Privacy Policy

Data controller: Mabo360 Ltd

Registered address: Posta, Dar es Salaam, Tanzania

Data-protection / privacy contact: support@mabo360.co.tz

For some services, third-party service providers may process personal data on our behalf under contractual and security obligations.

This Policy applies to the MABO360 website, progressive web application, user accounts, property Listings, messaging, saved properties, optional Rental Management, support, payments and other MABO360 features that refer to this Policy.

It does not govern independent third-party websites or services that have their own privacy notices.

• from you when you register, create or manage a Listing, contact another user, use Rental Management, make a purchase, submit a report or contact support;
• from another MABO360 user where that user is authorized to provide the information, for example tenant contact information entered into optional Rental Management;
• automatically when you use the service, through logs, cookies, security tools and analytics technologies;
• from service providers such as authentication, payment, hosting, anti-fraud or communications providers where necessary to operate the service;
• from public or lawful third-party sources where permitted by law.

Where Tanzanian law requires personal data to be collected directly from the data subject, we will do so unless a lawful exception applies. Before or at collection, we aim to make the purpose of collection and intended recipients clear.

We aim to collect and process personal data only for explicit, specified and legitimate purposes and to keep collection adequate, relevant and limited to what is necessary for those purposes.

Some information may constitute sensitive personal data under Tanzanian law, including certain identification, financial, biometric, child-related or other specially protected information. MABO360 will not intentionally process sensitive personal data unless there is an appropriate lawful basis and any consent or other requirement prescribed by law has been satisfied.

Where sensitive data is requested for verification or another specific feature, the purpose and handling requirements should be presented clearly to the user before collection.

Rental Management is optional. A user may enter information about a tenant or another person in order to manage a rental privately. This information is not intended to become part of the public property Listing.

A user entering another person’s data must have lawful authority to do so, must use it only for legitimate rental-management purposes, and must provide any notice or obtain any consent required by law. Users must not upload unnecessary identity documents or sensitive tenant information merely because the feature permits notes or attachments.

Depending on the circumstances and the final operating model, MABO360 may process some Rental Management data on behalf of the user. The allocation of controller/processor responsibilities should be confirmed in the final legal implementation and, where required, appropriate data-processing terms should apply.

We and users are expected to take reasonable steps to keep personal data complete, accurate, relevant and not misleading for the purpose for which it is used. You can update many account and Listing details directly, and you may contact support@mabo360.co.tz regarding inaccurate personal data that cannot be corrected through the platform.

We may disclose personal data only where reasonably necessary for the stated purposes, where you direct or authorize disclosure, or where law permits or requires it. Categories of recipients may include:

• other MABO360 users, where you choose to publish information or initiate an enquiry/contact;
• cloud-hosting, database, storage, authentication, communications, analytics, security and support service providers;
• payment providers, banks or mobile-money providers when paid features are used;
• verification or anti-fraud providers where such services are enabled;
• professional advisers such as lawyers, auditors and accountants;
• government bodies, regulators, law-enforcement agencies, courts or other authorities where disclosure is required or lawfully requested;
• a buyer, investor, successor or restructuring party in connection with a genuine corporate transaction, subject to appropriate confidentiality and legal safeguards.

We do not sell personal data as a standalone data-broker product. If our advertising or analytics model changes in a way that materially affects personal-data sharing, this Policy and relevant consent controls should be updated before the change is deployed.

Where another organization processes personal data on our behalf, we expect it to act under appropriate instructions and contractual obligations and to implement reasonable security and data-protection measures. Service providers should receive only the data reasonably required for their function.

MABO360 may use cloud, infrastructure, analytics, authentication, communications or other service providers whose systems are located outside Tanzania. This may result in cross-border processing of personal data.

Where personal data is transferred outside Tanzania, we will take steps required by applicable Tanzanian law, including assessing the destination and safeguards, limiting the transfer to legitimate purposes, and obtaining authorization, consent, contractual safeguards or other protections where required.

Before launch, Mabo360 Ltd should document the countries/regions used by key providers such as hosting, database, storage, authentication, analytics and payment providers so that this section accurately reflects the production architecture.

We retain personal data for no longer than reasonably necessary for the purpose for which it was collected, subject to any longer period required or permitted by law, accounting, fraud-prevention, dispute, security or regulatory obligations.

• Account information may be retained while the Account is active and for a reasonable period after closure where necessary for legal, fraud, dispute or security purposes.
• Published Listings may be archived or removed when expired, sold, rented, withdrawn or closed, while limited audit/history records may be retained.
• Private messages and reports may be retained for safety, dispute and moderation purposes for an appropriate period.
• Verification documents should be kept only for as long as justified by the verification, legal and fraud-prevention purpose.
• Rental Management data should be retained only as long as the user needs the service and as otherwise required for legitimate record-keeping or legal purposes.
• Backups may retain deleted information temporarily until normal backup rotation removes it.

The final production system should maintain a documented retention schedule rather than retaining every category indefinitely.

We use reasonable technical and organizational measures designed to protect personal data against unauthorized access, disclosure, alteration, loss, destruction or unlawful processing. Measures may include access controls, authentication, encryption in transit, database security policies, restricted storage, logging, backups and staff access controls appropriate to the risk.

No internet service is completely secure. Users are responsible for protecting their login credentials and devices and should report suspected compromise to support@mabo360.co.tz.

Where a personal-data security breach triggers a legal notification obligation, MABO360 will take the steps required by applicable law, including notification to the relevant authority without undue delay where required.

MABO360 may use cookies, local storage and similar technologies for essential authentication, security, language preference, session continuity, analytics and, if enabled, advertising or personalization.

Where consent is required for non-essential tracking, the platform should provide an appropriate consent or preference mechanism. Essential technologies required to log in, secure the service or remember necessary settings may operate as permitted by law.

The production cookie notice should identify the actual analytics, advertising and other tracking providers used at launch.

We may send service messages necessary to operate your Account. Promotional or direct-marketing communications will be sent only where permitted by law and subject to applicable consent, preference and opt-out requirements.

You may ask us to stop using your personal data for direct marketing through the unsubscribe method provided or by contacting support@mabo360.co.tz. Service and security messages may still be sent where necessary.

Subject to applicable law and any lawful limitations, you may have rights to:

• ask whether we process your personal data and request access to relevant information;
• ask for inaccurate or incomplete personal data to be corrected;
• require processing to stop or be suspended where processing is likely to cause substantial damage and the legal conditions are met;
• object to or stop processing for direct marketing;
• ask for reconsideration of certain decisions that significantly affect you and are based solely on automated processing;
• seek rectification, blocking, erasure or destruction of personal data through the procedures available under applicable law;
• withdraw consent where processing depends on consent, subject to lawful consequences of withdrawal;
• make a complaint to the Personal Data Protection Commission or another competent authority.

To make a privacy request, contact support@mabo360.co.tz. We may need to verify your identity before acting on a request and may retain a record of the request and response.

MABO360 may use automated tools to support spam detection, fraud signals, search ranking, duplicate detection or moderation. We should not make a decision that significantly affects a person solely through automated processing where applicable law gives the person a right to human reconsideration, unless a lawful exception applies.

MABO360 account and transaction-related features are intended for persons aged 18 or older. We do not knowingly design the marketplace to collect children’s data. If child-related or other sensitive personal data is processed, the additional consent and legal protections required by law must be followed.

You may request account closure through support@mabo360.co.tz. Closing an Account may remove or disable public Listings and access to private functionality, but it does not necessarily require immediate deletion of every record. We may retain information where necessary or permitted for legal compliance, fraud prevention, security, disputes, payment records, audit logs, backups or enforcement of agreements.

We may update this Policy to reflect changes in MABO360, our service providers, legal requirements or data practices. We will update the effective date and, where changes are material, provide additional notice through the platform or registered contact details where appropriate.

Privacy questions and requests:

Mabo360 Ltd
Posta, Dar es Salaam, Tanzania
Privacy email: support@mabo360.co.tz
Support email: support@mabo360.co.tz
Website: https://www.mabo360.co.tz

If you believe your personal data has been processed in violation of applicable Tanzanian data-protection law, you may have the right to lodge a complaint with the Personal Data Protection Commission in accordance with applicable procedures.

MABO360 may make this Privacy Policy available in English and Kiswahili. The English version controls if there is a conflict.