Privacy Policy & PDPA Notice
Compliant with the Tanzania Personal Data Protection Act (PDPA), 2022
Effective: August 2026 ยท Last updated: 24 August 2026
1. Data Categories We Collect
To provide intra-city parcel delivery services, parcelflow collects the following personal data:
- Full name and phone number (for account creation and delivery coordination)
- Email address (for account management and communications)
- Delivery addresses and GPS coordinates (for routing and tracking)
- Payment reference IDs and transaction history (for billing and earnings settlement)
- Vehicle details and licence information (for courier partners only)
- Consent records including timestamp and IP address
2. Purpose of Processing
Your data is processed solely for the following purposes:
- Routing and fulfilling delivery orders
- Disbursing courier earnings
- Providing customer support
- Complying with TCRA and TRA regulatory requirements
- Sending service-related notifications (order status, delivery confirmations)
3. Legal Basis for Processing
We process personal data under the following legal bases as defined by the Tanzania PDPA 2022:
- Consent: You explicitly agree to data processing when creating an account and ticking the consent checkbox.
- Contractual necessity: Processing required to fulfil the delivery service you request.
- Legal obligation: Data retention required by Tanzanian tax and telecommunications regulations.
4. Data Protection Officer (DPO)
For data access, correction, or deletion requests, contact our designated Data Protection Officer:
We will respond to all DPO requests within 30 business days as required by PDPA 2022.
5. Data Retention
Personal data is retained for the duration of your active account plus 12 months after account closure. Transaction records are retained for 7 years as required by Tanzanian tax law.
6. Data Sharing
We do not sell your personal data. Data is shared only with:
- Assigned couriers (delivery address and contact details for fulfilment)
- Payment processors (for transaction settlement)
- Regulatory authorities (when legally required)
7. Your Rights
Under the PDPA 2022, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your personal data
- Withdraw consent at any time (account deletion: how to delete your account)
- Lodge a complaint with the Tanzanian data protection authority
8. Contact
Questions about this privacy policy? Email privacy@parcelflow.co.tz.