About this notice
This notice explains how Dalali handles information when you browse, create an account, publish listings or use marketplace services. It covers Dalali, not the independent websites, payment providers or phone apps you choose to use.
Information we use
Account information includes your name, phone number, language, account type and verification status. We store a password hash, not a readable password. Marketplace records include listings, photos, service areas, saved listings, messages, appointments, reviews and support requests. Security records include sessions, verification attempts and relevant activity logs. Payment-related records may include order references and verified transaction events when those services are enabled.
Why information is processed
We use information to provide requested services, protect accounts, prevent fraud, manage disputes, keep necessary business records and meet applicable legal duties. Where consent is required for a particular use, we ask separately. Acknowledging this notice does not give permission for every possible use or for unrelated marketing.
What other people can see
Published listings and eligible public seller profiles can be viewed by others. Drafts are private to their owner and authorised business teammates. Choose whether direct contact details are hidden, available to signed-in buyers with verified phones, or available to anyone viewing your public listings. Public information can be copied by others. Do not publish identity documents, payment secrets or information you have no right to share.
Sharing and external services
Authorised staff and business teammates receive access appropriate to their work. Enabling a delivery or payment service may require sharing the information needed with its provider. Legal disclosures may be made where required. Opening WhatsApp, SMS, calls, maps or an advertised website uses another service with its own terms. Dalali does not sell your private messages as advertising data.
Cookies and this device
Essential cookies keep your sign-in session working. Local storage may remember language and settings. The installable app caches public interface files for reliability; it does not intentionally cache private API responses. Device-only listing drafts are saved only when you choose that option. Clear those copies on a shared device. Non-essential tracking requires a separate choice before use.
Retention, security and account closure
We restrict access and use security controls to reduce unauthorised use. No system can eliminate every risk. Closing an account is a review process, not an immediate promise to erase every record. Open transactions, disputes, security investigations and legal record-keeping can require retention. Private device copies must be removed from the device separately.
Your choices and rights
Use Account & settings to correct details and contact preferences. Account controls lets you request a copy or account closure. Depending on applicable law, you may also request access, correction, restriction, objection or deletion, withdraw a specific consent and challenge a decision affecting you. Requests may require proportionate identity checks and may be subject to lawful exceptions. Use Help & support for privacy requests and complaints. You may also complain to Tanzania’s Personal Data Protection Commission at pdpc.go.tz.
Hosting and international processing
Some infrastructure or providers may process information outside Tanzania. Applicable transfer requirements must be met before information is transferred. This notice is not consent to an unrestricted overseas transfer.