Privacy policy

1. Who is responsible for your data

Trio Inc Limited, which runs PitaPass, is the data controller for the personal data collected on the PitaPass website and in the PitaPass apps, under the Personal Data Protection Act, 2022. To be added: PDPC registration number

Company

Trio Inc Limited, a company registered in Tanzania. To be added: registration number and TIN

Place of business

Arusha, Tanzania. To be added: full physical address

Phone

+255624012135

Email

To be added: public email address

2. What we collect

• Account details: your name, username, email address, phone number and password (stored encrypted).
• Orders: the events and tickets you buy, the amount paid and the details you enter at checkout.
• Payments: our payment provider handles your payment. We receive a confirmation and reference, not your full card number or mobile money PIN.
• Organizer details: business and contact details, event information and the payout details you give us.
• Entry: when a ticket was scanned at the gate.
• Device and usage: your IP address, browser or device type, and pages visited, kept in server logs and cookies.
• Messages: what you send us when you contact us.

3. The PitaPass apps

The apps collect the same kinds of data as the website. The gate scanner app uses the phone’s camera to read ticket QR codes. Your phone asks for your permission before an app can use the camera or send notifications, and you can turn these off in your phone’s settings.

4. Why we use it

• To create your account, sell you tickets, send them to you and check them at the gate.
• To let organizers run their events: they see the bookings for their own events.
• To pay organizers and handle refunds.
• To answer your questions and tell you about changes to events you booked.
• To keep PitaPass secure and stop fraud and fake events.
• To keep the records the law requires, such as tax records.
• To send news and offers, only if you agree. Every such message lets you stop them.

5. Who we share it with

• The organizer of the event you book: your name, email and ticket details for that event.
• Companies that help us run PitaPass, such as payment, hosting and email providers. They may only use your data to provide their service to us.
• Authorities, when Tanzanian law requires it.

We do not sell your personal data.

6. Data stored outside Tanzania

Some of our providers may store data outside Tanzania. When that happens, we only transfer it as the Personal Data Protection Act allows, with the safeguards it requires. To be confirmed: where the site and its data are hosted

7. How long we keep it

We keep your account data while your account is open. We keep order and payment records for as long as tax and accounting law requires, then delete them. If you close your account, we delete or anonymise the rest.

8. Cookies

We use cookies that the site needs to work, for example to keep you logged in and to remember your cookie choice. To be confirmed: whether analytics cookies are switched on

9. Keeping it safe

The site uses an encrypted connection (HTTPS), passwords are stored encrypted, and only people who need your data for their work can see it.

10. Your rights

Under the Personal Data Protection Act, 2022 you can ask us to:

• show you the personal data we hold about you;
• correct it if it is wrong;
• delete it, unless the law requires us to keep it;
• stop using it for marketing, or for anything else you object to.

Contact us to use any of these rights. If you are not happy with our answer, you can complain to the Personal Data Protection Commission (PDPC) at pdpc.go.tz.

11. Changes to this policy

We will update this page if the way we use your data changes, and tell you by email about important changes.