Privacy Policy
Trada respects privacy and protects personal information across marketplace, food, seller, delivery, escrow, money-transfer, payment and customer-support services.
Introduction
This Privacy Policy explains how Trada collects, uses, stores, shares and protects personal information when you use our marketplace, food ordering, seller, delivery, payment, support and related services.
Information you provide
We may collect your name, telephone number, email address, password credentials, profile details, delivery addresses, seller and business information, identification documents, tax information, product listings, order instructions, support messages, reviews and other information you submit.
Transaction and payment information
We process order references, purchased items, prices, discounts, payment status, payment method, refunds, disputes and payout records. Card and mobile-money credentials may be handled directly by approved payment providers; Trada receives the status and references needed to reconcile the transaction.
Location and delivery information
With your permission, we may use precise or approximate location, saved addresses, delivery notes and route information to estimate delivery, show nearby food businesses and fulfil orders. You can control device location permission in your browser or device settings.
Device and usage data
We may collect IP address, device type, operating system, browser, app version, language, identifiers, access time, pages viewed, searches, clicks, crash information and security events. This helps us operate, secure and improve the platform.
How we use information
We use information to create and secure accounts; provide marketplace and food services; process orders and payments; coordinate delivery; verify sellers; prevent fraud; resolve disputes; provide customer support; send operational notifications; personalize discovery; measure performance; comply with law; and improve Trada.
Communications
We may send order, payment, delivery, security and support messages by in-app notification, push notification, SMS or email. Marketing messages are sent according to your choices and applicable law. Essential service and security messages cannot always be disabled.
Sharing of information
We share only the information needed with sellers, buyers, restaurants, delivery providers, payment processors, identity-verification providers, hosting and communications providers, professional advisers and public authorities where legally required. We do not sell personal information.
Seller and public information
Seller business names, profile images, ratings, reviews, product listings, service areas and other marketplace information may be public. Do not publish information you do not want visible to marketplace users.
Cookies and similar technology
The website may use session cookies, security tokens, local storage and analytics technology to keep you signed in, remember settings, protect checkout and understand platform use. Browser settings can restrict cookies, although some features may stop working.
Retention
We retain information for as long as necessary to provide services, maintain transaction and accounting records, meet legal duties, enforce agreements, prevent fraud and resolve disputes. Retention periods depend on the information and applicable requirements.
Security
We use administrative, technical and physical safeguards including access controls, encryption where appropriate, logging, monitoring and service-provider review. No system is completely secure, so users must protect passwords, devices and verification codes.
Your choices and rights
Subject to applicable law, you may request access, correction, deletion, restriction or a copy of personal information, and may object to certain processing. Some records must be retained for legal, security or transaction purposes.
Children
Trada is not intended for children who cannot legally enter binding transactions. A parent or guardian should contact support if a child has provided personal information without appropriate authorization.
International processing
Some service providers may process information outside Tanzania. Where this occurs, Trada uses appropriate contractual, organizational and legal safeguards.
Changes to this policy
We may update this policy when services, technology or legal requirements change. The current version and effective date will be published on this page.
Contact
Questions and privacy requests can be submitted through the Trada support page or the support contact displayed on this website. Include enough detail for us to identify and respond to the request securely.
Detailed processing purposes and data categories
Account administration uses identity, contact, authentication, device and account-setting information to register users, verify eligibility, prevent duplicate or fraudulent accounts, provide login credentials and maintain buyer or seller profiles. Marketplace fulfilment uses account, product, cart, order, address, communication, location and transaction information to create orders, reserve stock, connect buyers with sellers, coordinate food preparation and arrange delivery. Payment and escrow administration uses payer and payee identifiers, amounts, currency, provider references, status events, settlement instructions, withdrawal details, refund information and dispute evidence to initiate, reconcile, hold, release, reverse or report transactions. Support and safety operations use correspondence, call or chat records, attachments, complaints, ratings, device information and transaction history to investigate incidents, resolve disputes and improve service quality.
Identity verification, KYC, AML and sanctions screening
Where required by risk, transaction value, seller activity, payment partners or law, Trada may request government identification, business-registration documents, beneficial-ownership information, tax identifiers, proof of address, bank or mobile-money ownership, source-of-funds explanations and verification images. We and authorized verification providers may compare information against official or commercially available sources, fraud indicators, sanctions or politically exposed person lists. A verification result may affect account activation, transaction limits, withdrawals, escrow release or access to regulated services. Trada does not use verification data for unrelated advertising.
Escrow, money transfer and payment records
When a transaction uses escrow or a connected money-transfer service, Trada processes the information necessary to identify the parties, preserve the agreed terms, record funding, monitor payment confirmation, calculate permitted charges, assess release conditions, process refunds and support regulatory or financial audits. Payment credentials may be collected directly by a licensed or approved payment provider. Trada normally receives tokens, masked account details, provider names, transaction references and status information rather than complete card or mobile-money credentials. Records may be retained after account closure where financial, anti-fraud, tax, accounting or dispute obligations require it.
Automated risk signals and meaningful review
Trada may use rules or risk scores to identify unusual login attempts, account takeover, payment abuse, false listings, coordinated reviews, suspicious withdrawals, abnormal ordering, prohibited products or repeated disputes. Signals may include transaction velocity, device consistency, failed verification, location anomalies, account relationships and prior platform events. These tools support human review and platform security. Where an automated restriction materially affects an eligible user, the user may contact Support and provide information for reconsideration, subject to legal or security limitations.
Seller, restaurant and delivery-partner disclosures
To complete a transaction, buyers may receive a seller or restaurant name, business profile, service location, rating and relevant contact information. Sellers, restaurants and delivery providers may receive the customer name, order contents, delivery or pickup instructions, contact channel, payment status and information reasonably needed for fulfilment. Parties must use this information only for the relevant transaction, support, legal compliance and permitted record keeping. Harvesting, reselling, profiling or marketing with another user’s information without a lawful basis is prohibited.
Service providers and recipient controls
Recipients may include hosting and cloud providers, communications and notification vendors, identity-verification services, fraud and cybersecurity specialists, payment processors, financial institutions, mobile-network operators, delivery and mapping providers, customer-support systems, professional advisers, insurers, auditors and competent public authorities. Trada applies access limitation, confidentiality, purpose restriction, security review and contractual safeguards appropriate to the service and risk. Each independent provider may also process information under its own legally required notice.
Tanzania data protection and regulatory cooperation
Trada processes personal data with regard to Tanzania’s Personal Data Protection Act, 2022, its regulations and guidance issued by the Personal Data Protection Commission, together with applicable electronic-transactions, consumer-protection, financial, tax, anti-money-laundering and cybersecurity requirements. Depending on the service, Trada may act as data controller, joint participant in a transaction, or processor for a business customer. Regulatory references describe our compliance framework and do not represent a licence for an activity that Trada does not itself conduct.
Cross-border transfers
Technology, verification, communications, payment or support providers may process information in another country. Before a cross-border transfer, Trada considers the destination, service purpose, information sensitivity and available safeguards. Safeguards may include contractual data-protection clauses, confidentiality duties, encryption, restricted access, transfer assessments and verification that the recipient can protect the information. Users may contact Support for general information about relevant transfer safeguards, subject to commercial and security confidentiality.
Retention schedule and deletion
Account and profile data is generally retained while the account remains active. Order, escrow, payment, settlement, refund, tax and accounting records may be retained for the legally required period. Support, dispute, fraud and security records may be retained for the time needed to establish, exercise or defend claims and protect the platform. Marketing preferences are retained to respect opt-outs. When retention is no longer justified, information is deleted, anonymized or isolated from ordinary use. A deletion request does not require deletion of records that Trada must lawfully preserve.
Data-subject requests and verification
Subject to applicable law, an individual may request confirmation of processing, access, correction, completion, deletion, restriction, objection, withdrawal of consent or a portable copy of eligible information. Requests must identify the account and the right being exercised. Trada may request proportionate identity verification, clarify broad requests, protect another person’s rights and refuse or limit a request where law permits. We aim to respond within the applicable statutory period and will explain material limitations.
Complaints and supervisory authority
Privacy concerns should first be submitted through Trada Support or the public contact page so they can be recorded and investigated. Include the affected account, service, approximate date and relevant transaction reference without sending passwords or verification codes. If a concern is not resolved, an individual may pursue available remedies or contact Tanzania’s Personal Data Protection Commission in accordance with its published procedures.