Privacy Policy

This Privacy Policy explains how UzaDigit collects, uses, protects, shares, and retains Personal Data when you use our website, mobile applications, dashboards, and related services. UzaDigit is operated by BK Networks Co. Ltd.

1. WHO WE ARE

UzaDigit is a digital business-management platform for SMEs and other business users, operated by BK Networks Co. Ltd, a company registered in the United Republic of Tanzania under Registration No. 131127 and located at Sinza Kijiweni, Dar es Salaam.

For this Privacy Policy, “UzaDigit”, “we”, “us” or “our” means BK Networks Co. Ltd as the legal entity operating the UzaDigit platform.

2. KEY DEFINITIONS

“You” or “your” means the individual who uses our Services or whose Personal Data is processed through them. “Business” means a company, entrepreneur, organisation or other entity using UzaDigit. “Services” means our website, mobile applications, dashboards, software and related tools. “Personal Data” means information relating to an identified or identifiable individual. “Content” means information entered, uploaded or generated through the Services.

Where UzaDigit determines why and how Personal Data is processed, we may act as a data controller. Where we process Personal Data on behalf of a Business using UzaDigit, we may act as a data processor.

3. TANZANIA DATA-PROTECTION FRAMEWORK

We seek to process Personal Data in accordance with applicable laws of the United Republic of Tanzania, including the Personal Data Protection Act, 2022 (Act No. 11 of 2022), now cited as the Personal Data Protection Act, Cap. 44, and the Personal Data Protection (Personal Data Collection and Processing) Regulations, 2023 (GN No. 449C of 2023).

The Personal Data Protection Commission (PDPC) is the regulator responsible for overseeing and enforcing Tanzania’s data-protection framework. Where registration, permits, notices, assessments or other regulatory steps are required, UzaDigit will take the applicable steps before carrying out the relevant processing activity.

Our privacy principle

We collect and use only the information reasonably needed to provide, secure, and improve UzaDigit, meet legal obligations, and deliver features you choose to use.

4. INFORMATION WE COLLECT

We may collect Account and profile information such as your name, telephone number, email address, role, Business name and location. When you use UzaDigit, you or your authorised users may also enter operational information such as sales, inventory, expenses, invoices, customer or supplier records, employee or agent records and Business reports.

We may automatically collect technical information such as device type, operating system, app version, IP address, login activity, screens or features used, error logs and approximate location derived from technical information. Where a feature requires precise device location or additional verification information, we will request it only where needed and subject to applicable permissions.

If you pay for a Subscription, we may receive billing information, payment status and transaction references. Full card or mobile-money credentials are normally processed by the relevant payment provider, not stored by UzaDigit unless expressly required and lawfully permitted.

5. WHY WE USE PERSONAL DATA

We use Personal Data to create and manage Accounts, provide dashboards and reports, process Subscriptions, operate Business-management features, provide customer support, secure the Services, prevent fraud, communicate important Service notices and improve platform performance.

Where permitted by law, we may also use contact information for product updates, training opportunities or other marketing communications. You may opt out of non-essential marketing at any time.

6. LEGAL BASIS FOR PROCESSING

Depending on the activity, we may process Personal Data because it is necessary to provide the Services or perform a contract, because you have given consent, because processing is required by law, or because we have a legitimate interest that does not override your rights. Where consent is required, you may withdraw it subject to applicable law.

7. BUSINESS DATA AND THIRD-PARTY INFORMATION

A Business may use UzaDigit to store information about its customers, employees, agents, suppliers or other persons. The Business is responsible for ensuring it has the legal authority or other lawful basis to collect and enter that information into UzaDigit. We process such information only as permitted by law, the applicable agreement and authorised instructions.

8. HOW WE SHARE INFORMATION

We do not sell Personal Data. We may share information with trusted service providers that support hosting, security, analytics, communications, customer support, verification or payment processing. We may also share relevant information with a third-party integration or financing partner when you choose to use that feature and an appropriate lawful basis or permission exists.

We may disclose information where required by law, court order or a competent authority, or where reasonably necessary to protect users, prevent fraud, enforce legal rights or protect the security and integrity of UzaDigit.

9. PAYMENTS, KYC AND FINANCING FEATURES

Certain optional features may require payment verification, identity or Business verification, KYC information, credit-readiness data or other information relevant to a financing workflow. We will request such information only where necessary and will explain the purpose where appropriate.

A credit-readiness score, report or Business insight generated by UzaDigit is not a guarantee of financing. Any lender or financing partner makes its own independent decision under its own legal and regulatory responsibilities.

10. AUTOMATED PROCESSING AND PROFILING

UzaDigit may use automated rules or analytics to generate Business insights, forecasts, alerts, recommendations or credit-readiness indicators. Where automated processing has a significant legal or similar effect on an individual, we will apply the safeguards required by applicable law, including relevant rights to information, objection or review where applicable.

11. INTERNATIONAL DATA TRANSFERS

Some cloud or technology providers may process information outside Tanzania. Where Personal Data is transferred outside the country, we will apply appropriate contractual, technical and organisational safeguards and obtain any permission or cross-border transfer permit required by the Personal Data Protection Act, Cap. 44, the 2023 Regulations and the PDPC.

12. DATA RETENTION

We keep Personal Data only for as long as reasonably necessary to provide the Services, comply with legal, tax, accounting, audit and regulatory obligations, resolve disputes, prevent fraud and maintain security. When information is no longer required, we may securely delete, destroy or anonymise it, subject to lawful retention requirements and backup cycles.

13. SECURITY

We use reasonable technical and organisational safeguards designed to protect Personal Data and confidential Business information. These may include access controls, authentication, role-based permissions, encryption in transit, backups, monitoring, logging and incident-management procedures.

No online system can be guaranteed to be completely secure. You are also responsible for protecting your credentials, controlling authorised users and notifying us promptly if you suspect unauthorised access.

14. PERSONAL DATA BREACHES

If we become aware of a Personal Data breach, we will investigate and take reasonable steps to contain and remediate the incident. We will notify the PDPC, affected persons or other authorities where notification is required by applicable law.

15. YOUR RIGHTS UNDER TANZANIA LAW

Subject to the Personal Data Protection Act, Cap. 44 and applicable Regulations, you may have rights to be informed, access your Personal Data, request correction, request erasure or destruction, restrict processing, receive or transfer certain data, object to processing, withdraw consent, challenge certain automated decisions, complain about processing and seek other remedies available under law.

To exercise a privacy right, contact privacy@uzadigit.co.tz. We may need to verify your identity before completing a request, and some rights may be limited where continued processing or retention is required by law.

16. COOKIES AND SIMILAR TECHNOLOGIES

Our website or applications may use cookies, SDKs, local storage and similar technologies to maintain sessions, remember preferences, improve performance, analyse usage and strengthen security. Where required, we will seek consent before using non-essential tracking technologies. Additional information may be provided in our Cookie Policy.

17. CHILDREN

UzaDigit is intended for business and professional use and is not designed for children under 18. If you believe a child’s Personal Data has been provided to us without appropriate authority, contact privacy@uzadigit.co.tz.

18. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy to reflect changes in our Services, technology, Business practices or applicable law. We will update the “Last Updated” date and, where changes are material, provide reasonable notice through the website, application, email or another appropriate channel.

19. CONTACT AND COMPLAINTS

For privacy questions, requests or complaints, contact the UzaDigit Privacy Team at privacy@uzadigit.co.tz. For general support, contact support@uzadigit.co.tz.

You may also have the right to lodge a complaint with the Personal Data Protection Commission (PDPC) in Tanzania, subject to the Personal Data Protection Act, Cap. 44 and applicable Regulations.

20. LEGAL ENTITY INFORMATION

UzaDigit is operated by BK Networks Co. Ltd, Registration No. 131127, located at Sinza Kijiweni, Dar es Salaam, United Republic of Tanzania. Privacy: privacy@uzadigit.co.tz.  Support: support@uzadigit.co.tz. 

Privacy commitment

Your Business. Your Data. Better Decisions. UzaDigit is committed to responsible data use, security, and transparency.