Last Updated: October 2025

1. INTRODUCTION

Sando International Limited ("Sando," "we," "us," or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information in compliance with the Personal Data Protection Act, 2022 of Tanzania ("PDPA").

1.1 Our Commitment
We are committed to:

Transparency in how we collect and use personal data
Compliance with Tanzania's Personal Data Protection Act
Protection of your privacy rights
Secure handling of all personal information

1.2 Scope of Policy

This Privacy Policy applies to:

Our website (www.sandointl.com)
Customer interactions and transactions
Technical support and consultation services
Marketing and promotional communications
Any other services provided by Sando International

2. DATA CONTROLLER INFORMATION

Data Controller:

Name: Sando International Limited
Registration: [Company Registration Number]
Physical Address: [Head Office Address], Dar es Salaam, Tanzania
Email: privacy@sandointl.com
Data Protection Officer: [Name and contact details]

3. PERSONAL DATA WE COLLECT

3.1 Information You Provide

We collect personal data that you voluntarily provide when:
Creating an Account or Placing Orders:

Full name
Business/farm name
Physical address and delivery locations
Email address
Telephone/mobile numbers
Business registration details (for commercial accounts)

Requesting Support or Consultation:

Farm location and operation details
Animal health information
Veterinary contact information
Previous product usage history

Subscribing to Communications:

Name and email address
Product interests and preferences
Communication preferences

Applying for Employment or Partnership:

Personal and professional information
Educational qualifications
Work experience and references

3.2 Information Automatically Collected

Website Usage Data:

IP address
Browser type and version
Device information
Pages visited and time spent
Referring website
Date and time of access

Cookies and Tracking Technologies:

Session cookies for website functionality
Analytics cookies for website improvement
Preference cookies for user settings

3.3 Information from Third Parties

We may receive information from:

Business partners and distributors
Veterinary professionals (with your consent)
Credit reference agencies (for commercial accounts)
Public databases and registers

4. LEGAL BASIS FOR PROCESSING

Under the PDPA, we process your personal data based on:

4.1 Consent

Marketing communications
Optional data collection
Cookie preferences

4.2 Contractual Necessity

Processing orders and deliveries
Providing customer support
Managing customer accounts
Fulfilling contractual obligations

4.3 Legal Obligation

Regulatory compliance (TMDA requirements)
Tax and accounting obligations
Record-keeping for controlled substances
Reporting requirements

4.4 Legitimate Interests

Fraud prevention and security
Website improvement and analytics
Business development and planning
Protection of our legal rights

5. HOW WE USE YOUR PERSONAL DATA

5.1 Primary Uses

Order Processing and Fulfillment:

Verifying your identity and authorization
Processing payments and transactions
Arranging delivery of products
Maintaining order history

Customer Support:

Responding to inquiries and requests
Providing technical consultation
Troubleshooting product issues
Following up on service quality

Product Safety and Compliance:

Tracking product usage for safety monitoring
Maintaining records as required by regulations
Reporting adverse events to authorities
Managing product recalls if necessary

Business Operations:

Maintaining customer accounts
Credit assessment and management
Inventory and supply chain management
Financial reporting and auditing

5.2 Marketing and Communications 

With Your Consent:

Sending promotional materials and offers
Product updates and new launches
Educational content and farming tips
Event invitations and training programs

You can opt-out at any time by:

Clicking unsubscribe in emails
Contacting our Data Protection Officer
Adjusting preferences in your account

5.3 Analytics and Improvement

Analyzing website usage patterns
Improving user experience
Developing new products and services
Understanding customer needs and preferences

6. DATA SHARING AND DISCLOSURE

6.1 When We Share Your Data

Service Providers:

Delivery and logistics companies
Payment processors
IT service providers
Marketing service providers

Business Partners:

Authorized distributors (for order fulfillment)
Veterinary professionals (with your consent)
Training and education partners

Legal and Regulatory:

TMDA and other regulatory authorities
Law enforcement (when legally required)
Legal advisors and auditors
Courts and tribunals (in legal proceedings)

6.2 Data Sharing Safeguards

We ensure:

Only necessary data is shared
Recipients are bound by confidentiality obligations
Data processing agreements are in place
Recipients comply with data protection standards

6.3 International Data Transfers

We primarily process data within Tanzania
Any international transfers comply with PDPA requirements
Adequate safeguards are implemented
Your consent obtained where required

7. DATA RETENTION

7.1 Retention Periods

We retain personal data for:
Customer Account Information:

Duration of business relationship
Plus 7 years after account closure (for regulatory compliance)

Transaction Records:

7 years from transaction date (tax and accounting requirements)
Longer for products with extended monitoring requirements

Marketing Communications:

Until you withdraw consent
Or 3 years of inactivity

Website Analytics:

Anonymized after 26 months
Aggregated data retained indefinitely

7.2 Deletion and Anonymization

After retention periods:

Personal data is securely deleted
Or anonymized for statistical purposes
Exceptions made for legal obligations

8. YOUR RIGHTS UNDER PDPA

8.1 Right to Access

You have the right to:

Request confirmation of data processing
Obtain a copy of your personal data
Receive information about processing purposes

8.2 Right to Rectification

You can:

Correct inaccurate personal data
Complete incomplete information
Update outdated records

8.3 Right to Erasure ("Right to be Forgotten")

You may request deletion when:

Data no longer necessary for original purpose
You withdraw consent
Data processed unlawfully
Subject to legal retention requirements

8.4 Right to Restrict Processing

You can request restriction when:

Accuracy of data is contested
Processing is unlawful
Data needed for legal claims
Objection to processing is pending

8.5 Right to Data Portability

You can:

Receive your data in structured, common format
Transmit data to another controller
Where technically feasible

8.6 Right to Object

You can object to:

Processing based on legitimate interests
Direct marketing communications
Automated decision-making

8.7 Right to Withdraw Consent

You can withdraw consent at any time
Does not affect lawfulness of prior processing
May impact our ability to provide services

9. DATA SECURITY

9.1 Security Measures

We implement:
Technical Safeguards:

Encryption of data in transit and at rest
Secure servers and firewalls
Regular security updates and patches
Access controls and authentication

Organizational Measures:

Staff training on data protection
Confidentiality agreements
Regular security audits
Incident response procedures

Physical Security:

Secure facilities with access controls
Surveillance and monitoring
Secure disposal of physical records

9.2 Data Breach Notification
In the event of a data breach:

We will assess the risk to your rights
Notify affected individuals within 72 hours (if high risk)
Report to relevant authorities as required
Take immediate remedial action

9.3 Your Responsibility
Please help protect your data by:

Keeping login credentials confidential
Using strong passwords
Logging out after use on shared devices
Reporting suspicious activity

10. CHILDREN'S PRIVACY

Our services are not directed to children under 18
We do not knowingly collect data from minors
Parents/guardians must provide consent for minors
Contact us if you believe we have inadvertently collected minor's data

11. COOKIES AND TRACKING TECHNOLOGIES

11.1 Types of Cookies We Use

Essential Cookies:

Required for website functionality
Enable secure access and transactions
Cannot be disabled

Analytics Cookies:

Help us understand website usage
Improve user experience
Can be disabled in browser settings

Marketing Cookies:

Track advertising effectiveness
Personalize content
Require your consent

11.2 Managing Cookies
You can control cookies through:

Browser settings
Cookie consent banner on our website
Third-party opt-out tools

Note: Disabling cookies may limit website functionality.

12. THIRD-PARTY LINKS

Our website may contain links to third-party websites
This Privacy Policy does not apply to external sites
We are not responsible for third-party privacy practices
Review privacy policies of external sites before sharing data

13. UPDATES TO THIS PRIVACY POLICY

13.1 Changes and Modifications

We may update this Privacy Policy periodically
Changes posted on our website with revision date
Significant changes communicated via email
Continued use constitutes acceptance of changes

13.2 Review Frequency

We review this policy:

Annually as standard practice
When laws or regulations change
When business practices evolve
Following security incidents

14. COMPLAINTS AND ENFORCEMENT

14.1 Internal Complaints

If you have concerns about our data practices:

Contact our Data Protection Officer
We will investigate and respond within 30 days
Escalation procedures available if unresolved

14.2 Regulatory Authority
You have the right to lodge a complaint with:
Tanzania Personal Data Protection Office

Independent oversight of PDPA compliance
Investigation of complaints