Privacy Policy

1. Information We Collect

Personal Information

We collect information that you voluntarily provide when using our systems, including:

• Name and contact details: Full name, email address, phone number
• Account information: Username, password (encrypted), profile information
• Business information: Company name, business address, tax identification
• Payment information: Processed securely through third-party payment gateways

System-Specific Data

Depending on which system you use, we may collect additional data:

• dCard: Event details, guest lists, attendance records, invitation responses
• dMedics: Patient records (encrypted), prescription data, inventory information
• dSuite: Customer data, sales records, inventory, employee information
• dConnect: Connection logs, integration settings, API usage data
• D360: Loan applicant information, credit history, transaction records, account balances

Technical Data

We automatically collect technical information when you access our systems:

• IP address and device information
• Browser type and version
• Operating system
• Referring website
• Pages visited and time spent

2. How We Use Your Information

We use the collected information for various purposes:

• To provide and maintain our services: Process transactions, send notifications, manage accounts
• To improve our systems: Analyze usage patterns, develop new features, fix bugs
• To communicate with you: Send updates, security alerts, support responses
• To ensure security: Detect fraud, prevent unauthorized access, comply with regulations
• To comply with legal obligations: Meet regulatory requirements, respond to legal requests

3. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: All sensitive data is encrypted at rest and in transit using AES-256 encryption
• Access controls: Strict access controls and authentication mechanisms
• Regular audits: Security audits and vulnerability assessments
• Secure hosting: Data stored in secure, compliant data centers
• Backup systems: Regular backups with disaster recovery plans

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

4. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share your information only in the following circumstances:

• With service providers: Third-party services that assist in operating our systems (payment processors, email services, cloud hosting)
• For legal compliance: When required by law, court order, or government regulation
• Business transfers: In connection with a merger, acquisition, or sale of assets
• With your consent: When you explicitly authorize sharing

5. Data Retention

We retain your information for as long as necessary to provide our services and fulfill the purposes outlined in this policy:

• Account data: Retained while your account is active
• Transaction records: Retained for 7 years as required by Tanzanian law
• Communications: Retained for 2 years
• Analytics data: Retained for 1 year

Upon account closure, personal data is deleted or anonymized except where required by law.

6. Your Rights

You have the following rights regarding your personal information:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal data (subject to legal obligations)
• Objection: Object to processing of your data
• Portability: Request transfer of your data to another service
• Withdraw consent: Withdraw consent for data processing where consent is the legal basis

To exercise these rights, contact us at hi@dreams.co.tz

7. Cookies and Tracking

We use cookies and similar technologies to:

• Remember your preferences and login status
• Analyze website traffic and user behavior
• Improve system performance and user experience

You can control cookies through your browser settings. However, disabling cookies may affect system functionality.

8. Third-Party Links

Our systems may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

9. Children's Privacy

Our services are not intended for children under 18. We do not knowingly collect personal information from children. If we become aware of such collection, we will take steps to delete it.

10. International Data Transfers

Your data is primarily stored and processed within Tanzania. We may transfer data to other countries for technical support or cloud services, ensuring adequate protection measures are in place.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Posting the new policy on our website
• Sending an email notification
• Displaying a prominent notice in our systems

Your continued use of our services after changes constitutes acceptance of the updated policy.

12. User Data Deletion Request

You have the right to request deletion of your personal data. To submit a data deletion request:

• Send an email to hi@dreams.co.tz with the subject line "Data Deletion Request"
• Include your account email address and the specific system(s) where you want data deleted (dCard, dMedics, dSuite, dConnect, D360)
• We will verify your identity before processing the request
• Deletion requests are typically processed within 30 days

Important notes:

• Some data may be retained for legal or regulatory requirements (e.g., financial records for 7 years)
• Deleting your account will remove access to all associated data and services
• Data deletion is irreversible - once deleted, data cannot be recovered

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:

• Email: hi@dreams.co.tz
• Phone: +255 755 707 923 or +255 666 005 135
• Address: Dar es Salaam, Tanzania