0
Your Cart

Privacy Policy

1. Introduction

This Privacy Policy explains how Pendeza (“the App”), operated by Pendeza Ventures (“we”, “us”, or “our”), collects, uses, discloses, and protects your personal information when you use our mobile application and related services.

By accessing or using Pendeza, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of the App.

This Privacy Policy applies to all users of Pendeza, including customers browsing or purchasing fashion products, users renting products, and suppliers who register to provide products through the platform.

2. Information We Collect

We collect different types of information to enable account creation, product browsing, order processing, supplier onboarding, and secure payments. The information we collect includes the following:

2.1 Information You Provide Directly

a. Registration Information

When you create an account on Pendeza (optional for browsing), we collect:

  • Phone number or email address
  • Password

b. Profile Information

To personalize your experience, you may provide:

  • Full name
  • Gender
  • Profile photo (optional)

This information helps us manage your account, personalize recommendations, and assist with customer support.

c. Supplier Information

Suppliers applying to list and rent/sell products on Pendeza must provide:

  • Business licence or proof of business registration

This is used solely to verify supplier identity and compliance.

d. Payment Information

During checkout, customers may provide:

  • Mobile money number (for PawaPay or similar processors)

This information is NOT stored on our servers. It is transmitted securely to third-party payment processors solely for completing the transaction.

d. Location Adrress
For del

2.2 Information Collected Automatically

At this time, we do not collect any information automatically such as device data, IP addresses, or location.

However, we may introduce Google Analytics in the future to understand usage patterns and improve user experience. If implemented, we will update this section accordingly.

2.3 Cookies and Tracking Technologies

We use cookies and similar technologies for:

  • Future analytics (Google Analytics)
  • Improving app performance
  • Understanding how users interact with the app

These technologies do not store personal data unless you provide it. You may adjust your device or browser settings to limit cookie usage.

2.2 Device Permissions We Request

To provide the core functionality of the Pendeza app, we may request access to certain device features. These permissions are used only when necessary and never for background or unauthorized purposes.

a. Camera Access

We request access to your device’s camera only when you choose to upload or update your profile photo.

  • The camera is not used automatically.
  • We do not record, store, or access any images unless you intentionally submit them.

b. Location Access

We request your precise location only to help you:

  • Autofill or verify your delivery address
  • Improve delivery accuracy
    Location data is used temporarily for the selected feature and is not stored without your consent.

3. How We Use Your Information (Expanded & Highly Detailed)

We use your information to operate, maintain, and improve the Pendeza platform. Below is a comprehensive breakdown of how and why each type of data is used.

3.1 To Create, Maintain, and Manage User Accounts

We use the registration information you provide (phone number/email and password) to:

  • Create your account and link it to your activity on the app
  • Authenticate your identity when you log in to ensure only you can access your account
  • Allow you to update your profile and manage your personal details
  • Personalize your experience, such as remembering your preferences and tailoring product recommendations
  • Provide access to restricted features, including checkout, order history, item rentals, favorite items, and supplier dashboards

If you choose not to create an account, you can still browse products, but certain actions will remain unavailable.

3.2 To Process Orders, Rentals, and Deliveries

When you purchase or rent a product, we use the information you submit to:

  • Confirm your order or rental request
  • Generate invoices, receipts, and transactional notifications
  • Facilitate communication between you and suppliers when needed
  • Manage delivery or pickup details, depending on the service model
  • Track order progress and update you on its status (processing, shipped, delivered, completed, returned, cancelled)
  • Maintain records of completed transactions for accounting and support
  • Resolve disputes or issues, such as damaged items or failed deliveries

These actions are essential for the operation of a functional e-commerce and rental platform.

3.3 To Facilitate and Verify Payments

During checkout, you may enter a mobile money number or card information. We use this information solely to:

  • Initiate the payment request through third-party payment processors
  • Verify payment authorization
  • Confirm whether the transaction was successful or declined
  • Handle refunds, partial payments, and failed transactions

Important:

  • We do not store mobile money numbers, card numbers, or security codes.
  • All sensitive payment data is handled by secure third-party partners such as PawaPay and PesaPal.
  • We may receive limited information from these providers (e.g., payment success status, reference codes) to complete and record your order.

3.4 To Communicate With You

We use your contact information to send:

a. Operational Communications

  • Account verification messages
  • Password reset and security alerts
  • Order confirmations and receipts
  • Payment status updates
  • Delivery or rental notifications
  • Supplier approvals and account notices

b. Customer Support Communications

  • Responses to your inquiries
  • Assistance with order issues, disputes, and returns
  • Clarification on product or supplier questions

c. Marketing and Promotional Messages

(Optional and based on your consent)

  • New product updates
  • Special offers and promotions
  • Notifications about new suppliers or features

You may opt out of marketing communications at any time while still receiving essential operational messages.

3.5 To Improve, Develop, and Optimize the App

We use general usage information and feedback to:

  • Enhance user interface and app design
  • Improve product search and discovery features
  • Recommend products based on your browsing or purchase patterns
  • Detect app performance issues, crashes, or bugs
  • Develop new features or refine existing ones
  • Analyze patterns in purchasing, browsing, or rental behavior
  • Measure and improve supplier performance

If and when Google Analytics is implemented, anonymous usage data may help us better understand how users interact with the app.

3.6 For Fraud Prevention, Security, and Legal Compliance

We use certain information to maintain a safe and trustworthy environment:

  • Verify the legitimacy of supplier businesses using submitted licences
  • Detect suspicious activities, such as multiple failed payments or account misuse
  • Secure the app against unauthorized access or security threats
  • Comply with financial regulations, tax laws, and anti-fraud requirements
  • Respond to legal requests, such as court orders or regulatory inquiries
  • Protect our rights, users, suppliers, and business partners

These measures help maintain integrity, safety, and legal compliance across all services.

4. Sharing of Information

We do not sell, rent, or share your personal information with third parties for advertising or commercial gain. However, to operate the Pendeza platform effectively and securely, we may share certain information with trusted service providers and under specific lawful circumstances. Below is a detailed explanation of all scenarios where data sharing may occur.

4.1 Sharing With Payment Processors

To complete financial transactions securely, we share limited information with our payment partners:

Payment Providers Used:

  • PawaPay – for mobile money payments
  • PesaPal – for card payments and alternative payment methods

Information Shared:

  • Mobile money number (entered at checkout)
  • Transaction amount
  • Payment reference or order ID
  • Payment status (success, failure, pending)

Important Notes:

  • We never store card details or mobile money numbers.
  • Payment processors may collect additional information required to process your payment, and they handle it under their own privacy policies.
  • We only receive non-sensitive confirmation details (e.g., “payment successful”).

4.2 Sharing With Suppliers (When Necessary)

If the nature of your order or rental requires coordination with a supplier, we may share limited information to ensure proper service delivery. This may include:

  • Your name
  • Contact information (if required for delivery or verification)
  • Order or rental details

We do not give suppliers access to your full profile or account data unless it is essential for fulfilling your order.

4.3 Sharing With Delivery or Logistics Partners (If Applicable)

If Pendeza or its suppliers arrange delivery, certain information may be shared with delivery providers:

  • Delivery name
  • Delivery address
  • Phone number for coordination
  • Package details (non-sensitive)

This ensures successful pickup and delivery of products.

4.4 Sharing for Legal, Safety, or Regulatory Reasons

We may disclose information if required by law or necessary to protect users, our platform, and our business operations. This includes:

  • Compliance with court orders, subpoenas, or government requests
  • Detecting and preventing fraud, unauthorized transactions, or misuse
  • Protecting the rights, property, and safety of users or the company
  • Investigating violations of our Terms and Conditions

We always aim to limit disclosures to the minimum amount needed for legal compliance.

4.5 Sharing With Service Providers and Technical Partners

We may work with third-party vendors who help us operate the platform. These may include:

  • Cloud hosting providers
  • Email/SMS communication services
  • Customer support tools
  • Future analytics providers (e.g., Google Analytics)

These partners may process data strictly on our behalf and are required to follow confidentiality and security standards.

4.6 Business Transfers

If Pendeza undergoes a business change such as a merger, acquisition, or asset sale, user information may be transferred to the new entity as part of the transaction. In such cases:

  • The new entity will be required to honor this Privacy Policy or a similar standard.
  • You will be notified if ownership or control of your information changes.

5. Payments and Financial Data

This section explains in detail how payment information is handled on Pendeza, what data is collected during payment, how it is protected, and the roles of third-party processors. Because financial data is highly sensitive, we follow strict standards to ensure safety and compliance.

5.1 How Payments Are Processed

Pendeza supports two types of payments:

a. Mobile Money Payments

Processed through PawaPay or similar secure payment gateways.

b. Card Payments

Processed through PesaPal, which handles card transactions and alternative payment methods.

These third-party processors are responsible for handling the actual financial transaction. Pendeza does not store or process sensitive financial data directly.

5.2 What Payment Information We Collect

During the checkout process, you may be required to provide:

For Mobile Money Payments:

  • Mobile money phone number
  • Payment authorization confirmation (e.g., mobile prompt)

For Card Payments (via PesaPal):

  • Card details entered on PesaPal’s secure interface
  • Required verification information (e.g., OTP)

What Pendeza Receives:

Pendeza only receives:

  • Payment status (successful / failed / pending)
  • A transaction reference or confirmation code
  • Payment amount
  • Timestamp of the transaction

We do not receive or store:

  • Your card number
  • Mobile money balance
  • PIN, CVV, password, or authorization codes

5.3 How Financial Data Is Protected

Data Security Measures:

  • All payment information is transmitted through encrypted channels (SSL/TLS).
  • Payment processors are PCI-DSS compliant, meaning they follow international standards for secure card transactions.
  • Pendeza servers never handle raw card information, eliminating risk of storage-based exposure.

5.4 Why We Collect Limited Payment Information

We collect and process minimal financial data only for the following reasons:

  • To verify payments and update order status
  • To issue refunds when applicable
  • To comply with audit and accounting requirements
  • To detect fraud or unauthorized activity
  • To maintain transaction history for your account

This information is essential for us to operate an online marketplace and rental platform securely and efficiently.

5.5 Third-Party Payment Provider Policies

Your use of third-party payment systems means your financial data is also governed by their respective privacy policies. We encourage users to review them:

  • PawaPay Privacy Policy
  • PesaPal Privacy Policy

These services may collect additional information required to complete the transaction, such as device verification, risk scoring, or compliance checks.

5.6 Refunds and Chargebacks

When processing refunds or disputes:

  • We may share order reference numbers and transaction IDs with payment processors
  • Refunds are handled according to the rules of the respective payment provider
  • Additional verification may be required to protect your account and prevent fraud

We do not store or request sensitive financial details during refund processing.

5.7 No Storage of Payment Credentials

For clarity and transparency:

  • Pendeza does not store mobile money numbers after the transaction
  • Pendeza does not store card details, expiration dates, or CVV codes
  • Pendeza cannot charge your mobile money or card without your direct authorization through the payment provider

You maintain full control of your payment credentials at all times.

6. Data Storage and Security

Your privacy and data safety are core priorities for Pendeza. This section explains in detail where your data is stored, how it is protected, how long we keep it, and the measures we take to prevent unauthorized access or misuse.

6.1 Where Your Data Is Stored

Your personal information (such as account details and profile information) is stored on:

  • Secure, access-controlled servers managed by trusted cloud service providers
  • Infrastructure that uses modern security standards, encryption, and redundancy

We do not store any sensitive financial data (card numbers, mobile money numbers, or PINs).

6.2 How We Protect Your Data

We implement multiple technical, organizational, and administrative safeguards to protect your data:

a. Encryption

  • All information transmitted between your device and our servers is protected using SSL/TLS encryption, ensuring that data cannot be intercepted or read by unauthorized parties.
  • Passwords are hashed using industry-standard algorithms, meaning we cannot read them even on our own systems.

b. Secure Infrastructure

  • Hosting providers are selected for their strong security capabilities.
  • Servers run on protected environments with firewalls, intrusion detection, and access restrictions.

c. Access Control

  • Only authorized personnel within Pendeza Ventures have access to user data, and only for operational reasons (customer support, troubleshooting, verification).
  • All access is controlled, logged, and monitored for suspicious activity.

d. Data Isolation

  • User accounts and supplier accounts are isolated logically so unauthorized users cannot access private data.
  • Sensitive processes (e.g., payments) run separately from core application functions.

6.3 How Long We Keep Your Information

We keep your data only for as long as necessary to fulfill the purposes described in this Privacy Policy.

Retention Guidelines:

  • Account information (name, contact, profile): kept until you delete your account.
  • Order and rental history: retained for accounting, dispute resolution, and regulatory requirements.
  • Supplier business documentation: retained while the supplier is active and for a reasonable period after account closure to meet legal obligations.
  • Communications and support messages: stored as needed for quality control and future support.
  • Payment information: never stored.

After the retention period ends, we permanently delete or anonymize your information.

6.4 Data Backups

We maintain secure, encrypted backups of essential data to:

  • Prevent data loss
  • Restore service in the event of a system failure
  • Maintain reliability and continuity of the Pendeza platform

Backups are stored securely and subject to the same protection standards as live data.

6.5 Protection Against Unauthorized Access

We use a variety of measures to ensure that your data is not accessed without permission:

  • Brute-force protection on user accounts
  • Suspicious login monitoring
  • Multi-level authentication on admin systems
  • Regular security reviews and audits

If we detect suspicious activity, we may temporarily lock or restrict account access to protect you.

6.6 Breach Response Procedures

Even with strong safeguards, no system is 100% immune. In the rare case of a data breach:

  • We will investigate immediately
  • Notify affected users within legally required timelines
  • Take steps to contain and resolve the breach
  • Cooperate with relevant authorities if necessary

We are committed to handling security incidents with transparency and urgency.

6.7 User Responsibility for Security

You also play a role in keeping your account secure:

  • Use a strong, unique password
  • Do not share your password with others
  • Keep your device secure and updated
  • Notify us immediately if you suspect unauthorized access

Your actions help maintain overall platform security.

7. User Rights

Pendeza is committed to ensuring that all users maintain full control over their personal information. This section explains your rights, how you can exercise them, and what limitations may apply. These rights apply to all users of Pendeza, regardless of whether they are customers, suppliers, or visitors who choose to create an account.

7.1 Right to Access Your Information

You have the right to request and access the personal data we hold about you. This includes:

  • Your profile information (name, email/phone, gender, optional profile image)
  • Your account activity (orders, rentals, refunds, communications)
  • Supplier documentation (if you are a supplier)
  • Any other personal information linked to your account

You may access most of this information directly through your account settings. For additional requests, you may contact us using the details provided in the “Contact Information” section.

7.2 Right to Update or Correct Your Information

You have the right to update or edit your personal information at any time. This includes:

  • Correcting inaccurate information
  • Updating your phone number or email
  • Changing your password
  • Modifying your profile details (name, gender, profile photo)
  • Updating supplier business documentation

You can make these changes through the app. If any information cannot be edited directly, you may contact support for assistance.

7.3 Right to Delete Your Account and Personal Data

You may delete your Pendeza account at any time. When you request account deletion:

  • We permanently remove your profile information
  • We disconnect your authentication details (email/phone and password)
  • We anonymize or delete non-essential data

Some information may be retained temporarily if required by law, such as:

  • Completed transaction records
  • Fraud prevention data
  • Supplier business documentation (for regulatory compliance)

We only retain what is strictly necessary and delete the rest.

7.4 Right to Withdraw Consent

If we process certain data based on your consent (such as marketing communications), you have the right to withdraw that consent at any time.

You can do this by:

  • Turning off marketing notifications in the app
  • Using “unsubscribe” links in texts or emails
  • Contacting support

Withdrawing consent does not affect the legality of any processing done before you withdrew it.

7.5 Right to Opt Out of Marketing Communications

Users have full control over promotional communication preferences.

You may opt out of:

  • Promotional SMS messages
  • Promotional emails
  • Push notifications for offers or deals

Operational messages (such as payment alerts, order updates, security alerts) will still be sent, as they are essential for account usage.

7.6 Right to Restrict or Object to Processing

You may request us to:

  • Restrict processing of your data
  • Limit how your information is used
  • Object to certain types of processing (such as analytics)

If future analytics tools (e.g., Google Analytics) are introduced, you may choose to opt out of non-essential analytics tracking.

7.7 Right to Data Portability

If requested, we can provide you with a digital copy of specific personal information you have provided to us. This may include:

  • Registration information
  • Profile data
  • Order history

We will deliver such data in a commonly used format wherever technically feasible.

7.8 Right to Security and Transparency

You have the right to:

  • Be informed about how your data is stored and protected
  • Receive clear explanations of our privacy and data practices
  • Be notified promptly if a data breach affecting your personal information occurs

We are committed to transparent, responsible data handling.

7.9 How to Exercise Your Rights

You may exercise most rights directly through the app settings. For any request that requires manual assistance, users can contact us through the communication channels provided in the Contact Information section.

We may ask you to verify your identity to protect your account from unauthorized access.

8. Children’s Privacy

Pendeza is committed to protecting the privacy of all users, including minors. However, our platform is not intended for children under the age of 13. This section explains how we handle children’s information and our policies to protect them.

8.1 No Intentional Collection of Children’s Data

  • We do not knowingly collect personal information from children under 13.
  • Registration requires users to provide a phone number or email, which assumes the user is of legal age to consent.
  • Suppliers and customers are expected to be adults capable of entering into contracts.

8.2 Access by Children Under 13

  • If we discover that we have inadvertently collected personal data from a child under 13, we will immediately delete such information from our systems.
  • We rely on parents or guardians to supervise use of the platform by minors and to ensure that children do not provide personal information.

8.3 Responsibility of Parents and Guardians

  • Parents and guardians should monitor their children’s activity when using mobile devices and apps.
  • If you are aware that your child has provided personal information on Pendeza, please contact us immediately so that we can take corrective action.

8.4 Safety Measures

  • The platform does not provide chat or direct messaging between minors and other users.
  • Any interactive features are designed for registered users who have reached the age of majority or are legally allowed to transact.

9. International Users

Pendeza primarily operates within its local jurisdiction. However, if you access the app from outside your home country, this section explains how your data may be handled.

9.1 Applicability to International Users

  • Users from other countries may access and use the app, but Pendeza’s data storage and processing are based in our home jurisdiction.
  • By using the app internationally, you consent to the transfer, storage, and processing of your information in accordance with this Privacy Policy.

9.2 Data Transfer

  • Personal information may be transferred to and stored on servers located in countries where Pendeza or its service providers operate.
  • These servers may have different data protection standards than your local country.
  • We take reasonable steps to ensure your information is adequately protected, including contractual safeguards with third-party providers.

9.3 User Responsibilities

  • International users are responsible for complying with local laws regarding personal data collection and usage.
  • Access to certain app features may be limited depending on local regulations or payment processing capabilities.

9.4 Compliance With Local Laws

  • Pendeza strives to respect global privacy regulations, but the app is primarily designed for local users.
  • If applicable laws (such as GDPR for EU residents) require additional consent or rights, we will implement updates to comply.
  • Users are encouraged to review this Privacy Policy periodically for any updates regarding international access.

10. Changes to This Privacy Policy

Pendeza may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. This section explains how updates are handled and how users are notified.

10.1 When We May Update the Policy

Updates may occur for reasons including, but not limited to:

  • Changes in the way we collect, use, or store personal information
  • Introduction of new features, services, or payment methods
  • Legal or regulatory changes requiring modification of our policies
  • Updates to security practices or data protection measures

10.2 How We Notify Users of Changes

  • Significant changes to this Privacy Policy will be communicated via in-app notifications, email, or other reasonable channels.
  • Users are encouraged to regularly review the Privacy Policy to stay informed about how their information is used.
  • Continued use of the app after a policy update constitutes your acceptance of the updated Privacy Policy.

10.3 Versioning

  • Each version of the Privacy Policy will include an effective date for clarity.
  • Previous versions will be retained internally for reference, legal, and operational purposes.

10.4 Your Responsibility

  • Users should check the Privacy Policy periodically to remain aware of any changes.
  • If you do not agree with a new version of the Privacy Policy, you should stop using the app and request account deletion if desired.

11. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or the way your personal information is handled, you can contact Pendeza through the following channels:

11.1 Company Details

  • App Name: Pendeza
  • Operator: Pendeza Ventures, a subsidiary of Mwafrika Asilia Product Limited

11.2 Contact Methods

  • Email: info@pendeza.co.tz

11.3 How We Handle Inquiries

  • Requests will be acknowledged promptly.
  • You may inquire about accessing, updating, deleting, or restricting your personal information.
  • We may require identity verification to protect your account and prevent unauthorized access.
  • We strive to respond to all privacy-related inquiries within a reasonable timeframe, usually within 30 days.

11.4 Reporting Concerns

If you believe that your privacy has been violated or that Pendeza is not handling your data according to this Privacy Policy, please contact us immediately using the methods above. We will investigate and take corrective action as necessary.