MojaDesk myDuka
Client Login
The Site Weavers The Site Weavers

Privacy Policy

How The Site Weavers collects, uses and protects personal data across our website, client area and services, in line with the Personal Data Protection Act of Tanzania.

Effective date: 24 September 2026
Last updated: 24 September 2026

This Privacy Policy explains how The Site Weavers ("we", "us" or "our") collects, uses, shares and protects personal data. It is written to comply with the Personal Data Protection Act, 2022 (Cap. 44) of the United Republic of Tanzania ("PDPA") and the Personal Data Protection (Personal Data Collection and Processing) Regulations, 2023.

1. Who we are

The Site Weavers is a Tanzanian technology company providing domain registration, web hosting, business email, SSL certificates, website security, monitoring, SEO tools, social media management, QuickBooks licences, web design and software development.

The Site Weavers is registered with the Personal Data Protection Commission (PDPC) as a data controller and data processor, as required by the PDPA.

2. Our role: controller and processor

  • Data controller: we decide how and why personal data is processed for our own purposes, such as enquiries, client accounts, billing, support, marketing and website security.
  • Data processor: when you use our hosting, email, websites or software that we build, host or maintain for you, we process data on your behalf. In that case you are the data controller for the personal data of your own customers, staff and users, and you are responsible for having a lawful basis to collect it.

3. Scope

This Policy applies to:

Our mobile games and apps are covered by a separate Gaming Privacy Policy. Products that operate under their own website are governed by the privacy notices published on that website.

4. Personal data we collect

4.1 Information you give us

  • Enquiries: name, email, phone number, company name and message content submitted through forms, email, phone or chat
  • Client account: name, company, postal and physical address, email, phone number, TIN or VRN where needed for invoicing, and login credentials
  • Billing: invoices, payment references and transaction records from mobile money, bank transfer or card payments. Card details are processed by our payment providers and are not stored by us.
  • Domain registration: registrant, administrative, technical and billing contact details required by the relevant registry, such as tzNIC for .tz domains or ICANN accredited registrars for .com, .org and similar domains
  • Projects: content, logos, images, credentials and business information you provide for web design, software development, SEO or social media management
  • Careers: CVs, cover letters and contact details submitted with job applications

4.2 Information collected automatically

  • IP address, browser type, device information, pages visited and referring pages
  • Server, email and security logs generated by the services we host
  • Cookies and similar technologies used for sessions, preferences, analytics and security
  • Spam and abuse signals, including Google reCAPTCHA responses where enabled

4.3 Information from third parties

We may receive information from domain registries, payment providers, software vendors such as Intuit, and platforms you connect to our services, such as social media accounts you ask us to manage.

5. How we use personal data and our lawful grounds

Under the PDPA we process personal data only for specific, lawful purposes. We rely on the following grounds:

  • Performance of a contract: to set up and provide the services you order, register domains, issue licences and certificates, deliver projects and provide support
  • Legal obligation: to issue invoices, keep tax and accounting records, respond to lawful requests from authorities and meet registry requirements
  • Legitimate interests: to secure our systems, prevent fraud, spam and abuse, monitor service performance and improve our services, provided your rights are not overridden
  • Consent: to send marketing messages and newsletters, and to use non-essential cookies. You can withdraw consent at any time.

We do not use your personal data for purposes that are incompatible with the purpose for which it was collected.

6. Sharing personal data

We do not sell personal data. We share it only where necessary with:

  • Domain registries and registrars, including tzNIC and ICANN accredited registrars, which may publish certain registrant details in WHOIS or RDAP directories according to their policies
  • Software and certificate vendors, such as Intuit for QuickBooks licences and certificate authorities for SSL certificates
  • Payment providers, including mobile money operators, banks and card processors
  • Infrastructure and service providers that help us run hosting, email, backups, spam filtering, monitoring, analytics and security
  • Social media and advertising platforms, where you ask us to manage your accounts or campaigns
  • Professional advisers, such as auditors and lawyers, under confidentiality obligations
  • Government and regulatory authorities, including the PDPC, TCRA, TRA, the Police and courts, where required by law

Our service providers may only use personal data according to our instructions and must protect it in line with the PDPA.

7. Transfers outside Tanzania

Some of our service providers, data centres, software vendors and domain registrars are located outside Tanzania. Where we transfer personal data outside the country, we do so in accordance with the PDPA, including by ensuring an adequate level of protection and obtaining any transfer permit required from the PDPC.

8. How long we keep personal data

  • Client account and billing records: for as long as you are a client, and afterwards for the period required by tax and accounting laws, including the Tax Administration Act
  • Hosted data, websites and email: for the duration of the service. After a service ends or is terminated for non-payment, data is permanently deleted 90 days after the due date, as described in our Terms of Service
  • Enquiries and support tickets: for as long as needed to resolve your request and maintain service history
  • Job applications: for up to 12 months, unless you ask us to delete them sooner
  • Logs: for limited operational and security periods

9. Security

We use technical and organisational measures to protect personal data, including encrypted connections, access controls, firewalls, malware scanning, backups and staff confidentiality obligations. No system is completely secure, so we cannot guarantee absolute security.

If a personal data breach occurs that is likely to affect your rights, we will notify the PDPC and affected persons as required by the PDPA and its regulations.

10. Your rights

Under the PDPA you have the right to:

  • Be informed about how your personal data is collected and used
  • Access the personal data we hold about you
  • Request correction of inaccurate or incomplete data
  • Request deletion of data that is no longer needed or was processed unlawfully
  • Object to processing, including for direct marketing
  • Withdraw consent where processing is based on consent
  • Complain to the PDPC

To exercise these rights, email Display Email with your name, contact details and the request. We may need to verify your identity before responding. Some requests may be limited by legal obligations, such as tax record retention or registry rules.

If data belongs to your own customers or users on a website or system we host for you, please direct your request to that organisation, as it is the data controller. We will assist them where required.

11. Complaints to the PDPC

If you are not satisfied with how we handle your personal data or your request, you may lodge a complaint with the Personal Data Protection Commission under the Personal Data Protection (Complaints Settlement Procedures) Regulations, 2023:

12. Children

Our website, client area and business services are intended for adults and organisations. Under the PDPA a child is a person under 18 years. We do not knowingly collect personal data from children without the consent of a parent or guardian. If you believe a child has provided personal data to us, contact us and we will delete it.

13. Cookies

We use essential cookies to keep you signed in, secure forms and remember preferences. We may also use analytics cookies to understand how our website is used. You can block or delete cookies in your browser settings, although some features, such as the client area, may not work without essential cookies.

14. Third-party websites

Our website may link to websites and services we do not control, including registries, software vendors and payment pages. Their privacy practices are governed by their own policies.

15. Changes to this Policy

We may update this Policy to reflect changes in our services or the law. The "Last updated" date above shows the latest version. For material changes, we will notify clients by email or through the client area.

16. Contact us

For questions about this Policy or our handling of personal data, contact:

17. Related policies