Labedan Privacy Statement
Welcome to the Labedan IT Solutions Privacy Statement.
Labedan IT Solutions (“Labedan”, “we”, “us”, “our”) recognises the importance of protecting personal data and respecting the privacy rights of individuals. We treat all personal information as private and confidential and are committed to processing personal data in accordance with the Personal Data Protection Act, No. 11 of 2022 of the United Republic of Tanzania, and other applicable laws.
This Privacy Statement explains how and why we collect, use, store, share, and protect personal data in the course of our business as a technology and software services provider.
2. How and Why We Collect Personal Information
2.1 What is Personal Data
Personal data means any information relating to an identified or identifiable natural person. The personal data we process depends on the nature of our relationship with you (client, employee, partner, supplier, or system user).
2.2 Categories of Personal Data We Process
We may collect, use, store, and transfer the following categories of personal data:
Identification information
Name, date and place of birth
National ID or passport number
Tax Identification Number (TIN)
Contact information
Email address
Telephone number
Physical, residential, or postal address
Business and professional information
Company name, role or position
Employer details
Nature of business operations
Financial and transactional information
Bank account details
Payment records and invoices
Mobile money or payment confirmations
Contractual payment information
Employment-related information
CVs, employment history, qualifications
Payroll and statutory contribution details
Performance and administrative records
System and technical data
Usernames, access credentials
IP addresses, login records
Device, browser, and usage logs
Audit logs and security monitoring data
Project and service-related information
Information provided for system development, hosting, support, or consulting services
Data processed on behalf of clients under contractual instructions
Sensitive personal data
Processed only where legally permitted and strictly necessary (e.g. next of kin details, contractual beneficiaries, or compliance-related records).
3. Information Relating to Third Parties
Where you provide personal data relating to another individual (for example, an employee, customer, or authorized user), you are responsible for ensuring that such person is aware of and consents to the provision of their information to us, where required by law.
4. How We Collect Personal Data
4.1 Data Collected Directly from You
We may collect personal data directly from you when you:
Enter into contracts with us
Request software, cloud, or consulting services
Communicate with us via email, phone, or meetings
Apply for employment or consultancy roles
Act as a supplier, contractor, or partner
Use systems or platforms we develop or manage
4.2 Data Collected from Third Parties
We may also receive personal data from:
Government institutions and regulators
Business registration authorities
Employers or clients who engage us
Payment providers and financial institutions
Technology partners and service providers
Publicly available sources where lawful
5. Use of Personal Information
We process personal data only where permitted by law and for legitimate purposes, including:
Performing contracts and delivering IT services
System development, hosting, maintenance, and support
Client onboarding, administration, and communication
Employment administration and human resource management
Legal, regulatory, and tax compliance
Fraud prevention, security monitoring, and risk management
Improving our services, systems, and internal operations
Exercising or defending legal rights
Marketing our services (where consent is provided and opt-out is available)
6. Retention and Disposal of Personal Data
We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, including where retention is:
Required or authorised by law
Necessary for contractual, legal, or regulatory obligations
Required for dispute resolution or potential litigation
Required for audit, security, or compliance purposes
Data is securely deleted or anonymised once no longer required.
7. Data Accuracy and Access
We take reasonable steps to ensure that personal data is accurate, complete, and up to date. Individuals are encouraged to notify us of any changes to their personal information.
8. Disclosure of Personal Data to Third Parties
Subject to applicable laws, personal data may be shared with:
Our employees and authorized personnel
Trusted service providers and technology partners
Cloud hosting and infrastructure providers
Auditors, legal advisers, and professional consultants
Financial institutions and payment processors
Regulatory authorities and government bodies where required by law
Clients, where we process data under contractual instructions
We do not sell personal data.
9. Data Security
We implement appropriate technical and organisational security measures, including:
Access controls and role-based permissions
Secure servers and encrypted communications
Regular backups and monitoring
Confidentiality obligations for staff and contractors
We maintain procedures to detect, manage, and report personal data breaches in accordance with applicable laws.
10. Cross-Border Transfer of Personal Data
Where personal data is processed or stored outside Tanzania, we ensure that adequate safeguards are in place to protect personal data in line with the Personal Data Protection Act, 2022.
11. Rights of Data Subjects
Under Tanzanian law, you have the right to:
Request access to your personal data
Request correction of inaccurate or misleading data
Object to certain processing activities
Request deletion where legally permissible
Lodge a complaint with the relevant authority
12. Automated Decision-Making
Where legally permitted, certain automated processes may be used for system security, access control, or operational efficiency. Individuals have the right to request clarification regarding such decisions where applicable.
13. Changes to This Privacy Statement
We may update this Privacy Statement from time to time to reflect changes in law, technology, or business practices. The most current version will apply.
14. Contact Information
For questions, concerns, or requests relating to personal data, please contact:
Labedan IT Solutions
Email: info@labedan.solutions
Location: United Republic of Tanzania