How we handle personal data.

Who we are

Encipher Company Limited ("Encipher", "we") is an enterprise software company registered in Tanzania and based in Dar es Salaam, Tanzania. For personal data collected through this website, Encipher is the data controller. You can reach us about anything in this policy at business@encipher.co.tz.

The standards we work to

We handle personal data in line with the EU General Data Protection Regulation (GDPR) and Tanzania's Personal Data Protection Act, 2022. In practice that means we collect only what a purpose needs, keep it no longer than that purpose requires, protect it with appropriate technical and organisational measures, and give you the rights listed below.

What this website collects

This website collects personal data in one place: the contact form.

• Contact form. Your name, work email address, organisation, the topic you choose, your message and the page you sent it from. We use this to reply to your enquiry and, where you asked for one, to arrange a demo. The legal basis is our legitimate interest in responding to a request you have made to us. Enquiries are stored in a database hosted by Supabase, and are deleted 24 months after the last contact about them unless they have become part of a customer relationship.
• Server logs. Our hosting provider records the IP address, time and page requested for each visit, as every web server does, to keep the site secure and available. These logs are kept for a short, fixed period and are not used to identify you.
• No tracking cookies. This website sets no advertising or analytics cookies and loads no third-party trackers. Links to email and partner websites take you to those services, which have their own policies.

Data inside our platforms

When an institution runs PRISM, the Documents Intelligence Engine, e-sync or PetroLink, that institution is the data controller for the customer, employee and operational data inside it, and Encipher is a data processor acting on its instructions under a written agreement. Each platform is built with role-based access, encryption in transit and at rest, an immutable audit trail and configurable retention, so the controller can meet its own obligations. Questions about data held in a platform should go to the institution that operates it; we will help them answer.

Who we share data with

We do not sell personal data and do not share it for marketing. We share it only with the providers that run our systems (hosting, email and the database that stores enquiries), each bound by a data processing agreement, and where the law requires it. Where a provider stores data outside Tanzania or the European Economic Area, transfers rest on that provider's standard contractual clauses or an equivalent safeguard.

Your rights

You can ask us, at any time, to:

• tell you what personal data we hold about you and give you a copy;
• correct data that is wrong or incomplete;
• delete your data, where we have no continuing reason to keep it;
• restrict or object to how we use it;
• receive the data you gave us in a portable format.

Email business@encipher.co.tz with "privacy" in the subject. We reply within one working day and complete requests within one month. If you are not satisfied, you can complain to the Personal Data Protection Commission of Tanzania or, for EU residents, to your local supervisory authority.

Security

Access to enquiry data is limited to the people who handle enquiries, over authenticated connections, and is logged. The database that holds it is not readable from this website: the site can only add an enquiry, never read one back.

Changes to this policy

We update this page when our practices change and show the date of the last change at the top. Significant changes affecting how we use data already collected will be communicated to the people affected.