Privacy Policy

1. Introduction

ShopKeeper ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our point-of-sale and retail management platform (the "Service"). This policy complies with the Tanzania Data Protection Act, 2022 and incorporates GDPR principles.

2. Data Controller

The data controller responsible for your personal data is ShopKeeper Ltd, registered in the United Republic of Tanzania. For any privacy-related inquiries, contact us at privacy@shopkeeper.co.tz.

3. Personal Data We Collect

We collect the following categories of personal data:

• Account Information: name, email, phone number
• Business Information: business name, address, type
• Transaction Data: sales records, payment information
• Device Information: browser type, IP address
• Usage Data: pages visited, features used

4. Purpose of Processing

We process your personal data for the following purposes: to provide and maintain the Service, to process transactions and manage subscriptions, to communicate with you about your account, to improve our products and services, to comply with legal obligations, and to detect and prevent fraud.

5. Legal Basis for Processing

We process your data based on:

• Consent: you have given clear consent for us to process your data
• Contract: processing is necessary for our contract with you
• Legal Obligation: we must process data to comply with the law
• Legitimate Interest: processing is necessary for our legitimate business interests

6. Data Sharing

We may share your data with: Payment processors (for transaction processing), SMS gateway providers (for communication), Cloud infrastructure providers (for hosting), Analytics services (for improving our service), and Law enforcement (when required by law). We do not sell your personal data to third parties.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. Transaction records are retained for 7 years for tax and legal compliance. Audit logs are retained for 1 year. You may request deletion of your data at any time.

8. Your Rights

Under the Tanzania Data Protection Act and GDPR principles, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Request deletion of your data
• Restrict processing of your data
• Data portability
• Object to processing
• Withdraw consent at any time

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (TLS) and at rest, access controls, regular security audits, and employee training on data protection.

10. Data Breach Notification

In the event of a personal data breach, we will notify the Tanzania Personal Data Protection Commission within 72 hours and affected data subjects without undue delay, as required by the Tanzania Data Protection Act, 2022.

11. International Data Transfers

Some of our service providers may be located outside Tanzania. When we transfer data internationally, we ensure appropriate safeguards are in place, including standard contractual clauses and adequacy decisions.

12. Children's Privacy

Our Service is not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

• Email: privacy@shopkeeper.co.tz
• Address: Dar es Salaam, Tanzania