Last Updated: 28 July 2026
Nyumbani Marketing Firm Limited (“Nyumbani Marketing”, “we”, “us”, or “our”) respects your privacy and is committed to protecting the personal data entrusted to us.
This Privacy & Data Protection Notice explains how we collect, use, store, disclose and protect personal data when you visit our website, download our guides or resources, submit a form, contact us, subscribe to communications, request information about our services, or otherwise interact with Nyumbani Marketing.
For applicable processing activities, Nyumbani Marketing Firm Limited acts as the data controller, meaning that we determine why and how personal data is processed. Third-party service providers processing personal data on our instructions may act as data processors.
We process personal data in accordance with applicable data protection laws, including the laws and regulations of the United Republic of Tanzania and, where applicable, the European Union General Data Protection Regulation (“GDPR”).
We aim to process personal data in a manner that is lawful, fair and transparent.
In particular, we endeavour to ensure that personal data is collected for specified and legitimate purposes; limited to information reasonably necessary for those purposes; accurate and updated where appropriate; retained only for as long as necessary; protected using appropriate technical and organisational safeguards; and processed in a manner that respects the rights of data subjects.
These principles reflect those identified by Tanzania’s Personal Data Protection Commission for controllers and processors. (PDPC)
The personal data we collect depends on how you interact with us.
When you download a guidebook, submit an enquiry, request a quotation, subscribe to communications, purchase or enquire about our services, or otherwise interact with us, we may collect information such as your name, email address, telephone number, company or organisation name, job title or role, business information, service interests and information contained in communications you send to us.
When you use our website, certain technical information may also be collected automatically, such as IP address, browser type, device information, operating system, approximate location derived from technical information, referring pages, pages visited, time and date of visits, interactions with the website, and cookie or similar technology identifiers.
We do not intentionally request sensitive personal data through our guidebook download forms unless it is necessary for a specific lawful purpose.
When you request a free guide, ebook, checklist, template or other downloadable resource from Nyumbani Marketing, we may request information such as your email address and, where applicable, your name or business information.
We primarily use this information to:
deliver the requested resource;
confirm or administer your request;
communicate with you regarding the resource;
maintain appropriate records;
protect our website and forms against abuse; and
understand the general performance of our resources and marketing activities.
Receiving a free resource does not automatically require you to agree to unrelated marketing communications where separate consent is legally required.
Where we ask for consent to send promotional emails, offers, business insights or other marketing communications, that consent should be presented separately and may be withdrawn at any time.
We may collect personal data directly from you when you complete a website form, download a resource, contact us by email, telephone or messaging service, request a quotation, engage our services, subscribe to communications, interact with our campaigns or otherwise provide information to us.
We may also collect technical information automatically through our website using cookies, server logs and similar technologies.
Where permitted by law, information may also be received from legitimate third parties, business partners, publicly available business sources, platforms through which you interact with us, or service providers assisting us in operating our business.
Depending on the circumstances, we may process personal data to provide requested guides and digital resources; respond to enquiries; communicate with prospective and existing clients; provide quotations, proposals and requested services; manage customer relationships; administer contracts; provide customer support; maintain business and transaction records; improve our website, resources and services; measure website and campaign performance; maintain website security; prevent misuse or fraud; comply with legal and regulatory obligations; and establish, exercise or defend legal claims.
Where permitted by applicable law, we may also process personal data for marketing purposes, including communicating information about relevant services, resources, promotions and business opportunities.
Where applicable law requires us to identify a legal basis for processing, the basis will depend upon the purpose and circumstances.
We may process personal data based on your consent, where you have freely given permission for a particular processing activity.
Processing may also be necessary to perform a contract with you or take steps requested by you before entering into a contract.
We may process information where necessary to comply with a legal obligation applicable to Nyumbani Marketing.
Where permitted by applicable law, processing may also occur on the basis of our legitimate interests, provided those interests are not overridden by your rights and interests. Such interests may include operating and protecting our business, responding to business enquiries, improving our services and understanding the effectiveness of our business activities.
The appropriate legal basis is determined according to the specific processing activity rather than treating all information collected through the website as subject to the same basis.
We may send information about Nyumbani Marketing’s services, resources, offers, events or business insights where we have an appropriate legal basis to do so.
Where consent is required, you will be provided with a choice as to whether you wish to receive such communications.
You may unsubscribe from marketing emails at any time using the unsubscribe mechanism provided in the communication or by contacting us.
Withdrawing consent for marketing does not prevent us from sending communications necessary to provide a service you requested, administer an existing business relationship, respond to an enquiry or comply with legal obligations.
Our website may use cookies and similar technologies to operate the website, remember preferences, understand website usage, improve functionality, maintain security and, where applicable, measure advertising or marketing performance.
Some cookies may be necessary for the operation of the website, while others may be used for analytics, functionality or marketing.
Where consent is legally required for non-essential cookies or tracking technologies, such technologies should not be activated until the appropriate consent has been obtained.
Users may also be able to manage cookies through their browser settings.
Where appropriate, further details about the cookies and tracking technologies used on our website will be provided in our Cookie Policy or cookie consent interface.
We do not sell personal data.
We may disclose or provide access to personal data to trusted third parties where reasonably necessary for the purposes described in this Notice.
These may include website hosting providers, cloud and data-storage providers, email delivery providers, customer relationship management systems, website and analytics providers, professional advisers, contractors and other technology providers supporting our operations.
Where a third party processes personal data on our behalf, we expect it to process the information according to our instructions, applicable contractual obligations and applicable data protection requirements.
We may also disclose personal data where required by law, regulation, court order or lawful request from a competent authority, or where reasonably necessary to protect our legal rights or the rights and safety of others.
Some technology providers used to operate our website, communications, hosting, analytics or business systems may process or store information outside Tanzania.
Where personal data is transferred across national borders, we will seek to ensure that the transfer is carried out in accordance with applicable data protection requirements and that appropriate safeguards are used where required.
Tanzania’s PDPC expressly identifies restrictions concerning transfers of personal data abroad as part of the obligations applicable to controllers and processors. (PDPC)
Where GDPR applies, appropriate safeguards for international transfers will be implemented where required under the GDPR.
We do not intend to retain personal data indefinitely.
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including fulfilling requested services, maintaining necessary business records, complying with legal, accounting or regulatory obligations, resolving disputes and protecting or enforcing our legal rights.
Different categories of information may therefore have different retention periods.
Where personal data is no longer required and there is no lawful reason to retain it, we will take appropriate steps to delete, destroy or anonymise it.
Storage limitation is also one of the data-protection principles identified by Tanzania’s PDPC. (PDPC)
We take reasonable technical and organisational measures designed to protect personal data from unauthorised or unlawful access, processing, alteration, disclosure, loss, destruction or damage.
Depending upon the nature of the systems and information involved, these measures may include access controls, authentication mechanisms, secure website connections, appropriate system and network security, restricted administrative access, software updates, backups, staff or contractor confidentiality requirements and other reasonable security practices.
However, no website, internet transmission or electronic storage system can be guaranteed to be completely secure. Users should therefore also take reasonable precautions when communicating information electronically.
Depending upon applicable law and the circumstances of the processing, you may have rights relating to your personal data.
These may include the right to be informed about how personal data is processed; request access to personal data held about you; request correction of inaccurate or incomplete information; request erasure or destruction where applicable; request restriction of certain processing; object to certain processing; request portability where applicable; withdraw consent where processing relies upon consent; raise concerns regarding automated decision-making where applicable; and lodge a complaint concerning the processing of your personal data.
Tanzania’s PDPC lists rights including information, access, rectification, erasure/destruction, restriction, portability, objection, automated decision-making, complaint, withdrawal of consent and compensation in qualifying circumstances. (PDPC)
These rights are not necessarily absolute. A request may be subject to legal conditions, limitations or exemptions.
To exercise a right concerning personal data processed by Nyumbani Marketing, contact us using the details provided below.
Where we rely upon consent as the legal basis for processing personal data, you may withdraw that consent.
Withdrawal will apply to future processing based on that consent and does not by itself make processing undertaken before withdrawal unlawful.
For marketing emails, you may generally withdraw your consent by selecting the unsubscribe option provided in the communication or contacting us.
You may object to or opt out of receiving direct marketing communications from Nyumbani Marketing.
If you unsubscribe, we may retain limited information necessary to record your preference and ensure that we do not unintentionally add the same address back to a marketing list without an appropriate basis.
The Tanzanian PDPC expressly recognises prevention of direct marketing among data-subject protections in its current privacy guidance. (PDPC)
Nyumbani Marketing does not intend to make decisions producing legal or similarly significant effects on individuals solely through automated processing unless such processing is lawfully implemented and the required protections are provided.
We may use ordinary website analytics, segmentation or marketing tools to understand how users interact with our website and communications. Such activities will be conducted in accordance with applicable data protection requirements.
Our website may contain links to third-party websites, platforms or services.
When you leave our website and interact with another organisation, that organisation may collect and process personal data according to its own privacy practices.
Nyumbani Marketing is not responsible for the privacy practices, security or content of third-party websites that we do not control.
We encourage users to review the privacy information provided by third parties before submitting personal information to them.
Our business services and downloadable business resources are intended for persons who are legally capable of using them and, primarily, business owners, entrepreneurs and professionals.
We do not intentionally use our general business lead-generation forms to collect personal data from children for behavioural advertising or other inappropriate purposes.
Where applicable law requires parental, guardian or other lawful authorisation for processing personal data relating to a minor, we will seek to comply with those requirements.
We maintain procedures intended to identify and respond appropriately to personal data breaches.
Where a breach occurs, we will assess its nature, scope and potential impact and take reasonable steps to contain and remediate the incident.
Where notification to the Personal Data Protection Commission, affected data subjects or another competent authority is required by applicable law, we will seek to provide the required notification within the applicable legal framework.
If you believe Nyumbani Marketing has processed your personal data improperly or you have concerns about our privacy practices, we encourage you to contact us first so that we can investigate and respond to your concern.
You may also have the right to lodge a complaint with the relevant supervisory authority.
In Tanzania, complaints concerning violations of personal data protection principles may be submitted to the Personal Data Protection Commission (PDPC). (PDPC)
Personal Data Protection Commission Tanzania
Where the GDPR applies to a particular processing activity, individuals covered by the GDPR may have additional rights and protections under that Regulation.
The GDPR does not automatically apply to every Tanzanian website simply because the internet is accessible from Europe. Among other circumstances, it can apply to a controller outside the EU where processing concerns individuals in the EU and relates to offering them goods or services or monitoring their behaviour there. (EUR-Lex)
Where applicable, Nyumbani Marketing will process relevant personal data in accordance with the GDPR, including applicable requirements concerning transparency, lawful processing, data-subject rights, security, retention and international transfers.
GDPR Article 13 also requires specified information to be provided when personal data is collected directly from a data subject, including the controller’s identity and contact details and, where applicable, DPO details. (EUR-Lex)
We may update this Privacy & Data Protection Notice from time to time to reflect changes in our services, website, processing activities, technology, business practices or applicable legal and regulatory requirements.
When this Notice is updated, the revised version will be published on our website and the “Last Updated” date will be changed accordingly.
Where a material change requires additional notice or consent under applicable law, we will take appropriate steps to provide that notice or obtain such consent.
If you have questions about this Privacy Notice, how Nyumbani Marketing processes personal data, or if you wish to exercise a data-protection right, please contact:
Nyumbani Marketing Firm Limited
Sinza D (Vatcan), House No. 41
Dar es Salaam, Tanzania
Email: info@nyumbanimarketing.com
Telephone: +255 674 529 291
Data Protection Contact: [Insert DPO/privacy contact if applicable]
The competent personal data protection authority in Tanzania is the:
Personal Data Protection Commission (PDPC)
United Republic of Tanzania
The Commission provides mechanisms for individuals to raise complaints regarding personal-data processing. (PDPC)
