1. Introduction
Bio Pamoja respects privacy and aims to process personal information lawfully, fairly, securely, and transparently in accordance with applicable Tanzanian data-protection requirements.
2. Information we collect
- Account information such as names, email addresses, phone numbers, roles, and passwords in protected form.
- Facility and supplier business information, registration details, contacts, and locations.
- Engineer qualifications, uploaded certificates, experience, specializations, availability, and optional location information.
- Equipment records, images, maintenance and calibration dates, service requests, reports, quotations, and orders.
- Technical information needed for security and operation, such as session cookies and basic request logs.
3. How we use information
Information is used to create and verify accounts, provide dashboards, match facilities with engineers, manage equipment and service records, operate the marketplace, communicate account or service updates, prevent misuse, and comply with legal obligations.
When an engineer voluntarily enables distance matching, precise coordinates are used privately to calculate an approximate distance from a facility. Coordinates are not displayed to facilities, location is not tracked continuously, and the engineer can disable sharing and erase the saved coordinates.
4. Legal basis
Depending on the activity, processing may be necessary to provide the requested service, meet a legal obligation, protect legitimate platform and user interests, or act with consent where consent is required.
5. When information is shared
Relevant information may be shown to other approved platform users when needed to complete a request, assignment, quotation, or order. Contact details are limited where the workflow requires privacy. Information may also be disclosed to service providers or authorities when lawfully necessary.
Bio Pamoja does not sell personal information.
6. Storage, security, and retention
Bio Pamoja uses reasonable organizational and technical safeguards such as authenticated access, role restrictions, and protected account credentials. Information is kept only as long as necessary for platform operation, record keeping, safety, dispute handling, or legal obligations.
- Registrations that never verify their email: 30 days.
- Expired facility invitations: 90 days after expiry.
- Read in-app notifications: 12 months.
- Short-lived login security counters: 30 days.
- Active profile information: while the account remains active and afterwards only where necessary.
- Equipment, service, order, quotation, payment and privacy-request records: retained for applicable safety, contractual, accounting, regulatory and dispute requirements. These records require review before deletion and may be anonymised where appropriate.
When an applicable period ends, information is securely deleted or anonymised unless a legal obligation, active dispute, fraud investigation, safety requirement or other lawful reason requires continued retention.
7. Your rights
Subject to applicable law, you may request access to your personal information, correction of inaccurate information, deletion where appropriate, restriction or objection to certain processing, or withdrawal of consent. You may also raise a concern with Tanzania’s Personal Data Protection Commission.
Registered users can sign in and submit a privacy request securely from their account. You may also use the contact address below.
9. Policy updates
This policy may change as Bio Pamoja develops or legal requirements change. The effective date will be updated, and significant changes may be communicated to registered users.
10. Contact
Privacy questions and requests can be sent to biopamoja@gmail.com.