Privacy Policy

What we know about you, and why

We know — nobody wakes up excited to read a privacy policy. But this one is worth a few minutes of your time, because it tells you exactly what information we collect when you use Giiftee, why we need it, and how we look after it. We will keep it honest, keep it clear, and try not to put you to sleep in the process.

Last updated: June 2026  ·  Applies to all users of giiftee.co.tz  ·  Prepared in accordance with the Tanzania Personal Data Protection Act, No. 11 of 2022

Who we are

Giiftee is an online gift delivery service based in Dar es Salaam, Tanzania. When you place an order, browse our website, or sign up to hear from us, you are sharing information with us — and we take that seriously.

Under Tanzania's Personal Data Protection Act, 2022, Giiftee operates as a registered Data Controller. That means we are the ones responsible for deciding how your personal information is collected, used, and protected. We do not take that lightly.

What information we collect

We only collect what we actually need — nothing more. Here is a breakdown of the information we gather and exactly why we gather it:

What we collect Why we collect it
Your name To personalise your order, address you properly, and keep your account organised
Email address To send your order confirmation, delivery updates, and — if you opted in — occasional news from us
Phone number So our delivery team can reach you or the recipient before and during delivery
Delivery address To get your gift to the right place. This one is quite essential.
Recipient's name and phone number So we can coordinate delivery directly with the person receiving the gift
Payment information To process your transaction securely. We do not store full card details — this is handled by our secure payment provider
Order history and preferences To help us serve you better over time — and to remind you of things you have ordered before, should you want to repeat them
Device and browsing data To understand how people use our website so we can improve the experience. This is anonymised and aggregated — we are not watching you specifically.

We collect personal data directly from you. We do not buy lists, scrape data from other platforms, or collect information from third parties without your knowledge. What you give us is what we have.

How we use your information

Your data is used for the purposes it was collected — and nothing else. Specifically, we use your information to:

Process and fulfil your orders, coordinate delivery with our team and your recipient, send you updates about your order status, respond to any questions or concerns you send our way, and — if you asked us to — keep you informed about new products, offers, and upcoming gifting occasions that might be useful to you.

We also use anonymised, non-personal browsing data to understand how our website is being used and where we can make it better. This tells us things like which pages are most visited, not who specifically is visiting them.

We will never sell your personal data to anyone. We will never share it with third parties for their own marketing purposes. Your information belongs to you — we are simply looking after it while you shop with us.

Who we share your data with

We share your information only where it is necessary to fulfil your order or operate our service — and only with trusted parties who are required to handle it responsibly.

Our delivery partners receive the recipient's name, phone number and delivery address — enough to get the gift there, nothing more.

Our payment processor handles your transaction securely. They are bound by their own strict data security standards and we do not have access to your full payment details.

Our email and communication tools may store your name and email address in order to send you order updates or, if you opted in, our occasional updates. These providers are contractually bound to use your data only for those purposes.

Beyond these, your data goes nowhere. No selling, no trading, no passing along to people who have nothing to do with your gift.

How we protect your data

We take the security of your personal information seriously. Your data is stored on secure servers, and we use reasonable technical and organisational measures to protect it from unauthorised access, loss, or misuse.

Payments are handled through a secure, encrypted payment gateway — we do not store full card numbers on our systems. Ever.

Access to your personal data within our team is limited to those who genuinely need it to do their job — and they are expected to treat it with the same care we are asking of you when you trust us with it.

How long we keep your data

We keep your personal data for as long as it is needed to serve you and to meet our legal obligations — and not a day longer than necessary. In practice, this means your order history and account information is retained for as long as you remain a Giiftee customer. If you ask us to delete your account, we will do so promptly, subject only to any legal obligations that require us to retain certain records for a defined period.

Marketing and email communications

If you signed up to The Giiftee List — our occasional updates on new gifts, seasonal hampers, and occasion reminders — we will send you emails from time to time. Not every day, not every week, just when we have something genuinely worth telling you about.

Every email we send includes an unsubscribe option. One click and you are off the list, no questions asked. We will not take it personally.

Data outside Tanzania

Some of the tools we use to run our website and communications — email platforms, analytics, payment processors — may store or process data on servers located outside Tanzania. Where this happens, we ensure those providers operate under data protection standards consistent with Tanzanian law and the requirements of the Personal Data Protection Act, 2022.

We do not transfer your personal data internationally without ensuring appropriate protections are in place.

Your rights over your data

Under the Tanzania Personal Data Protection Act, 2022, you have rights over the personal data we hold about you. These are not small print — they are real, and we respect them.


Right to access
You can ask us what personal data we hold about you, and we will tell you.

Right to correction
If something we hold about you is wrong or out of date, you can ask us to update it.

Right to deletion
You can ask us to delete your personal data, subject to any legal obligations we must meet.

Right to object
You can ask us to stop using your data for marketing purposes at any time — including by simply unsubscribing.

To exercise any of these rights, simply reach out to us using the contact details at the bottom of this page. We will respond promptly and handle your request with care.

Cookies

Our website uses cookies — small files that sit in your browser and help the site remember things like what is in your cart, or how you prefer to browse. We use them to make your experience smoother, not to follow you around the internet.

You can manage or disable cookies through your browser settings at any time. Just know that some parts of the site may not work quite as well without them.

Changes to this policy

We may update this privacy policy from time to time as our business grows or as the law requires. When we do, we will update the date at the top of this page. If anything changes in a meaningful way, we will let you know directly. We will not quietly rewrite things and hope you do not notice.


Questions about this policy? We are happy to hear from you. Whether something here was not clear, or you would like to know more about how we handle a specific piece of your data — just reach out. We will respond properly, not with an automated reply that ignores what you actually asked.

Email: hello@giiftee.co.tz    WhatsApp: +255741600999