Privacy Policy
Effective date: July 2026
1. Data We Collect
PHCL Super may collect account identifiers, order metadata, wallet activity logs, and customer support messages to operate marketplace, checkout, and security features.
2. How We Use Data
Data is used to deliver product browsing, order processing, fraud protection, service analytics, and critical account security actions such as session validation and suspicious login detection.
3. Security Controls
We apply server-side admin session controls, CSRF protection, rate limiting, and audit logging on sensitive admin authentication events to reduce unauthorized access risk.
4. Retention
Operational records are retained only as long as needed for service quality, legal compliance, and security incident response. Temporary security lockout data is automatically pruned.
5. Contact
For privacy inquiries, contact support@pihcl.tz.
6. Legal Basis and Consent
We process customer and transaction data under contractual necessity, legal obligations, legitimate security interests, and explicit consent where required. During registration, users provide voluntary consent to Terms and Privacy Policy, and consent metadata is stored for auditability.
7. International Data Transfers
PHCL Super serves users across regions. Where data is transferred outside the user's jurisdiction, we apply reasonable safeguards, access controls, and contractual protections aligned with applicable law.
8. User Rights
Subject to applicable law, users may request access, correction, deletion, or restriction of their personal data. Users may also object to specific processing activities and withdraw optional marketing consent at any time.
9. Children and Age Limits
PHCL Super is intended for users aged 18 and above. We do not knowingly collect personal data from children. If such data is identified, it will be removed promptly.
10. Regulatory Requests and Incident Response
We may disclose data when required by lawful authority, court order, or anti-fraud obligations. Security incidents are investigated, documented, and handled under internal response controls.