Last updated: 29 October 2026
This policy explains what personal information DUKA HURU (the website dukahuru.shop and the DUKA HURU app) collects, why, and the choices you have. We follow Tanzania's Personal Data Protection Act, 2022.
What we collect
Account details: your name, email address, phone number, password (stored only as a secure hash) and, if you add one, a profile photo.
If you sign in with Google: your name, email address and Google account ID, which Google shares with us when you agree. We do not get your Google password or access to your other Google data.
Seller details: store name, description, logo and banner, contact numbers, store region, area and address, and any ID document you upload for verification.
Marketplace activity: products you list, orders you place or receive, items in your cart and saved list, messages with buyers or sellers, and reports you submit.
Technical data: your language and region choice (stored in cookies on your device), a sign-in session token, and basic server logs (IP address, time, page requested) used for security.
How we use it
To run the marketplace: create your account, show listings, process orders between buyers and sellers, deliver messages and notifications, and show shops in your region.
To keep the platform safe: verify sellers, review listings and reports, and prevent fraud and abuse.
To contact you about your account, orders or important changes. We do not send marketing without your consent.
What other people see
Buyers see a seller's store name, logo, description, region, area and address. A seller's phone and WhatsApp number are shown only if the seller turns that on.
When you place an order, the seller receives the details needed to complete it, such as your name, phone number and delivery or pickup choice.
Sharing
We do not sell your personal information. We share it only with the other party to your order or conversation, with service providers that host and run DUKA HURU for us (our servers are hosted in Tanzania), when the law requires it, or to protect users from fraud or harm.
ID documents uploaded by sellers are stored privately and are seen only by DUKA HURU administrators who review seller applications.
Keeping your data
We keep your information while your account is active. You can delete your account in the app or website (Account, Settings). Your personal details are then removed or anonymised, except records we must keep by law, such as completed order records.
Your rights
You can view and correct your details in your account, delete your account, and ask us for a copy of your data or to stop a particular use of it. Write to dukahuru.shop@gmail.com.
Security
Connections are encrypted (HTTPS), passwords are hashed, uploaded photos are re-encoded to remove hidden location data, and access to administrator tools is restricted.
Children
DUKA HURU is for people aged 18 and over, or younger users with a parent or guardian's permission.
Changes and contact
We will post any changes on this page and update the date above. Questions: dukahuru.shop@gmail.com.