Under Tanzania's Personal Data Protection Act, 2022, you may request erasure of your personal data. Here is how the process works, what is deleted, and what the law may require us to keep.
How it works
If you are a member, owner, or tenant of a body corporate using Kasri, your association is the data controller under Tanzania's Personal Data Protection Act, 2022. Start by contacting your chairman, secretary, or treasurer and requesting erasure of your personal data.
You may also email privacy@kasri.app from the address linked to your Kasri account. Include your full name, association name, and the personal data you want deleted. As processor, we will verify your identity and coordinate with your association where necessary.
To protect people and prevent unauthorised erasure, we verify your identity before processing. This may include email confirmation, knowledge-based checks, or confirmation of membership with your association's administrators.
We process valid requests within the timelines required under the PDPA (typically within 30 days). Depending on scope, personal data is permanently deleted or irreversibly anonymised. Financial and audit records may be retained where Tanzanian law requires it. We confirm completion in writing.
FAQ
Personal data tied to your account — name, email, phone number, profile details, and personal communication records we hold as processor. Content you created (documents, messages) may remain with your association if needed for lawful operational or statutory purposes.
Anonymised audit-log entries (your identity replaced with a non-reversible token), financial transaction records required by Tanzanian law, and aggregated analytics that cannot identify you. Your association's corporate records (minutes, resolutions, levy schedules, ownership register) remain intact.
We aim to complete valid requests within 30 days under the PDPA. If a request is complex or requires coordination with your association, we may need additional time permitted by Tanzanian law and will notify you in writing.
In limited cases — for example where data is needed to meet a legal obligation, keep statutory association records, or establish legal claims — erasure may be refused or limited. We or your association will explain any such limitation in writing.
No. You can withdraw optional marketing or promotional messaging consent at any time without deleting your account. Service-related notices (security alerts, payment receipts, association notices you are entitled to receive) may continue as needed to operate the Service, consistent with applicable TCRA electronic communications rules.
Full association erasure requires termination of the subscription agreement by authorised signatories. Upon termination, association data is handled per our Data Processing Agreement, Privacy Policy, and Terms of Service.
Contact our Data Protection Officer at privacy@kasri.app first. If you remain unsatisfied, you may lodge a complaint with the Personal Data Protection Commission of Tanzania.
Our Data Protection Officer can walk you through PDPA erasure, retention exceptions, and complaints to the Personal Data Protection Commission.
kasri.app