Legal

Privacy Policy

Last updated: 1 January 2025

This Privacy Policy explains how Hawrat Cyber ("we", "us", "our") collects, uses, stores, and protects your personal data when you use our website at hawratcyber.com or engage our services. It is prepared in accordance with the Tanzania Personal Data Protection Act 2022 ("PDPA").

1. Who we are

Hawrat Cyber is a cybersecurity consultancy based in Dar es Salaam, Tanzania. We provide framework-driven cybersecurity services to businesses across Tanzania and East Africa. Contact: hello@hawratcyber.com

2. What personal data we collect

We may collect the following categories of personal data:

  • Contact information — name, email address, phone number, WhatsApp number
  • Business information — company name, job title, industry
  • Inquiry details — the nature of your cybersecurity needs and any details you provide in our contact form
  • Website usage data — anonymised analytics data via Cloudflare Web Analytics (no cookies; no personal identifiers)
  • Newsletter data — email address if you subscribe to our newsletter

3. How we collect personal data

We collect personal data:

  • When you submit our contact form
  • When you subscribe to our newsletter
  • When you engage us by email or WhatsApp directly
  • During the course of an engagement (client data handled under a separate data processing agreement)

4. How we use your personal data

We use your personal data to:

  • Respond to your inquiry and provide the services you have requested
  • Send you the newsletter you have subscribed to
  • Manage our client relationship and deliver agreed services
  • Comply with legal and regulatory obligations
  • Improve our website and services

We do not sell, rent, or trade your personal data to third parties. We do not use your personal data for automated decision-making.

5. Legal basis for processing

We process personal data on the following legal bases under the Tanzania PDPA:

  • Consent — for newsletter subscriptions and marketing communications
  • Contractual necessity — for processing required to deliver our services
  • Legitimate interests — for responding to business inquiries and improving our website
  • Legal obligation — where required by Tanzanian law

6. How long we retain your data

  • Contact form submissions — 3 years from last contact
  • Client data — 7 years from end of engagement (in line with commercial record-keeping requirements)
  • Newsletter subscribers — until you unsubscribe or request deletion

7. Your rights

Under the Tanzania PDPA, you have the right to:

  • Access your personal data
  • Correct inaccurate personal data
  • Request deletion of your personal data ("right to be forgotten")
  • Withdraw consent at any time
  • Lodge a complaint with the relevant supervisory authority

To exercise any of these rights, contact us at hello@hawratcyber.com. We will respond within 30 days.

8. Data security

We implement technical and organisational measures to protect your personal data, including: encryption in transit (TLS), access controls, and secure data storage via Cloudflare KV. Contact form submissions are protected by Cloudflare Turnstile to prevent automated abuse.

9. Third-party services

We use the following third-party services that may process personal data on our behalf:

  • Cloudflare — website hosting, CDN, and analytics (privacy policy at cloudflare.com/privacy)
  • Resend — transactional email delivery (privacy policy at resend.com/privacy)
  • Cal.com — appointment scheduling (privacy policy at cal.com/privacy)

Each third-party service is assessed for data protection compliance before use. We ensure that data processing agreements are in place where required.

10. International data transfers

Some of our service providers are located outside Tanzania. Where data is transferred internationally, we ensure appropriate safeguards are in place consistent with the Tanzania PDPA.

11. Cookies

Our website uses Cloudflare Web Analytics, which does not use cookies and does not track individual users. We do not use advertising cookies or third-party tracking.

12. Children's data

Our services are not directed at children under 18. We do not knowingly collect personal data from children.

13. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be notified on this page with an updated date. Your continued use of our website or services after changes constitutes acceptance.

14. Contact

For any privacy-related questions or to exercise your rights:
Hawrat Cyber
Dar es Salaam, Tanzania
Email: hello@hawratcyber.com