Pamojaby Protend
Back to Pamoja

Privacy Notice

Last updated: 21 July 2026

This notice explains how Pamoja handles personal data. The organization providing your account may be the data controller for information it enters, while Protend may process that information to provide Pamoja.

1. Information we process

Depending on your use, data may include identity and contact details, NIDA-related information, date of birth, location, occupation, organization and group relationships, account activity, documents, device/security information, approvals, and transaction records.

2. Why we use information

We process data to create and secure accounts, provide requested platform functions, apply permissions, maintain records and audit history, send important notices, prevent abuse, support users, improve reliability, and comply with applicable obligations.

3. Controller and processor roles

Organizations generally determine why their member, staff, group, and operational data is used and may act as data controllers. Protend processes such data to operate Pamoja under their instructions, while acting as controller for limited account, security, billing, and service-administration data where appropriate.

4. Sharing

We do not sell personal data. Data may be shared with the organization connected to your account, authorized users according to their scope, vetted infrastructure and communication providers, professional advisers, or authorities where required by law. Providers receive only the access needed for their service.

5. Security and retention

We use access controls, encryption in transit, credential hashing, audit records, tenant separation, backups, and monitoring appropriate to the service. No system is completely risk-free. We retain data only as long as needed for the stated purposes, contractual obligations, security, disputes, financial/audit integrity, and applicable law.

6. Your choices and rights

Subject to applicable law, you may request information about processing, access, correction, deletion where appropriate, restriction, portability, objection, withdrawal of consent where consent applies, and review of automated decisions. You may also complain to the relevant organization or Tanzania’s Personal Data Protection Commission.

7. Cookies and communications

Pamoja uses essential session and security cookies. Transactional messages include verification, password reset, invitations, receipts, security alerts, and important service information. Optional communications will provide suitable preference controls.

8. Contact and changes

Contact privacy@protend.com for privacy questions. We may update this notice as the service or law changes and will identify the effective date. This notice should be reviewed by qualified Tanzanian counsel and the organization’s data-protection lead before public production use.