Privacy notice
Clear about what we collect. Careful with what you share.
Effective: 29 August 2026
Who is responsible
Duma Brands manages the enquiry records collected through this website. Questions or privacy requests can be sent to info@dumabrands.com or made by phone on +255 752 911 144. Please do not send passwords, access keys, financial records or sensitive personal information in a project brief. Email our privacy contact.
Information we collect
When you submit a form, we collect the details you provide, which may include your name, organisation, email, phone number, service interest, timing, budget range and project brief. We also record the form and page used, referral or campaign tags, browser, operating system, device category, language, timezone and approximate city, region or country when our hosting provider supplies it. We do not request GPS or precise location. A one-way IP hash may be used to identify repeated abuse without storing the raw address in the lead record.
How and why we use it
We use this information to respond to your request, assess project fit, prepare proposals, manage follow-ups, keep an accurate record of business discussions, measure which website journeys generate enquiries and protect the service from spam or misuse. We process information only for the purpose explained at collection, a step you ask us to take, a client relationship, a legal duty or another permitted business purpose. We do not sell enquiry data or add it to unrelated promotional lists.
Unsent drafts and preferences
To prevent a half-completed brief from disappearing when you change language, eligible form fields are saved temporarily in that browser tab. The draft is not sent to Duma Brands until you submit, and it is removed after successful delivery, after four hours, or when the tab session ends. The privacy checkbox is never restored automatically. Your chosen language and light or dark theme may remain in local storage until you clear browser data.
Providers and international processing
Hostinger delivers the website. Supabase stores enquiry records and Resend delivers the internal alert and your confirmation email when those services are configured. GitHub and Pages CMS support controlled website publishing but do not receive form submissions through the public interface. If Duma Brands enables optional campaign measurement, Google and Meta scripts load only after you choose Allow measurement; declining keeps them off. WhatsApp or your email provider processes information only if you choose those contact routes. A provider may process data outside Tanzania under its own safeguards and contractual terms; we give providers only the information needed for its role.
Retention
We retain an enquiry while it is active and for a reasonable period afterwards to manage follow-up, maintain business records, resolve disputes and meet applicable obligations. The period depends on whether the enquiry becomes a client relationship and any legal or accounting requirement. Records that are no longer needed are deleted or anonymised during periodic reviews. You may request deletion sooner where the law allows.
Security
Administrative access is protected by server-side authentication, a hashed password, secure session cookies, request verification and login throttling. Database credentials are kept on the server rather than in public browser code. We also use access controls, encrypted connections, backups and reputable infrastructure providers. No internet service can guarantee absolute security; if we identify a breach that requires action, we will respond and notify affected parties or authorities as applicable.
Your rights and choices
You may ask whether we hold information about you, request access or a copy, ask for inaccurate information to be corrected, object to or restrict certain handling, withdraw a permission you gave, or request deletion where applicable. We may need to confirm your identity and retain limited information where law requires it. You may also raise a concern with Tanzania's Personal Data Protection Commission. Personal Data Protection Commission.
Measurement choices, children and external links
This is a business-services website and is not designed to collect information from children. We do not make automated decisions with legal or similarly significant effects from an enquiry. Optional Google or Meta measurement remains off until you allow it in the privacy choice shown on the website; your decision is saved in your browser and can be reset by clearing site data. Measurement events use page, campaign and interaction context and never intentionally send the name, email, phone number or message entered in a form. Links to WhatsApp, email, maps, sources or other websites are governed by those services' own privacy practices.
Updates
We may update this notice when the website, providers or applicable requirements change. Material changes will be reflected on this page and the effective date will be revised.