Privacy & Data Protection Policy Privacy Policy na Ulinzi wa Data
Comprehensive disclosure on the collection, cryptographic encryption, storage, and processing of personal data, NIDA credentials, academic documents, and employer records under the Tanzania Personal Data Protection Act (PDPA No. 11 of 2022).
A complete explanation of how we collect, encrypt, store and process NIDA's personal information, certificates and job profiles in accordance with the Personal Information Protection Act of 2022.
01. Legal Framework & Data Controller Identity Msingi wa Kisheria na Utambulisho wa Mdhibiti wa Data
Reliance Solutions Ltd operates as the registered Data Controller under the Personal Data Protection Act (PDPA No. 11 of 2022) of the United Republic of Tanzania and the regulations administered by the Personal Data Protection Commission (PDPC).
Reliance Solutions Ltd it works like Mdhibiti wa Data (Data Controller) legally registered under the Tanzania Personal Information Protection Act (PDPA No. 11 of 2022) administered by Personal Data Protection Commission (PDPC).
02. Categories of Personal Data Collected Types of Personal Information We Collect
- Identity Data: Full legal name, date of birth, gender, marital status, nationality, and 20-digit NIDA number or International Passport number.
- Contact Data: Primary and secondary phone numbers, physical residential address, region/district, and verified email address.
- Professional & Academic Data: Curriculum Vitae (CV), certified educational certificates (O-Level, A-Level, Diploma, Degree, Masters, PhD), professional licenses (e.g. NBAA/ERB/TLS), language fluencies, and work history.
- Referee Data: Names, official titles, corporate affiliations, phone contacts, and email addresses of three (3) professional referees.
- Technical & Log Data: IP addresses, browser user agents, login timestamps, and session security tokens.
- Identification Information: Full names, date of birth, gender, citizenship, 20-digit NIDA number or Passport number.
- Mawasiliano: Phone number, email address, province, district and residential address.
- Educational and Career Information: Curriculum vitae (CV), educational certificates, professional licenses, skills and work experience.
- Wadhamini (Referees): Names and phone numbers of at least three (3) guarantors.
- Kumbukumbu za Kiufundi: IP address, device type, and login time.
03. Lawful Basis for Data Processing Legal Basis for Information Processing
We process personal data solely on legitimate statutory grounds recognized under Section 24 of the PDPA 2022: (a) Explicit user consent given upon registration; (b) Necessity for performing recruitment matching and forwarding candidate job applications; and (c) Compliance with statutory labor reporting requirements.
We process your information on the legal basis under Section 24 of the PDPA Act 2022: (a) Your express consent you give at the time of registration; (b) The need to submit your job application to employers; and (c) To fulfill the requirements of the employment laws of Tanzania.
04. Cryptographic Protection of NIDA & Passport Credentials Ulinzi wa Fiche (Encryption) wa NIDA na Pasipoti
National Identification Authority (NIDA) numbers and International Passport records are classified as Highly Sensitive Personal Records. All identity numbers and uploaded document attachments are stored using military-grade AES-256 symmetric encryption at rest with salted cryptographic key hashing. Sensitive credentials are never exposed in plaintext or search query logs.
Namba za NIDA na Pasipoti zimeainishwa kama Most Sensitive Information. All this information and uploaded images are protected with strong encryption technology of AES-256. Haziwezi kusomwa na watu wasioidhinishwa wala kuonekana kiholela kwenye kumbukumbu.
05. Purposes of Data Processing Purpose of Processing Your Information
Your personal records are processed exclusively for:
- Direct transmission of job application dossiers to verified prospective employers.
- Dispatching automated SMS and email notifications regarding interview invitations, shortlisting status, and new vacancy alerts.
- Preventing duplicate candidate registrations and combating recruitment identity fraud.
- Facilitating employer billing and statutory tax invoice generation.
Your information is used only for the following purposes:
- Submitting your resume and credentials to the actual employers you are applying to.
- Sending you text messages and e-mails about the progress of your application and being called for an interview.
- Kuzuia usajili mara mbili na kuzuia udanganyifu na utapeli katika ajira.
- Facilitate payment invoices for employer packages.
06. Third-Party Sharing Limits & Strict Non-Sale Warranty Kutouza Data na Vikwazo vya Kushirikisha Watu Wengine
Strict Zero-Sale Commitment: Ajira Market does NOT sell, rent, lease, or monetize personal candidate data or recruiter contact lists to third-party telemarketers or advertising brokers. Data is shared exclusively with (a) Employers whose vacancies you directly apply for; (b) Licensed BOT payment processors for billing execution; and (c) Law enforcement agencies pursuant to valid court warrants.
Ahadi ya Kutouza Data: Ajira Market DOES NOT sell or rent your personal information to advertising companies or businesses. Your data is shared with: (a) the employer to whom you applied directly; (b) Payment systems approved by BOT; and (c) Dollar instruments if there is a valid order of the Court.
07. Technical Security Architecture (TLS 1.3 & Firewalls) Ulinzi wa Kiufundi wa Mifumo (TLS 1.3 na Firewalls)
Platform infrastructure enforces Transport Layer Security (TLS 1.3) encryption for all data in transit, Web Application Firewalls (WAF) to block SQL injection and cross-site scripting (XSS), continuous security patch updates, role-based access control (RBAC), and automated offsite backups.
Miundombinu ya mfumo inalindwa na usalama wa kimataifa wa TLS 1.3, vizuizi vya mashambulizi ya kimtandao (Firewalls/WAF), ukaguzi wa mara kwa mara wa kiusalama, na nakala za dharura (Backups) zinazohifadhiwa kila siku.
08. Cross-Border Data Transfers Transfer of Information Abroad
In the event that an international candidate applies for a role, or cloud infrastructure resides in secure regional tier-4 data centers, transfers outside Tanzania comply strictly with Section 31 of the PDPA 2022, ensuring adequate legal safeguards and equivalent data protection standards.
In the event that information is stored on state-of-the-art regional servers abroad, the transfer is made in compliance with Section 31 of the PDPA Act 2022 to ensure data protection standards are consistent with Tanzanian laws.
09. Data Retention Schedules & De-Identification Data Retention and Information Deletion Period
Candidate profile records remain active while the user actively applies for jobs. Inactive accounts exhibiting zero login activity for twenty-four (24) consecutive months are archived and securely de-identified unless retention is required by statutory tax or labor accounting regulations.
Your profile is saved while you continue to apply for jobs. Accounts that have not been opened for 24 consecutive months are archived and their personal information securely deleted in accordance with tax and employment laws.
10. Your Statutory Rights Under PDPA (2022) Haki Zako za Kisheria Chini ya Sheria ya PDPA (2022)
Under the Tanzania Personal Data Protection Act, you possess the following actionable rights:
- Right to Access: Request a full digital copy of all personal records maintained on your profile.
- Right to Rectification: Edit, update, or correct inaccurate academic, phone, or address details at any time via your dashboard.
- Right to Erasure ("Right to be Forgotten"): Request complete deletion of your account and uploaded CV files.
- Right to Object & Withdraw Consent: Opt out of SMS/email job alerts or marketing communications.
- Right to Lodge a Complaint: File a grievance directly with the Personal Data Protection Commission (PDPC) if you believe your privacy rights have been infringed.
Under the Tanzania Personal Information Protection Act, you have the following rights:
- Right to Information: Request a complete copy of all your information in the system.
- Haki ya Kurekebisha: Change and correct inaccurate information on your profile at any time.
- Haki ya Kufuta Data: Request that your account and information be permanently deleted from the system.
- Haki ya Kujitoa: Stop receiving e-mails and SMS for job advertisements.
- Haki ya Kulalamika: Submit your complaint directly to Personal Data Protection Commission (PDPC).
11. Cookie Policy & Web Session Management Cookies Policy na Usalama wa Vikao
Ajira Market utilizes secure, HTTP-only, encrypted session cookies strictly necessary for authenticating candidate and employer logins, maintaining CSRF token security, and remembering language preferences (English/Swahili). We do not employ third-party behavioral surveillance trackers.
Ajira Market uses secure cookies (cookies) to identify your presence on the account, to protect against cyber attacks, and to remember your preferred language. We do not use arbitrary commercial tracking cookies.
12. Data Protection Officer (DPO) Contact & Grievances Afisa Msimamizi wa Ulinzi wa Data (DPO) na Malalamiko
For privacy inquiries, data subject rights requests, or statutory compliance matters, contact our designated Data Protection Officer:
For privacy questions, requests to delete your information, or legal data issues, contact our Privacy Officer: