Legal

Data Protection Policy

Effective as of January 22, 2025

At-a-glance

We process personal information lawfully, fairly, and securely in line with Tanzania's Personal Data Protection Act, 2022, and applicable international requirements.

You have rights to access, correct, delete, restrict, object to processing, and request data portability. Contact support@nedapay.xyz to exercise these rights.

1. Purpose

This Data Protection Policy ("Policy") sets out NEDA LABS LTD's ("Company", "NEDApay", "we", "us", or "our") commitment to protecting the privacy, confidentiality, integrity, and security of personal data collected, processed, stored, transmitted, or otherwise handled during its business operations.

The Company recognizes the importance of personal data protection and is committed to ensuring that personal data is processed lawfully, fairly, transparently, and securely.

This Policy is implemented in accordance with the Personal Data Protection Act, 2022 of the United Republic of Tanzania, its associated Regulations, and other applicable legal, regulatory, and contractual requirements relating to privacy and data protection. Where the Company processes personal data originating from other jurisdictions, it shall take reasonable measures to comply with applicable international data protection requirements to the extent required by law.

2. Scope

This Policy applies to all personal information that we collect, use, disclose, and otherwise process in connection with our business operations. This includes personal information that we collect from you directly, as well as personal information that we collect from third parties.

Controller: NEDA Labs Ltd., 9th Floor, Tan House, Victoria, Dar es Salaam.
Contact: support@nedapay.xyz.

3. Definitions

Personal information: Any information that can be used to identify an individual, either directly or indirectly.
Processing: Any operation or set of operations performed on personal information, whether or not by automated means, such as collection, use, disclosure, and storage.
Data controller: The entity that determines the purposes and means of processing personal information.
Data processor: A natural or legal person, public authority, agency or other body which processes personal information on behalf of the controller.
Data subject: The individual to whom the personal information relates.

4. Data Protection Principles

We will process your personal information in accordance with the following data protection principles:

Lawfulness, fairness, and transparency: We will only process your personal information in a lawful, fair, and transparent manner.
Purpose limitation: We will only process your personal information for specified, explicit, and legitimate purposes.
Data minimization: We will only collect and process the personal information that is necessary for the purposes for which it is processed.
Accuracy: We will take reasonable steps to ensure that your personal information is accurate and up to date.
Storage limitation: We will only store your personal information for as long as is necessary for the purposes for which it is processed.
Integrity and confidentiality: We will take appropriate technical and organizational measures to protect your personal information from unauthorized access, use, disclosure, or destruction.

5. Data Collection

We collect personal information from you in a variety of ways, including:

When you provide it to us directly, such as when you create an account, contact us with a question, or submit a form.
When you use our website or mobile app.
When you interact with us on social media.
When we receive it from third parties, such as our business partners or service providers.

The types of personal information that we collect may include:

Your name, email address, and phone number.
Your billing and shipping address.
Your credit card or other payment information.
Your job title and company name.
Your social media profile information.
Your IP address and other technical information about your device.

6. Data Use

We use your personal information for a variety of purposes, including:

To provide you with our products and services.
To communicate with you about your account and our products and services.
To process your payments.
To personalize your experience on our website and mobile app.
To improve our products and services.
To conduct market research.
To comply with applicable laws and regulations.

8. Data Security

We take reasonable steps to protect your personal information from unauthorized access, use, disclosure, or destruction. We use a variety of security measures, including:

Encryption
Access controls
Physical security measures
Regular security audits

9. Data Retention

We will retain your personal information for as long as is necessary for the purposes for which it is processed. We will also retain your personal information as required by applicable law.

10. Your Rights

You have the following rights with respect to your personal information:

The right to access your personal information.
The right to correct your personal information.
The right to delete your personal information.
The right to restrict the processing of your personal information.
The right to object to the processing of your personal information.
The right to data portability.

You can exercise your rights by contacting us at support@nedapay.xyz.

11. Children's Privacy

We do not knowingly collect personal information from children under the age of 18. If you are a parent or guardian and you believe that your child has provided us with personal information, please contact us at support@nedapay.xyz.

12. Changes to This Policy

We may update this Policy from time to time. We will notify you of any changes by posting the new Policy on our website.

13. Contact Us

If you have any questions about this Policy, please contact us at support@nedapay.xyz.

NEDA Labs Ltd.
9th Floor, Tan House, Victoria, Dar es Salaam