1. Scope and who is responsible
This policy applies to the GloboExpats website, marketplace accounts, checkout and order tools, selling and rental features, Request Hub, support interactions, and related services operated by GloboExpats Limited. It does not control an external website or service that has its own privacy notice.
We process personal data under applicable Tanzanian law, including the Personal Data Protection Act.
2. Personal data we collect
Depending on how you use the platform, we may process:
- Identity and contact details, including name, email address, phone number, account identifiers, and profile information.
- Authentication and account data, including securely handled credentials, roles, preferences, and verification status.
- Saved addresses, region labels, delivery instructions, and precise map coordinates selected or supplied by you.
- Listings, product images, choices, rental dates, Request Hub posts, matches, offers, ratings, and communications submitted through the platform.
- Identity and seller verification documents, review notes, and the status of verification checks.
- Order, proforma invoice, availability, delivery, handoff, cancellation, refund, and completion records.
- Payment receipts, payment references, transaction review records, and seller payout details such as bank, Lipa number, or mobile money destination.
- Support enquiries, reports, notifications, and other communications with us.
- Technical and usage data such as IP address, browser, device, pages viewed, feature interactions, timestamps, referral information, and diagnostic events.
3. How and why we use personal data
We use personal data where needed to:
- Create and secure accounts, provide requested features, and remember your selected settings.
- Publish and moderate listings, rentals, requests, profiles, reviews, and verification indicators.
- Generate proforma invoices, verify payment evidence, manage seller availability, coordinate fulfillment, and maintain order records.
- Calculate eligible same-region delivery, show routes, manage transport assignments, and support handoff or collection.
- Prevent fraud and misuse, investigate problems, enforce platform rules, and meet legal obligations.
- Respond to support requests and send account, order, payment, availability, delivery, payout, and service notifications.
- Measure service performance, diagnose errors, understand use, and improve the marketplace.
Our lawful reasons may include performing a contract with you, taking requested steps before a contract, complying with law, protecting legitimate interests such as platform safety and service improvement, and consent where the law requires it.
5. Location, addresses, and device permissions
Address tools may let you search nationwide, use device location, or place a pin on the map. A saved default address can update the region shown in your delivery context. Precise map coordinates can be used to show a route or calculate same-region distance and fees. Outside-region delivery is arranged after checkout and does not use a checkout fee calculation.
Location permission is controlled by your browser or device. You can deny or withdraw it and enter a location manually, but some map and delivery functions may then require you to place or correct the pin yourself.
6. Payments, receipts, verification, and payouts
Current checkout methods use Bank transfer and Selcom Lipa Namba. We process payment references and payment receipts submitted by buyers so authorized personnel can review and verify payment. We also process payout details supplied by sellers so eligible funds can be released to the selected destination.
Payment evidence, verification documents, and payout details are treated as restricted records and are not intended for public display. Relevant authorized personnel and service providers may access them when needed for review, support, fraud prevention, payment, refund, payout, or legal compliance.
7. Cookies, local storage, and analytics
We use cookies and browser storage to support authentication, security, shopping cart state, selected currency, address labels, and other preferences. Blocking these technologies may prevent some platform functions from working correctly.
On approved production hosts, Matomo may collect usage information and associate activity with an account identifier after sign-in. We use this information to understand feature use and improve the service. Your browser settings and any controls made available on the platform can affect optional tracking.
8. How long we keep data
We keep personal data for as long as needed to provide the service, maintain transaction and accounting records, resolve disputes, prevent fraud, enforce agreements, and comply with legal obligations. Retention varies by record type and account status. When data is no longer required, we may delete, anonymize, or securely isolate it, subject to backup and legal retention cycles.
9. Security
We use reasonable technical and organizational controls designed to protect personal data, including authenticated access and role-based restrictions for sensitive records. No internet service or storage method is completely secure, so we cannot promise absolute security.
Protect your password, verify payment instructions shown in the current checkout, avoid sharing sensitive documents in public fields, and contact us promptly if you suspect unauthorized account access or misuse of your data.
10. Your data protection rights
Subject to applicable law and any valid exceptions, your rights may include the right to be informed, the right to access your personal data, the right to rectification of inaccurate data, the right to erasure or destruction, the right to restrict processing, data portability, the right to object, and the right to withdraw consent where processing depends on consent.
To make a request, email [email protected]. We may need to verify your identity and clarify the request before acting. Some data may need to be retained where the law, a transaction record, fraud prevention, or a legal claim requires it.
Account deletion is also available from Delete your account and data. Signed-in users can delete their account in the app; anyone who cannot sign in can use the public instructions on that page.
You may also complain to Tanzania's Personal Data Protection Commission.
11. Cross-border data transfers
Some service providers may process data from or in another country. Where personal data is transferred outside Tanzania, we will apply the requirements and safeguards required by Tanzanian data protection law and assess the transfer based on the destination, purpose, recipient, and sensitivity of the data.
12. Children
GloboExpats is intended for adults aged 18 and over. We do not knowingly create accounts for children. If you believe a child has provided personal data through the platform, contact us so we can review and take appropriate action.
13. Policy changes and contact
We may update this policy when our services, processing activities, providers, or legal obligations change. We will post the current version and date here and provide additional notice when appropriate.