Privacy Policy
Last updated: 2 October 2026
This policy explains what personal information Duka Digitali ("we") collects through Duka Digitali, why, and what your choices are. We handle personal data in line with applicable data-protection law, including Tanzania's Personal Data Protection Act, 2022.
1. What we collect
- When you buy: your mobile-money phone number (required), your email (optional), what you bought, the amount, and the payment status. If you pay by mobile money, your PIN is entered on your phone and is never seen or stored by us.
- An order code that we generate for each order so you can recover your download link.
- If you create an account: your name, email address and a password (stored only as a one-way hash). If you turn on two-factor authentication we store the secret and recovery codes in encrypted form.
- If you sell: your store name and description, the products and files you upload, your sales and earnings, and the mobile-money number you give us for payouts.
- Technical data: IP address, browser type and basic usage logs, used for security and to keep the Site working.
2. How we use it
- To take payment, deliver your files and show your order.
- To let you recover a lost download link while your download window is open.
- To send emails about your order, account, sales, payouts and security (for example password resets). We do not send marketing email unless you ask for it.
- To pay Sellers, prevent fraud and abuse, keep records required by law, and improve the Site.
3. Who we share it with
- Payment provider. To process mobile-money payments we send the order amount, your phone number and (if given) email to our payment provider, BongoPay (which processes mobile-money payments through Selcom), and the mobile-money network involved.
- Service providers that host the Site and deliver email, only as needed to run the service.
- Sellers see their sales and earnings, but not your phone number or email.
- Authorities when the law requires it.
We do not sell your personal data.
4. Cookies
We use only essential cookies: to keep your session and shopping cart, protect forms against forgery, and keep you logged in if you choose "remember me". We do not use advertising or tracking cookies.
5. How long we keep it
We keep order and payment records for as long as needed for accounting, tax and legal purposes, and to handle refunds and disputes. Account data is kept while your account is open. Download links expire after your download window.
6. Security
We protect data with measures such as hashed passwords, encrypted two-factor secrets, expiring download links, private file storage and access controls. No system is perfectly secure, so please keep your passwords and order codes private.
7. Your rights
You can ask to see the personal data we hold about you, to correct it, to delete it (unless we must keep it by law), or to object to how we use it. To do so, contact us using the details below. You may also complain to the data-protection authority in your country.
8. Children
The Site is not meant for children under 18, and we do not knowingly collect their data.
9. Changes
If we change this policy we will update the date above and, for important changes, tell account holders by email.
Contact
Duka Digitali
Email: contact@dukadigitali.com