Privacy Policy

Huam Technology ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use BahariPOS.

This policy should be read together with our Terms of Service.

For the purposes of the Personal Data Protection Act, No. 11 of 2022, Huam Technology is the Data Controller responsible for your personal data.

3.1 Information You Provide Directly

• Account Information: Name, email address, phone number, business name, password
• Business Information: Business address, Tax Identification Number (TIN), VRN, business sector
• Payment Information: Billing details, mobile money numbers (processed securely via third-party providers)
• Communication Data: Support tickets, emails, chat messages

3.2 Information Collected Automatically

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Features used, time spent, click patterns, error logs
• Location Data: General geographic location (with your consent)

3.3 Business Data You Store

You may store customer, supplier, staff, and transaction data through BahariPOS. You remain the Data Controller for this data; we act as a Data Processor on your behalf.

We use your data only for specific, lawful purposes:

• To provide, maintain, and improve BahariPOS services
• To process payments and manage your subscription
• To send important service notifications and security alerts
• To provide customer support and respond to inquiries
• To detect, prevent, and address fraud or technical issues
• To comply with legal obligations under Tanzanian law

Legal Basis: We process data based on (a) your consent, (b) contractual necessity, (c) legal obligation, or (d) our legitimate business interests.

We do not sell your personal data. We may share data only in the following circumstances:

• Service Providers: Trusted partners (hosting, payments, email) under strict data processing agreements
• Legal Requirements: When required by law, court order, or government authority
• Business Transfers: In connection with a merger, acquisition, or sale of assets (with notice)
• With Your Consent: When you explicitly authorize sharing

Your data is stored on secure, encrypted servers. We implement:

• Industry-standard encryption (TLS/SSL) for data in transit
• AES-256 encryption for sensitive data at rest
• Regular security audits and penetration testing
• Strict access controls and employee training
• Automated backups with geographic redundancy

While we strive to protect your data, no system is 100% secure. We cannot guarantee absolute security but commit to promptly addressing any breach in accordance with the PDPA.

We retain your data only as long as necessary:

• Active accounts: For the duration of your subscription
• After cancellation: 30 days for data export, then permanent deletion
• Legal/tax records: Up to 7 years as required by Tanzanian law

As a data subject under Tanzanian law, you have the right to:

• ✅ Access: Request a copy of your personal data
• ✅ Correction: Request correction of inaccurate data
• ✅ Deletion: Request deletion of your data ("right to be forgotten")
• ✅ Portability: Receive your data in a structured, machine-readable format
• ✅ Objection: Object to processing for specific purposes
• ✅ Withdraw Consent: Withdraw consent at any time
• ✅ Complaint: Lodge a complaint with the Personal Data Protection Commission

To exercise these rights, email us at privacy@huamtech.com. We will respond within 30 days.

We use cookies and similar technologies to:

• Keep you logged in (essential cookies)
• Analyze site performance (analytics cookies)
• Remember your preferences (functional cookies)

You can control cookies through your browser settings. Disabling essential cookies may affect service functionality.

If we transfer data outside Tanzania, we ensure adequate protection through standard contractual clauses or other lawful mechanisms approved by the Personal Data Protection Commission.

BahariPOS is not intended for individuals under 18. We do not knowingly collect data from children. If you believe a child has provided us with data, please contact us immediately.

We may update this Privacy Policy periodically. Material changes will be notified via email or in-app notice at least 30 days before taking effect. The "Last Updated" date reflects the most recent revision.

For privacy-related questions, data requests, or complaints: