Privacy policy

1. Who we are

Mavuno+ eCom is an online marketplace for cashew and related produce operated by Rahami Agri Group, Tanzania ("we", "us"). We are the data controller for the personal data described in this policy. You can reach us at the contact address at the end of this page.

2. Personal data we collect

Data you give us

• Account details: your name, sign in name, email address, phone number and password. Passwords are stored only as a one-way hash.
• Buyer details: whether you buy locally or internationally, your country, region and delivery addresses.
• Seller details: shop name, business type, region, processing centre and the bank or mobile money account your earnings are paid into.
• Assessor and carrier vetting: identity documents, qualifications, driving licence, vehicle details and insurance certificates. These documents are encrypted at rest and visible only to authorised reviewers.
• Orders and payments: items, quantities, prices, delivery choices, bank control numbers, payment references and the mobile money number you use to pay a service fee. We do not receive or store your card numbers or mobile money PIN.
• Messages and evidence: messages and pictures you send to other users, quality reports, loading and delivery evidence, reviews and ratings.

Data we collect automatically

• Technical and security data: IP address, browser type, pages requested, time of access and error logs. We use these to keep the service running, limit abuse and investigate security events.
• Cookies: see section 8.

Data from others

• Payment confirmations from the bank and the mobile money provider.
• Information a seller, assessor or carrier records about an order you are part of.

3. How we use your data and our legal basis

We do not sell your personal data and we do not use it for third party advertising.

4. Who we share data with

• Other users in your order: a seller sees the buyer's name, contact details and delivery address for that order. An assessor or carrier you appoint sees what they need to do the job. Public profiles show your display name, region, ratings and completed jobs.
• Payment providers: our partner bank for goods payments held until release, and our mobile money provider for service fees. They process the data needed to collect and confirm payment.
• Service providers: hosting, content delivery and security, and email delivery providers who process data on our instructions and under confidentiality obligations.
• Authorities: where the law requires it, for example tax, financial or law enforcement authorities with a valid request.
• Professional advisers and, in a business transfer, a successor who agrees to protect your data under this policy.

5. International buyers and transfers

Our service is run from Tanzania. If you buy from outside Tanzania, your data is transferred to and processed in Tanzania. Some service providers, such as content delivery and email providers, may process data in other countries. Where data leaves Tanzania we rely on safeguards permitted by the Personal Data Protection Act, 2022, such as contractual protections.

6. How long we keep data

• Account data: while your account is open, and up to two years after closure to deal with questions or disputes.
• Order, payment and accounting records: for the period Tanzanian tax and financial laws require, generally at least five years.
• Vetting documents: while the provider is listed and for a limited period afterwards for audit purposes.
• Messages: while the conversation is relevant to an order or account, then deleted or anonymised.
• Security logs: normally no longer than twelve months unless needed for an investigation.

7. How we protect your data

We use encrypted connections (HTTPS), hashed passwords, encryption of sensitive documents and fields, access controls so users only see records they are part of, rate limiting, one-time payment instructions that prevent duplicate charges, and audit logs for financial actions. No system is perfectly secure; if a breach affects your data we will notify you and the Personal Data Protection Commission as the law requires.

Keep your password private. We will never ask for your password or mobile money PIN by email, message or phone.

8. Cookies

We use only cookies needed for the service to work: a session cookie that keeps you signed in and holds your basket, a security cookie that protects forms against forgery, and a language cookie that remembers English or Swahili. We do not use advertising or tracking cookies. Our site may store a copy of key pages on your device so it can load when you are offline.

9. Your rights

Subject to the law, you can:

• ask for a copy of the personal data we hold about you;
• ask us to correct data that is wrong or incomplete;
• ask us to delete data we no longer need, unless we must keep it by law, for example payment records;
• object to or ask us to restrict certain processing;
• withdraw consent where processing relies on consent;
• complain to the Personal Data Protection Commission of Tanzania.

Many details can be updated from your account pages. For anything else, email us. We may need to confirm your identity before acting on a request and we aim to respond within the time the law allows.

10. Children

The marketplace is for businesses and adults aged 18 or over. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will remove it.

11. Changes to this policy

We may update this policy when our service or the law changes. We will show the new effective date at the top and, for significant changes, tell signed in users by email or on the site before the change applies.