Privacy Policy

Effective 2026-10-27

This policy explains how Bluetrain Limited ("Bluetrain", "we", "us") collects and uses personal data when you use bluetrain.africa. We are registered with the Personal Data Protection Commission (PDPC) as a data controller, and we handle personal data under the Personal Data Protection Act, 2022 and its regulations.

1. Who we are

Bluetrain Limited, trading as Bluetrain Africa, is the data controller for this website. Our registered office is at Dar Village Office Park, SNDBX, 2nd Floor, Rose Garden Road, Mikocheni, P.O. Box 32329, Kijitonyama, Dar es Salaam, Tanzania.

For anything about your personal data, email legal@bluetrain.co.tz.

2. What we collect

We only collect what you choose to send us, plus the technical data needed to run the site.

Discovery form: what you are building, your timeline and budget range, your name and email, any note you add, and the language you used on the site.
Booking a call: your name and email, your company and phone number if you give them, the topic, the time and team member you choose, your time zone and site language.
With either form: the page you sent it from, the website that referred you, and any campaign tags in the link you followed (such as utm_source). We also record a hidden spam-check field and how long the form took to complete.
When you visit: our hosting provider, Cloudflare, processes your IP address, browser type and the pages you request, to deliver the site and protect it from attacks.

We do not ask for sensitive personal data, such as health, religious or financial details. Please do not include it in your messages.

3. How we use it, and why

To do what you asked: reply to your enquiry, prepare a proposal, and schedule and hold your call. You give us these details so we can take these steps for you.
To understand which campaigns bring enquiries: we look at referral and campaign data in summary form to improve our marketing.
To keep the site safe: we block spam and attacks.
To meet our legal duties: for example, keeping business records the law requires.

We use your data only for these purposes. We do not sell it, build advertising profiles from it, or make decisions about you by automated means alone.

We will only send you newsletters or other marketing if you clearly agree to receive them. You can unsubscribe at any time.

4. Who we share it with

Our team: the Bluetrain staff who handle enquiries and bookings.
Service providers working for us: Cloudflare (website hosting, security, and storing enquiries in our client portal) and Google (Google Workspace email and calendar, used to reply and send call invitations). They may use the data only on our instructions and under contract.
Authorities: when a law or a court requires it.

We never sell or rent personal data.

5. Transfers outside Tanzania

Cloudflare and Google run global networks, so your data may be processed or stored outside Tanzania. We transfer only what is needed, we use providers that protect personal data under contract and with technical measures such as encryption, and we follow the Act's rules on cross-border transfers.

6. How long we keep it

Enquiries and bookings: 2 years after our last contact with you. We then delete the data or make it anonymous.
If you become a client: for the length of our agreement, and afterwards for as long as Tanzanian law requires us to keep business and tax records.
Hosting and security logs: for short periods, as needed to run and protect the site.

7. How we protect it

The site uses encrypted connections (HTTPS). Enquiries are stored in our client portal, where access is limited by sign-in to the staff who need it. We review these measures regularly. If a breach affects personal data, we will report it to the PDPC as the law requires.

8. Your rights

Under the Personal Data Protection Act, 2022, you can:

be told what personal data we hold about you, why, and who receives it, and get a copy;
have inaccurate, outdated or misleading data corrected;
ask us to delete your data;
object to our use of your data, including for direct marketing;
ask us to restrict processing that could cause you harm;
not be subject to decisions made solely by automated means that significantly affect you;
withdraw your consent at any time, without affecting what we did before;
seek compensation if you suffer harm because we broke the Act.

How to use your rights

Email legal@bluetrain.co.tz with the subject "Data request" and tell us what you would like. We may ask you to confirm your identity. We will acknowledge your request within 72 hours and give you our decision within 7 days. If we need longer, we will tell you why.

9. Complaints

If you are unhappy with how we handle your data, please contact us first so we can put it right. You can also complain to the Personal Data Protection Commission (PDPC), Tanzania's data protection regulator.

10. Cookies and storage on your device

We do not use cookies for tracking or advertising. The site stores a few small items in your browser to work properly:

your language and light or dark theme choice (kept until you clear it);
where you arrived from during your visit, so it can be sent with a form (cleared when you close the tab).

Staff who sign in to edit the blog use a short-lived security cookie. You can clear stored items at any time in your browser settings. If we add analytics in future, we will update this policy first and ask for your consent where the law requires.

11. Children

This website is for businesses and is not aimed at children under 18. We do not knowingly collect their data. If you believe a child has sent us personal data, email legal@bluetrain.co.tz and we will delete it.

12. Changes to this policy

We may update this policy when our services or the law change. The effective date at the top shows the latest version. If a change is significant, we will highlight it on the site.

13. Contact us

Bluetrain Limited, Dar Village Office Park, SNDBX, 2nd Floor, Rose Garden Road, Mikocheni, P.O. Box 32329, Kijitonyama, Dar es Salaam, Tanzania. Email legal@bluetrain.co.tz.