handle
your personal data.

This notice explains what we collect through this website, why, and the rights you have over it, in line with Tanzania's Personal Data Protection Act, 2022.

Controller
MEM Tanzania, Moshi, Kilimanjaro, Tanzania
Effective
1 September 2026
Governed by
The Personal Data Protection Act, 2022 (Tanzania) and its regulations

1. Introduction

Welcome to the MEM Tanzania website ("we", "our", "us"). We are a business and strategic consultancy based in Moshi, Kilimanjaro, and this notice covers the website you are reading now. We are committed to handling personal data in accordance with the Personal Data Protection Act, 2022, and its regulations. This Privacy Notice explains what personal data we collect when you visit this site or use the contact form, why we collect it, how we use and protect it, and what rights you have over it.

2. Data Protection Principles

In handling personal data, we follow these principles:

  • We process personal data lawfully, fairly, and transparently.
  • We collect it for the specific purpose described below, and do not use it for anything incompatible with that purpose.
  • We collect no more than we need to respond to you.
  • We keep it accurate and up to date where relevant.
  • We keep it only as long as necessary.
  • We keep it secure against unauthorised access, loss, or misuse.

3. Information We Collect

We only collect what you choose to give us through the contact form: your first and last name, email address, phone number (optional), organisation, the service area you select, and the message you write.

We do not ask for, and please do not send us, any special category data (health, biometric, religious, political, or similar sensitive information) through the form.

Beyond the form, this website does not use cookies or tracking technologies to collect information about your browsing. See our Cookie Policy for the full position.

4. Why and How We Collect Personal Information

We collect personal data directly from you, only when you voluntarily complete and submit the contact form to enquire about our services. We do not buy, scrape, or receive your personal data from any other source.

5. Legal Basis for Processing

We process the data you submit on the following bases:

  • Consent: by submitting the form, you consent to us using your details to respond to your enquiry.
  • Legitimate interest: responding to business enquiries and keeping basic records of client communications.
  • Contract: where an engagement proceeds, to take the steps you request before and during that engagement.

6. How We Use the Collected Personal Data

  • To respond to your enquiry and discuss the consultation you requested.
  • To correspond with you about the services you asked about.
  • To keep basic records of client and prospective-client communications for our own administration.

We do not use your data for marketing you have not asked for, and we do not sell or rent personal data to anyone.

7. How We May Share the Personal Data

We share the minimum necessary with:

  • Web3Forms, the service that processes contact-form submissions and delivers them to our inbox. Web3Forms acts as our data processor for this purpose. See their privacy policy.
  • Vercel, our hosting provider, which handles the standard technical data involved in serving this website to you.

We do not share your data with anyone else, and never for a third party's own marketing.

8. Disclosure of Personal Data

Beyond the service providers above, we may disclose personal data where required by law, in response to a valid request from a competent Tanzanian authority (including the Personal Data Protection Commission), or to establish, exercise, or defend a legal claim.

9. Cross-Border Data Transfers

Web3Forms, Vercel, and Google (which serves the fonts used on this site) are service providers whose infrastructure may sit outside Tanzania. Using the contact form or loading this website can therefore involve transferring limited personal or technical data outside the country. We rely on the contractual and security safeguards these providers apply, including encrypted transmission over HTTPS, consistent with the Personal Data Protection Act, 2022. If our processing grows in scale, we will take any further step the Act requires for transfers of that kind.

10. Children's Privacy

This website is not directed at, and is not intended for use by, children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

11. Where Personal Data May Be Held

Contact-form submissions are held in the inbox of Memtanzaniaco@gmail.com and, until delivered, on Web3Forms' processing infrastructure. The website itself is hosted on Vercel's infrastructure. We do not maintain a separate visitor database.

12. How Long We Keep Your Personal Data

We retain personal data submitted through this website only for as long as necessary to respond to your enquiry, maintain reasonable business records of the correspondence, and meet any legal, accounting, or reporting obligation that applies. When it is no longer needed for those purposes, we delete it.

13. Your Rights as a Data Subject

Under the Personal Data Protection Act, 2022, you have the right to:

  • Be informed about how your personal data is processed.
  • Access the personal data we hold about you.
  • Have inaccurate or incomplete data corrected.
  • Request erasure of your data in certain circumstances.
  • Restrict or object to certain processing.
  • Receive your data in a portable format, where applicable.
  • Withdraw consent at any time, without affecting anything already done under it.
  • Lodge a complaint with the Personal Data Protection Commission.

To exercise any of these, contact Memtanzaniaco@gmail.com.

14. Security of the Collected Personal Data

This site is served over HTTPS with HSTS enforced, and applies a restrictive Content Security Policy and standard security response headers. Access to the enquiry inbox is limited to authorised MEM Tanzania personnel, and we rely on the security measures of our service providers for the parts of the process they handle. We review these measures periodically.

15. Automated Decision-Making and Profiling

We do not use your personal data for automated decision-making or profiling.

16. Access to Your Personal Data

Contact Memtanzaniaco@gmail.com and we will respond within the timeframe the Act requires.

17. Third-Party Links

This website does not link out to third-party websites, other than the service providers described in Section 7.

18. Cookies and Tracking Technologies

This website does not use cookies or similar tracking technologies. See our Cookie Policy for details.

19. How to Complain

Contact us first at Memtanzaniaco@gmail.com so we can try to resolve your concern directly. You may also lodge a complaint with the Personal Data Protection Commission:

Address
1 Moshi Street, Viwandani, P.O. Box 1105, 41102 Dodoma, Tanzania
Phone
+255 743 699 996
Website
www.pdpc.go.tz

20. Changes to This Privacy Notice

We may update this notice from time to time. Changes will be posted on this page with a revised effective date, so please check back periodically.