Legal

Data Protection

How PesaLock complies with the Tanzania Personal Data Protection Act (PDPA).

Published: 1 June 2026Last updated: 31 May 2026

This document is a plain-language template. Pesalock Africa Limited should have it reviewed by qualified legal counsel before publication.

Legal framework

PesaLock operates in compliance with the Personal Data Protection Act (PDPA) of Tanzania and associated regulations issued by the Personal Data Protection Commission (PDPC).

Data controller

Pesalock Africa Limited, registered in Tanzania, acts as the data controller for all personal data collected through pesalock.co.tz and related services.

Lawful basis for processing

We process your data on contractual necessity, legal obligation, legitimate interests, and consent where required.

International data transfers

Your data is primarily processed within Tanzania. Where we use cloud infrastructure or third-party processors outside Tanzania, we ensure appropriate safeguards are in place.

Your rights under the PDPA

Right to access your personal data
Right to correct inaccurate data
Right to request deletion subject to legal retention requirements
Right to object to processing for direct marketing
Right to lodge a complaint with the PDPC

To exercise your rights, contact us at privacy@pesalock.co.tz.

Data protection officer

Our data protection officer can be reached at dpo@pesalock.co.tz. We aim to respond to all data protection enquiries within 30 days.