Legal
Privacy Policy
This policy explains what personal information iMpact Inc collects, why we collect it, how we use and protect it, and the choices and rights you have.
1. Overview
iMpact Inc (“iMpact”, “we”, “us” or “our”) is committed to protecting your privacy. This policy applies to impactinc.co.tz and any related pages, forms and communications. By using our website or contacting us, you agree to the practices described here.
2. Who we are
The data controller responsible for your personal information is:
- iMpact Inc — [registered company name & registration number]
- [Street address], Dar es Salaam, Tanzania
- Email: info@impactinc.co.tz
- Privacy enquiries: info@impactinc.co.tz
3. Information we collect
Information you give us
When you complete our contact form, subscribe to our newsletter, or email us, we collect details such as your name, email address, organisation, the topic of your enquiry, and the contents of your message.
Information collected automatically
When you visit the site, our hosting and any analytics tools may collect limited technical data such as your device type, browser, approximate region, the pages you view and the date and time of your visit. This helps us keep the site secure and understand how it is used.
4. How we use your information
- To respond to your enquiry and provide the services or information you request.
- To send you our newsletter, where you have asked to receive it.
- To operate, secure, maintain and improve our website.
- To keep records and meet our legal and regulatory obligations.
We do not sell your personal information, and we do not use it for automated decision-making that produces legal effects about you.
5. Legal bases for processing
Where data protection law requires a legal basis, we rely on one or more of the following:
- Consent — for example, when you subscribe to our newsletter. You can withdraw consent at any time.
- Legitimate interests — to respond to enquiries, run our business and keep the site secure, balanced against your rights.
- Contract — where processing is necessary to take steps you have requested before entering into, or to perform, an agreement with us.
- Legal obligation — where we must process your data to comply with the law.
6. Cookies & analytics
Our site aims to use the minimum cookies necessary to function. We may use privacy-respecting analytics to understand aggregate, anonymised usage. We load the Poppins typeface from Google Fonts, which may receive your IP address as part of serving the font. You can control or block cookies through your browser settings; doing so may affect how some features work.
7. Third-party services we use
We rely on a small number of trusted service providers who process data on our behalf, under appropriate safeguards:
- Form handling — [Web3Forms / Formspree], to receive and deliver messages submitted through our contact form.
- Hosting — [GitHub Pages / Netlify / your host], which serves the website.
- Fonts — Google Fonts, to display our typeface.
- Email — [your email provider], to receive and reply to your messages.
Each provider has its own privacy policy governing how it handles data.
8. Sharing your information
We only share personal information where necessary: with the service providers listed above; where required by law, regulation or legal process; or to protect the rights, safety and property of iMpact, our clients or others. We do not share your details with third parties for their own marketing.
9. How long we keep your data
We keep personal information only for as long as needed for the purposes set out in this policy — for example, to handle your enquiry and for a reasonable period afterwards — or as required by law. When it is no longer needed, we securely delete or anonymise it. Newsletter data is kept until you unsubscribe.
10. How we protect your data
We apply reasonable technical and organisational measures to protect your information against loss, misuse and unauthorised access — including encryption in transit (HTTPS) and limiting access to those who need it. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.
11. Your rights
Subject to applicable law, including the Tanzania Personal Data Protection Act, 2022 (and the GDPR/UK GDPR where it applies to you), you may have the right to:
- access the personal information we hold about you;
- ask us to correct inaccurate or incomplete information;
- ask us to delete your information in certain circumstances;
- object to, or ask us to restrict, certain processing;
- withdraw consent where we rely on it; and
- request a copy of your data in a portable format.
To exercise any of these, email info@impactinc.co.tz. You also have the right to lodge a complaint with the Personal Data Protection Commission of Tanzania (or your local data protection authority).
12. International transfers
Some of our service providers may store or process data outside Tanzania. Where information is transferred internationally, we take steps to ensure it remains protected by appropriate safeguards consistent with this policy and applicable law.
13. Children's privacy
Our website and services are intended for organisations and adults. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
14. Changes to this policy
We may update this policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, notify you. Please review this page periodically.
15. Contact us
If you have any questions about this policy or how we handle your information, contact us at info@impactinc.co.tz or write to iMpact Inc, [street address], Dar es Salaam, Tanzania.