Tanzindia Privacy Notice

TANZINDIA ASSURANCE COMPANY LIMITED

EXTERNAL PRIVACY NOTICE

1. Introduction
Tanzindia Assurance Company Limited (TACL) is an insurance provider in Tanzania that offers several insurance services to individuals and institutions. In offering our products and services, we collect personal data for various reasons. TACL is committed to comply with the Personal Data Protection Act, 2022 and best practices relating to personal data protection in all our operations. The purpose of this notice is to inform you about how we collect, use, store, make available, disclose and safeguard your personal data when you visit our website (www.tanzindia.co.tz), interact with us directly, use our services or purchase our insurance products.

2. Data Protection Principles

We process your personal data in accordance with the core principles of data protection. Your data will be:

a) Processed lawfully, fairly and in a transparent manner.

b) Collected for specified and legitimate purposes.

c) Adequate, relevant and limited to what is necessary for the purposes for which it is processed.

d) Kept Accurate as necessary and possible

e) Kept in a form which permits identification for no longer than is necessary.

f) Processed in a manner that ensures appropriate security against unauthorized or unlawful processing, accidental loss, destruction or damage.

3. Information We Collect

As a Data Controller and a Data Processor, Tanzindia collects personal data directly from you or indirectly through intermediaries, service providers and other third parties. We may collect the following personal information.

4. How We Collect Your Personal Data

We collect your personal data through various channels, including:

a) Directly from you: When you fill our forms, contact us via phone or email or visit our offices.

b) From Third Parties: Through insurance brokers, agents, loss adjusters, investigators and law enforcement agencies.

c) Online: Through cookies when you use our website.

5. How we use Your personal Data

We use your personal data for the following purposes:

a) Underwriting and Policy Administration: To assess insurance risks, calculate premiums, issue policies and manage your insurance coverage.

b) Claims Processing: To investigate, assess and settle insurance claims efficiently.

c) Customer Service: To respond to your inquiries, handle complaints and send policy renewal notices.

d) Regulatory Compliance: To comply with Anti-Money Laundering (AML), Know Your Customer (KYC) requirements, TRA and reporting obligations to the Tanzania Insurance Regulatory Authority (TIRA).

e) Fraud Prevention: To detect, prevent and investigate fraudulent activities.

f) Security: To ensure the physical security of our premises, staff and visitors via CCTV monitoring, visitor log book and other measures.

g) Business needs and operations; To enhance and improve the product and services we offer.

h) Defend: To establish, exercise or defend our legal rights such as when we are faced with any legal claim or where we want to pursue any legal claims.

i) Advertisement: To advertise and market to you our latest products and services (please note that if you do not want to receive our marketing information you may opt-out or withdraw your consent anytime by contacting us).

j) Notice: To send you important notices such as changes to our terms, conditions and policies.

6. Legal Basis for use of your personal data

a) Performance of a contract: Provision of Personal Data is necessary for the performance of an agreement with You and/or for any pre-contractual obligations thereof.

b) Consent: You have given Your consent for processing Personal Data for one or more specific purposes. You are able to withdraw your consent at any time and you can do this by contacting us at dpo@tanzindia.co.tz

c) Legal obligations: Processing Personal Data is necessary for compliance with a legal obligation to which the Company is subject.

d) Vital interests: Processing Personal Data is necessary in order to protect Your vital interests or of another natural person.

e) Public interests: Processing Personal Data is related to a task that is carried out in the public interest or in the exercise of official authority vested in the Company.

f) Legitimate interests: Processing Personal Data is necessary for the purposes of the legitimate interests pursued by the Company or a third party.

7. Disclosure and Sharing of Personal Data

we may share Your personal data with the following categories of third parties:

a) Government Authorities such as TIRA, FIU, TRA, police and courts.

b) Insurers, reinsurers, agents and brokers who help us manage and underwrite our products and provide us with reinsurance and insurance services.

c) Our professional advisers such as auditors, tax advisers, actuarial, medical agencies, legal advisers or others who act on our or your behalf.

d) Loss adjusters, surveyors and claims experts who help us handle claims.

e) Vendors or third-party service providers such as garages, legal advisors, actuarial and others.

8. Cross-Border Data Transfers

We will process your personal data in Tanzania and may transfer data to where our third-party service providers operate mainly Kenya and India. We will only process and transfer personal information to countries that we are satisfied will provide adequate data protection and we ensure our third-party service providers comply with the minimum data protection standards as required by the law and us.

9. Data Retention

We will only retain your personal data for as long as may be reasonably necessary to fulfil the purpose we collected it for including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting information. While we retain your personal data, we will ensure that it is kept securely and protected from loss, misuse or unauthorised access and disclosure. Once the retention period is reached, we will delete your personal data. We may retain your personal data for a longer period if the retention is:

a) Required or authorised by law.

b) Reasonably necessary for a lawful purpose.

c) Authorised or consented by you.

d) Is necessary for purposes of responding to a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.

10. Security of Your Personal Data

We have implemented robust technical and organizational security measures to protect your personal data from unauthorized access, accidental loss, disclosure, or destruction. These measures include data encryption, secure firewalls, strict access controls, staff training, and physical security protocols at our premises.

11. Your Rights as a data subject

You have the right to:

a) Be given a description of how your personal data is being processed, the purposes and the recipients if/when disclosed

b) Request access to your personal data held by us.

c) Ask us to rectify personal data if it is not correct, changed, outdated, incomplete or misleading.

d) Request that we erase your personal data in certain circumstances such as if you withdraw consent or if you no longer wish us to process your personal data. The withdrawal of consent shall not affect the lawfulness or processing based on prior consent before its withdrawal.

e) Object to the processing of all or part of your personal data;

f) Withdraw your consent and tell us to stop sending you direct marketing at any time.

g) Complain to us in relation to our processing of your personal data

h) Not to be subjected to a decision based solely on our automated processing including profiling which legally and significantly affects you.

12. Children’s Privacy

Our direct services are not intended for children under 18 years of age. However, we may process the personal data of minors when they become a beneficiaries on an insurance policy or where such data is collected solely with the explicit consent of the parent or legal guardian.

13. Cookies

Cookies are small text files which are stored on your computer when you visit certain web pages. TACL may use cookies and similar technologies on our websites and you can read our cookies policy here……

14. Third-Party Links

Our website may contain links to third-party websites. We do not control these websites and are not responsible for their privacy practices. We encourage you to read the privacy notices of any external sites you visit.

15. How to Contact Us or Complain

If you wish to exercise your rights, update your information or make a complaint regarding our data handling practices, please contact our Data Protection Officer (DPO) at:

Tanzindia Assurance Company Limited
Head Office, 5th Floor, Amani Place, Ohio Street
P.O. Box 1645, Dar Es Salaam, Tanzania
Email: dpo@tanzindia.co.tz
Phone: +255 22 2122914

16. Changes to this Privacy Notice

We reserve the right to update this Privacy Notice periodically to reflect changes in our business practices or legal requirements. The updated version will be published on our website with the revised effective date.

Effective Date: April 2026