1. Introduction
Magilatech Company Limited (“Magilatech”, “we”, “our”, or “us”) respects your privacy and is committed to protecting the personal information entrusted to us.
This Privacy Policy explains how we collect, use, disclose, store, and protect personal information when you visit https://magilatech.co.tz/ (“Website”), engage our software, hardware, and cybersecurity services, communicate with us, or otherwise interact with Magilatech.
This Privacy Policy has been developed in accordance with the Personal Data Protection Act, 2022 (United Republic of Tanzania), guidance issued by the Personal Data Protection Commission (PDPC), and internationally recognized privacy and information security principles. Magilatech also implements appropriate technical and organizational measures aligned with the principles of ISO/IEC 27001:2022 to safeguard personal information against unauthorized access, disclosure, alteration, loss, misuse, or destruction.
By accessing or using our Website, you acknowledge that you have read and understood this Privacy Policy.
2. Data Controller Information
For the purposes of applicable data protection laws, Magilatech is the Data Controller and processor responsible for the personal information processed through this Website.
3. Data Protection Principles
Magilatech processes personal information in accordance with the principles established under the Personal Data Protection Act, 2022. We are committed to ensuring that personal information is:
- Processed lawfully, fairly, and transparently.
- Collected for specified, explicit, and legitimate purposes.
- Adequate, relevant, and limited to what is necessary for the intended purpose.
- Accurate and kept up to date where necessary.
- Retained only for as long as required to fulfill the purposes for which it was collected or to comply with applicable legal and regulatory obligations.
- Protected against unauthorized access, disclosure, alteration, loss, or destruction through appropriate technical and organizational security measures.
- Processed in a manner that demonstrates accountability and compliance with applicable data protection requirements.
4. Personal Information We Collect
Depending on your interaction with Magilatech and our Website, we may collect the following categories of personal information.
a. Information You Provide Directly
This includes information that you voluntarily provide when communicating with us or requesting our services, including:
- Full name
- Company or organization name
- Job title or designation
- Email address
- Telephone number
- Business address
- Information submitted through contact forms
- Service enquiries and support requests
- Any other information you choose to provide
b. Technical Information
When you visit our Website, certain technical information may be collected automatically to support the operation, security, and performance of our Website. This may include:
- Internet Protocol (IP) address
- Browser type and version
- Device type and operating system
- Date and time of access
- Pages visited
- Website usage statistics
- Security and system logs
- Cookie and session identifiers
c. Service-Related Information
Where you engage Magilatech to provide software, hardware, cloud, managed services, or cybersecurity solutions, we may process information necessary for the delivery of those services, including:
- Customer project information
- Technical system information
- Network or infrastructure details
- Service configuration information
- Support and maintenance records
- Vulnerability assessment or security testing information where authorized by the customer
- Incident management information where applicable
d. Special Categories of Personal Data
Magilatech does not intentionally collect or process special categories of personal data unless required for a lawful purpose, authorized by applicable law, or provided with the explicit consent of the data subject.
5. Why and How We Collect Personal Information
We collect personal information to provide our services, manage our business operations, improve our Website, strengthen information security, and comply with applicable legal and regulatory requirements.
Personal information may be collected through:
- Website contact forms
- Email correspondence
- Telephone conversations
- Customer meetings and consultations
- Requests for quotations or proposals
- Service agreements and contractual engagements
- Customer support interactions
- Website cookies and similar technologies
- Security monitoring systems
- Authorized cybersecurity assessments and related service activities
We collect only the information that is necessary for the identified purpose and process it in a fair, transparent, and lawful manner.
6. Legal Basis for Processing Personal Information
Magilatech processes personal information only where there is a lawful basis to do so. Depending on the circumstances, processing may be based on one or more of the following grounds:
- The data subject has provided consent.
- Processing is necessary to perform or enter into a contract.
- Processing is necessary to comply with applicable legal or regulatory obligations.
- Processing is necessary to protect the legitimate interests of Magilatech, provided those interests do not override the rights and freedoms of the data subject.
- Processing is necessary to protect the security, integrity, and availability of our systems, services, employees, customers, and business operations.
Where consent is relied upon as the legal basis for processing, individuals may withdraw their consent at any time, subject to applicable legal or contractual obligations.
7. How We Use Personal Information
Magilatech processes personal information for legitimate business, operational, security, and service delivery purposes. We use personal information to:
- Respond to enquiries, requests, and communications submitted through our Website.
- Provide software development, hardware solutions, and cybersecurity services.
- Manage customer relationships and service engagements.
- Prepare quotations, proposals, contracts, and service documentation.
- Provide technical support and respond to customer requests.
- Monitor, maintain, and improve the security, availability, and performance of our Website and systems.
- Detect, prevent, investigate, and respond to security threats, unauthorized access, or malicious activities.
- Improve our products, services, and customer experience.
- Maintain business records and comply with applicable legal, regulatory, and contractual obligations.
Magilatech applies the principle of data minimization and processes only the personal information necessary for the specific purpose for which it was collected.
8. How We May Share Personal Information
Magilatech does not sell, rent, or trade personal information.
We may share personal information where necessary for legitimate business purposes, service delivery, or compliance obligations. This may include sharing information with:
- Authorized service providers supporting our business operations.
- Cloud hosting and technology providers.
- Cybersecurity and software service providers.
- Business partners involved in delivering requested services.
- Professional advisors, auditors, or consultants where necessary.
- Regulatory authorities or government institutions where required by law.
Any third party that processes personal information on behalf of Magilatech is expected to maintain appropriate confidentiality, privacy, and security controls.
9. Disclosure of Personal Information
Magilatech may disclose personal information where necessary and permitted under applicable laws, including:
- To comply with legal obligations, court orders, or regulatory requirements.
- To protect the rights, property, safety, or security of Magilatech, our customers, users, or other parties.
- To investigate suspected fraud, cybersecurity incidents, misuse of services, or unlawful activities.
- During business transactions such as mergers, acquisitions, or restructuring, where applicable safeguards are maintained.
Magilatech will only disclose personal information for legitimate purposes and will take reasonable steps to ensure that disclosed information is appropriately protected.
10. Cross-Border Data Transfers
Magilatech may use service providers, cloud platforms, or technology solutions that process or store personal information outside {{JURISDICTION_NAME_FULL}}.
Where personal information is transferred across borders, Magilatech will ensure that such transfers are conducted in accordance with applicable data protection requirements, including the Personal Data Protection Act, 2022, and any requirements issued by the Personal Data Protection Commission (PDPC).
Where required, Magilatech will implement appropriate safeguards and obtain necessary approvals or permits before transferring personal information outside {{JURISDICTION_NAME}}.
11. Children's Privacy
Magilatech’s Website and services are intended for businesses, organizations, and professional users.
We do not knowingly collect personal information from children under the age of 18 unless such collection is required for a specific service and appropriate consent has been obtained from a parent, guardian, or authorized representative.
If we become aware that personal information has been collected from a child without appropriate authorization, we will take reasonable steps to delete such information.
12. Where Personal Data May Be Held
Personal information collected by Magilatech may be stored and processed within Magilatech’s information systems, secure infrastructure, or trusted third-party platforms used to support our business operations and service delivery.
These platforms may include:
- Secure business applications.
- Cloud hosting environments.
- Customer relationship management systems.
- Service management platforms.
- Security monitoring and operational tools.
Magilatech applies appropriate technical and organizational security measures to protect personal information regardless of where it is stored or processed.
13. How Long We Keep Personal Data (Data Retention)
Magilatech retains personal information only for as long as necessary to fulfill the purposes for which it was collected, meet contractual obligations, comply with legal and regulatory requirements, and support legitimate business needs.
Retention periods may vary depending on:
- The type of personal information.
- The purpose for which it was collected.
- Contractual obligations.
- Legal, regulatory, audit, or security requirements.
When personal information is no longer required, Magilatech will securely delete, anonymize, or dispose of it in accordance with applicable requirements and internal procedures.
14. Security of Collected Personal Information
Magilatech is committed to protecting personal information through appropriate technical and organizational security measures.
Our security practices are aligned with recognized information security principles, including those established under ISO/IEC 27001:2022. These measures include, where applicable:
- Access control and user authorization management.
- Protection against unauthorized access and security threats.
- Secure storage and handling of information.
- Network and system security controls.
- Monitoring and management of security risks.
- Incident identification, response, and recovery procedures.
- Regular review and improvement of security controls.
Magilatech applies a risk-based approach to information security to maintain the confidentiality, integrity, and availability of information.
15. Automated Decision-Making and Profiling
Magilatech does not use personal information collected through our Website to make decisions based solely on automated processing or profiling that produce legal or similarly significant effects on individuals.
Where automated tools are used for operational, security, or service improvement purposes, appropriate safeguards are implemented to ensure responsible use of information.
16. Your Rights as a Data Subject
Under applicable data protection laws, including the Personal Data Protection Act, 2022 of Tanzania, individuals have certain rights regarding their personal information.
Depending on the circumstances and applicable legal requirements, you may have the right to:
- Request access to the personal information Magilatech holds about you.
- Request correction of inaccurate, incomplete, or outdated personal information.
- Request deletion of personal information where there is no valid reason for continued processing.
- Withdraw consent where processing is based on consent.
- Object to certain types of processing of your personal information.
- Request restriction of processing where applicable.
- Request information about how your personal information is collected, used, and shared.
- Lodge a complaint regarding the handling of your personal information.
Magilatech may verify your identity before processing requests to ensure that personal information is disclosed only to the appropriate individual.
To exercise your rights, please contact us using the details provided in the Contact Us section of this Privacy Policy.
17. Access to Your Personal Data
You have the right to request access to personal information that Magilatech holds about you.
If you would like to access your personal information, you may submit a written request through our official contact channels. Your request should include sufficient information to allow us to verify your identity and locate the relevant information.
Magilatech will review and respond to requests within the timeframe required by applicable data protection laws. Where a request cannot be fulfilled, we will provide an explanation in accordance with applicable requirements.
18. Third-Party Links
Our Website may contain links to third-party websites, applications, or services for informational purposes or to provide additional resources.
Magilatech is not responsible for the privacy practices, security controls, content, or data processing activities of third-party websites. Once you leave our Website, we recommend reviewing the privacy policies and terms of use of any third-party services you access.
19. Cookies and Tracking Technologies
Magilatech uses cookies and similar tracking technologies to improve website functionality, enhance security, analyze website performance, and understand how visitors interact with our Website.
Cookies may help us:
- Maintain essential website functionality.
- Remember user preferences.
- Monitor website performance.
- Detect suspicious activity and improve security.
You may manage or disable cookies through your browser settings or available cookie preference options on our Website.
For more information about how Magilatech uses cookies, please refer to our Cookie Policy.
20. How to Complain
Magilatech is committed to handling personal information responsibly and addressing privacy concerns promptly.
If you believe that your personal information has been processed in a manner that does not comply with applicable data protection requirements, you may submit a complaint by contacting us through the details provided in this Privacy Policy.
Magilatech will review and investigate privacy-related complaints and provide an appropriate response within the applicable timeframe.
21. Changes to this Privacy Policy
Magilatech may update this Privacy Policy from time to time to reflect changes in our services, business operations, technology, legal requirements, or privacy practices.
Any updates to this Privacy Policy will be published on this page with a revised Effective Date and Last Updated date.
We encourage users to review this Privacy Policy periodically to remain informed about how Magilatech protects personal information.
22. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or how Magilatech processes personal information, please contact us:
- Tanzania HQ: 14th Floor, Noble Centre, Victoria, Bagamoyo Road, Dar es Salaam, Tanzania — +255 769 555 555 — info@magilatech.co.tz
- Global Office — UAE: 3rd Floor, Building 2, Dubai Internet City, Dubai, UAE — +971 4 589 8284 — info@magilatech.com
- DRC Office: 3, Avenue Comité Urbain, Commune of Gombe, Kinshasa, DRC — +243 815 921 106