LegalPrivacy policy
Privacy policy
Last updated: 20 August 2026
This policy sets out how Labedan IT Solutions collects, uses, discloses and protects personal data. It applies to this website, to enquiries made to us, to our recruitment, and to the systems we build and operate for our clients.
It is written to the Personal Data Protection Act, 2022 and the regulations made under it. Labedan IT Solutions is a registered data collector and processor with the Personal Data Protection Commission of Tanzania, registration number 0-000-007-792, valid until 22 April 2031.
Who we are
Labedan IT Solutions is a software company established in Dar es Salaam, Tanzania. We build and operate business systems for companies in the insurance, logistics, construction, real estate and banking sectors.
| Registered with | Personal Data Protection Commission of Tanzania |
| Registration number | 0-000-007-792, valid until 22 April 2031 |
| Data Protection Officer | Abdulraheem Fareed Seif |
| Contact the DPO | abdulraheem.seif@labedan.solutions, +255 769 333 382 |
| Privacy enquiries | support@labedan.solutions |
| Postal | P.O. Box 3912, Dar es Salaam, Tanzania |
A Data Protection Officer is appointed as required by the Personal Data Protection Act, 2022. Any matter arising under this policy may be addressed to the Officer directly, or to support@labedan.solutions.
Our role as controller and as processor
Labedan IT Solutions acts in two distinct capacities. Which one applies determines who is accountable for the data and to whom a request under Your rights should be directed.
We act as data controller in respect of personal data whose purposes and means we determine ourselves. This includes visitors to this website, persons who contact us, applicants for employment, and the business contact details of clients, suppliers and partners. This policy governs that processing and we are accountable to you for it.
We act as data processor in respect of personal data held within a system we have built or operate on behalf of a client. Where you are a customer, tenant, policyholder, driver or employee whose details are held in such a system, the client is the data controller and we are not. We process that data only on the client’s documented instructions. A request concerning that data must be directed to the client. If you are unable to identify the relevant organisation, we will assist you in doing so, but we are not able to determine the use of that data on your behalf.
What we collect, why, and on what basis
The following applies to personal data we hold as controller. We do not collect special categories of personal data through this website, and we do not acquire contact data from third-party lists.
| What | Why we have it | Lawful basis | How long |
|---|---|---|---|
| Your name, email address and phone number, from the contact form or from writing to us | To answer you, and to keep a record of what was discussed if it becomes a project | Your consent when you send it, and our legitimate interest in replying to an enquiry addressed to us | Two years from our last contact, unless you become a client |
| What you told us in the message, including the reason for the enquiry | To understand what you need before the first call, so nobody has to repeat themselves | The same | The same |
| Business contact details of the people we work with at a client, supplier or partner | To run the relationship: delivery, support, invoicing and the things a contract requires | Performance of a contract, and our legitimate interest in running the business | For the life of the relationship and seven years after it ends, which is what tax and company law require of the records they sit in |
| Applications for a job: your name, contact details, CV, and anything else you send us | To assess an application and to run the recruitment process | Steps taken at your request before entering a contract, and our legitimate interest in recruiting | Twelve months after the role is filled, so we can come back to you about something similar, unless you ask us to delete it sooner |
| A CV sent to us without a role to apply for | To consider you for a role that opens later | Our legitimate interest in recruiting, and your request that we keep you in mind | Twenty-four months from the day we receive it, unless you ask us to delete it sooner |
| A record of your cookie choice on this site | So we do not have to ask you again on every page, and so we can show that you were asked | Legal obligation, and it is strictly necessary for the choice to mean anything | Six months, then we ask again |
| Server logs, including IP address, for requests to this site | Security, abuse prevention and diagnosing faults | Our legitimate interest in keeping the service available and safe | As short as our hosting provider allows, and never used to build a profile of you |
Data location and transfers outside Tanzania
Certain service providers engaged in the operation of this website and of our business are located outside the United Republic of Tanzania. Personal data described in this policy may accordingly be transferred outside the country.
The Personal Data Protection Act, 2022 permits such transfers only where the receiving country affords an adequate level of protection or appropriate safeguards are in place, and subject to a permit issued by the Commission. We do not transfer personal data outside Tanzania other than in accordance with those requirements. On request we will confirm where a given category of data is held.
One transfer is identified expressly. Where you consent to analytics in the cookie notice, data concerning your use of this website is transmitted to Google, which is located outside Tanzania. If you decline, no such data is transmitted and no Google script is loaded. Consent may be withdrawn at any time using the cookie settings link in the footer.
In respect of systems operated on behalf of a client, the location of the data is determined by the client and recorded in our contract with them.
Disclosure to others
We do not sell personal data and we do not disclose it for the marketing purposes of any third party. Personal data may be disclosed to the following:
- Our staff and contractors, to the extent required to perform their duties and subject to obligations of confidentiality.
- Service providers processing data on our instructions, including hosting, electronic mail and the anti-spam verification applied to our contact form. Each is bound by contract to standards equivalent to those set out in this policy.
- Google, where you have consented to analytics, and limited to data concerning the use of this website. It does not include the content of an enquiry, an application, or anything submitted through a form.
- Our professional advisers, including accountants and legal counsel, where a matter requires it.
- A public authority, where disclosure is required by law. We will notify you of any such disclosure unless prohibited from doing so.
Your rights
In respect of personal data we hold as controller, you have the following rights. No fee is charged for exercising them, and we will respond within a reasonable period.
- To be informed of the personal data we hold concerning you and the purposes for which it is processed.
- To have inaccurate or incomplete personal data corrected.
- To have personal data erased, where no continuing lawful basis for its retention exists.
- To restrict or prevent processing that is causing or is likely to cause substantial damage or distress.
- To object to processing, including profiling for the purposes of commercial advertising.
- To object to a decision taken solely by automated means where that decision significantly affects you. We do not take decisions on that basis, but the right subsists.
- To withdraw consent, where consent is the basis relied upon. Withdrawal does not affect the lawfulness of processing carried out before it.
To exercise any of these rights, write to support@labedan.solutions or to the Data Protection Officer. We may first require verification of your identity before acting on a request.
Security
We apply technical and organisational measures appropriate to the sensitivity of the data and to the risk to the data subject in the event of its disclosure. These include access restricted to those who require it, encryption in transit, separation of client environments, and logging of actions taken. These measures are subject to periodic review.
No system can be guaranteed secure. In the event of a breach affecting personal data we hold as controller, we notify the Commission promptly and inform the data subjects concerned where the breach is likely to result in harm to them. In respect of a system operated on behalf of a client, we notify the client without undue delay so that it may discharge its own obligations.
Children
This website is directed at businesses and no part of it is intended for children. We do not knowingly collect personal data from a child. If you believe that we have done so, notify us and the data will be erased.
Complaints
A complaint concerning our handling of personal data may be made to support@labedan.solutions or to the Data Protection Officer. We will investigate and inform you of the outcome.
You have the right to lodge a complaint with the Personal Data Protection Commission of Tanzania. That right is not affected by this policy and you are not required to contact us first. Under the Personal Data Protection (Complaints Settlement Procedures) Regulations, 2023 the Commission summons the respondent within seven days of accepting a complaint and attempts mediation within thirty days.
Changes to this policy
This policy is amended when our processing changes. The date shown above is the date of the current version. Where an amendment materially affects data subjects, that fact will be stated on this page.