Engage Us

Dar es Salaam, Tanzania

Privacy Notice

Last updated 20 October 2026

This notice explains how Kiwisan Group Ltd ("Kiwisan Group", "we" or "us") collects and uses personal data through this website, kiwisangroup.co.tz. We are the data controller for that data under the Personal Data Protection Act, 2022 of the United Republic of Tanzania and its regulations.

Who we are

Kiwisan Group Ltd is a strategic advisory firm based in Dar es Salaam, Tanzania. Questions about this notice or about your personal data can be sent to our Data Protection Officer at [email protected].

The information we collect

When you send an enquiry. The form on our Engage Us page asks for:

  • your name
  • your organisation
  • your email address
  • your telephone number, if you choose to give it
  • the area your enquiry relates to
  • your message

The email we receive also records which version of this notice you agreed to.

When you visit the website. Our hosting provider receives the technical information every website receives, such as your IP address, browser type and the pages you request. When you use the enquiry form, Cloudflare Turnstile checks technical information about your browser and device, including your IP address, to confirm that the form is being used by a person rather than an automated program. We also use your IP address to limit repeated submissions. We do not store this information ourselves.

We do not ask for sensitive personal data. Please do not include it, or any confidential information, in an enquiry. Once we have agreed to act for you, we will tell you how to share confidential material securely.

How we use it

We use the information you send to:

  • read and respond to your enquiry
  • consider whether and how we can assist, including checking for conflicts of interest
  • keep a record of our correspondence with you

We use technical information only to deliver the website and to protect it and the enquiry form from abuse.

We do not use your details for marketing, we do not add you to a mailing list and we do not sell or rent personal data. We do not make decisions about you by automated means alone.

Our basis for using it

We process the details in your enquiry with your consent, which you give by ticking the box on the form. We process technical information because it is necessary to provide a secure website.

You may withdraw your consent at any time by writing to [email protected]. Withdrawing consent does not affect anything we did before you withdrew it.

Cookies

We do not use analytics, advertising or social media cookies, and we do not track you across other websites. Our fonts are hosted on our own website, so loading a page does not send your IP address to a font provider.

Cloudflare may set a strictly necessary security cookie when it needs to confirm that traffic to the website is genuine. It is not used to identify you or for advertising. Because it is strictly necessary for the website to work securely, we do not ask for consent to it.

Who we share it with

We share personal data only with the service providers that run the website and our email, and only to the extent each one needs:

  • Cloudflare hosts the website, runs the enquiry form and provides the Turnstile check. It operates a global network, so your request may be handled outside Tanzania.
  • Resend delivers the enquiry form's messages to our mailbox. It operates in the United States.
  • Zoho hosts our email, including the mailbox that receives your enquiry. Our account is held in its United States data centre.
  • Sanity hosts the content of the website. It receives no information about visitors or enquiries.

Each provider processes personal data on our behalf, or under its own privacy terms for the security services it provides. You can read Cloudflare's privacy policy.

We may also disclose personal data to our professional advisers, or where the law, a court or a regulator requires it.

Transfers outside Tanzania

The providers above store or process data outside Tanzania. We transfer personal data outside Tanzania only in accordance with the Personal Data Protection Act, 2022 and its regulations, including any authorisation they require from the Personal Data Protection Commission, and with contractual safeguards from each provider.

How long we keep it

If an enquiry does not lead to an engagement, we delete it, and any reply we sent, 24 months after our last contact with you. If it leads to an engagement, the correspondence becomes part of our client records and is kept for as long as those records must be kept.

Our providers keep short-lived technical and delivery logs for the periods their services set. Where a provider lets us choose, we choose the shortest period available.

How we protect it

The website is served only over an encrypted connection, and the form's contents are sent straight to our mailbox. They are not stored on the website or in our content system. Access to the mailbox is limited to the people at Kiwisan Group who need it. We will report a breach involving personal data to the Personal Data Protection Commission as the law requires.

No transmission over the internet is completely secure, which is one reason we ask you not to include confidential information in an enquiry.

Your rights

Under the Personal Data Protection Act, 2022 you have the right to:

  • be told whether we hold personal data about you, and how we use it
  • have a copy of that data
  • have inaccurate or out-of-date data corrected
  • have data erased or destroyed when we no longer need it, or when you withdraw your consent
  • object to, or ask us to stop, processing that is likely to cause you damage or distress
  • withdraw your consent at any time

To use any of these rights, write to [email protected]. We may ask you to confirm your identity before we act on the request. We will respond within the time the law allows.

Complaints

If you are concerned about how we have handled your personal data, please contact us first so that we can try to resolve it. You also have the right to complain to the Personal Data Protection Commission at pdpc.go.tz.

Children

This website is intended for organisations and their representatives. It is not directed at children, and we do not knowingly collect personal data from anyone under 18.

Other websites

This website links to other websites, including those of the providers named above. We are not responsible for how they handle personal data, so please read their own privacy notices.

Changes to this notice

We may update this notice. The date at the top of this page shows when it last changed. Each version is numbered, and the email we receive with an enquiry records the version in force when it was sent.

Contact

Kiwisan Group Ltd, Dar es Salaam, Tanzania. Data Protection Officer: [email protected].