Data Protection Act

01Our commitment

Tanzania's Personal Data Protection Act, 2022 and its 2023 regulations set the rules for how personal data is collected, used and protected. Kilimo Maendeleo is a social enterprise that handles data for farmers, farmer organizations and partners across many value chains, so we treat this law as a core part of how KM360 works. Our Privacy Policy explains in detail what we collect and why.

02Registration with the PDPC

Kilimo Maendeleo Enterprises Limited is registered with the Personal Data Protection Commission (PDPC) as both a:

Data Controller: Registration no. 0-000-000-604
Data Processor: Registration no. 0-000-000-604
Registered on: 15 November 2024
Under: Section 14/21 of the Personal Data Protection Act, No. 11 of 2022

PDPC Certificate of Registration: Kilimo Maendeleo Enterprises Limited as a Data Controller, registration number 0-000-000-604, dated 15 November 2024

Data Controller certificatePDPC · Open PDF ↗

PDPC Certificate of Registration: Kilimo Maendeleo Enterprises Limited as a Data Processor, registration number 0-000-000-604, dated 15 November 2024

Data Processor certificatePDPC · Open PDF ↗

As a Data Controller, we decide how and why personal data on KM360 is processed. As a Data Processor, we process data on behalf of partners, such as banks and development programmes, under written agreements.

03Our statutory declaration

On 2 October 2024, Kilimo Maendeleo Enterprises Limited of P.O. Box 105163, Dar es Salaam, made a statutory declaration under the Oaths and Statutory Declarations Act, Cap 34 R.E. 2019, declaring that:

It is the proprietor of KILIMO.IO and JEMBEPESA.COM together with their application software.
At all times while these sites and their application software are in operation, it shall be bound by their Privacy Policy and Terms of Use, in their English and Kiswahili versions.
It makes this declaration conscientiously under the Act.

Kilimo Maendeleo Enterprises Limited is also the proprietor of KM360.IO and LONGA.COM, together with their application software.

The declaration was signed by Mathew A. Ngwahi, Managing Director, and Hussein E. Haule, Chief Technology Officer, sealed with the company seal, and made before a Commissioner for Oaths. Select a copy to view it full size.

Signed statutory declaration in English, dated 2 October 2024

Declaration (English)Signed and sealed, 2 October 2024

Tamko lililosainiwa kwa Kiswahili, tarehe 2 Oktoba 2024

Tamko (Kiswahili)Limesainiwa na kugongwa muhuri, 2 Oktoba 2024

Kiswahili: Tarehe 2 Oktoba 2024, kwa mujibu wa Sheria ya Viapo na Tamko la Kisheria, Sura ya 34 R.E. 2019, Kilimo Maendeleo Enterprises Limited ilitamka kuwa ndiyo mmiliki wa KILIMO.IO na JEMBEPESA.COM pamoja na programu tumizi zake, na kwamba itazingatia Sera ya Faragha na Masharti ya Matumizi kwa Kiingereza na Kiswahili wakati wote. Kampuni pia ni mmiliki wa KM360.IO na LONGA.COM pamoja na programu tumizi zake.

04How we apply the law

Principle	What it means on KM360
Lawful and fair	We collect data with consent or another legal basis, and explain why at registration.
Purpose limitation	We use data only for the purposes set out in our Privacy Policy.
Data minimization	We collect only what each service needs.
Accuracy	Members must give accurate information and update it as needed. You can ask us to correct your records at any time.
Storage limitation	We keep data only as long as needed to provide services or as required by law, then anonymize or delete it securely.
Security	Farmer data is hosted on our own servers in Tanzania. Our digital tools, such as the KM360 apps and virtual servers, run with trusted cloud providers. Both are protected by encryption in transit, restricted access, firewalls, intrusion detection and regular security audits.
Accountability	We record every transfer of farmer data to a partner on a data transfer form.

05Your rights

Under the Personal Data Protection Act, 2022 and our Privacy Policy, you have the right to:

Be informed about how your data is collected and used.
Access your personal information.
Correct information that is wrong or incomplete.
Delete your personal information. Use the Data Removal Request page.
Object to or restrict how your data is processed.
Opt out of marketing communications.
Ask for a person to review a decision made only by automated means, such as a credit score.

07Security and breaches

We protect personal data with encryption (such as SSL/TLS) in transit, access restricted to authorized staff bound by confidentiality agreements, anonymization or pseudonymization where possible, firewalls and intrusion detection, and regular security audits. If a personal data breach occurs, we will notify the PDPC and affected individuals as the law requires.

08How to make a request

To delete your data, use the Data Removal Request page.
For any other request, contact KM360 Customer Support. We will confirm your identity before acting, to protect your data.

Company: Kilimo Maendeleo Enterprises Limited · KM360 Customer Support
Postal address: P.O. Box 105163, Dar es Salaam, Tanzania
Office: NATAI PLAZA, Mikocheni, Dar es Salaam
Email: support@kilimo.io
Phone: +255 752 231 143
Website: www.kilimo.io

09Complaints

If you are unhappy with how we handled your data, contact us first so we can put it right. You also have the right to complain to the Personal Data Protection Commission (PDPC) of Tanzania.