Privacy notice

Ujuzi Initiative ("we") is a non-governmental organisation registered in Tanzania (Registration No. OONGO/R/8724), P.O. Box 712, Dodoma. We respect your privacy and handle personal data in line with the Personal Data Protection Act, 2022.

What we collect

• When you give: your name, email and/or phone number, country, the amount, the fund you chose, how you paid, your choices about recognition and updates, and how you found us (the campaign tag of a link you followed, if it had one). If you give by bank transfer, we also keep the transfer reference and the amount that reached our account. Mobile money PINs and card numbers are handled by our payment providers; we never see or store them.
• When you give on ujuzitu.com: Ujuzi-Tu Company Limited passes us your name, contact details, the gift, its purpose and your recognition choice, so that we can record the gift and issue the official receipt.
• When you sign in to "My giving": your email address and a one-time code we send you.
• When you use our app: your sign-in and the gifts you made on the phone are kept in the phone's own secure storage (Keychain on iPhone, Keystore on Android). The QR scanner uses your camera on the phone only; images are not sent to us.
• When you apply for training, volunteering, mentoring or a role: your contact details and the information you choose to share, such as region, education and — only if you choose to tell us — gender, age band or disability, which we use to reach our inclusion targets.
• When you contact us or register for an event: your contact details and message.
• When you report a concern: only what you choose to tell us. You may report anonymously.
• If you ask us to correct your details: the correction and the reason, kept with the record.
• When you visit the site: three kinds of essential cookie: one that keeps your visit and forms secure (session), one that protects forms against forgery (XSRF-TOKEN), and your language and currency choice. We use no analytics or advertising cookies, and no outside trackers. We keep a keyed, irreversible hash of your IP address with form submissions to prevent abuse.

Why we use it

To process and receipt gifts, respond to you, consider applications, run programmes and events, meet our legal and accounting obligations, keep the site secure, and — only if you agree — send you news. We do not sell or rent personal data.

Who receives your data

We do not sell or rent personal data. Only the service providers below receive it, each acting for us and only for the purpose shown.

If you give by bank transfer, the transfer is handled by your bank and by ours (NMB Bank) under their own terms.

Gifts through Ujuzi-Tu. If you give to Ujuzi Initiative on ujuzitu.com, Ujuzi-Tu Company Limited passes us the details listed above, and we send it back your official receipt (its number, verification code and a link to the PDF) so it can show it to you. With your consent, graduates' details may be shared with the Ujuzi-Tu platform for onboarding.

We may disclose data where the law requires it. We update this list before any new provider receives personal data.

How long we keep it

Gift and receipt records are kept for as long as accounting law requires (at least seven years). Applications and enquiries are kept for up to two years after we close them, unless you ask us to delete them sooner. Safeguarding records are kept as long as necessary to protect people and meet legal duties.

Your rights

You may ask to see, correct or delete your data, object to its use, or withdraw consent to updates at any time (every message has an unsubscribe or STOP option). Write to contact@ujuziinitiative.or.tz. If you are not satisfied with our answer, you may complain to the Personal Data Protection Commission.

Security

Data is encrypted in transit, staff access is limited by role with two-factor sign-in, and sensitive reports are encrypted at rest.