Privacy Policy

1. Scope and responsibility

ALLAN STORES is responsible for personal information processed through this website, its customer storefront, the ALLAN STORES business application, and related customer-service communications. Our principal business location is Agrey/Msimbazi Street, Kariakoo, Dar es Salaam.

This notice applies to customers, website visitors, suppliers, staff contacts and other people who communicate or transact with us. It does not replace the privacy notices of independent providers such as Meta, WhatsApp or a payment provider.

2. Information we collect

Depending on how you interact with us, we may process:

• Identity and contact information: name, telephone number, email address, delivery address and preferred language.
• Account information: login identifiers, password hashes, verification status, account sessions, saved addresses and communication preferences.
• Commerce records: carts, quotations, orders, invoices, receipts, returns, refunds, delivery information, warranties and support history.
• Payment information: payment method, amount, currency, provider reference and payment status. Card or mobile-money credentials entered on a provider-hosted page are handled by that provider and are not stored by us.
• Communications: emails, SMS, WhatsApp messages, attachments, message delivery status, customer-service notes and opt-in or opt-out records.
• Technical and security information: IP address where operationally required, browser or device information, timestamps, security logs, request identifiers and fraud-prevention signals.
• Consent-based analytics: limited first-party shopping events and an opaque or hashed session identifier after you explicitly allow analytics.

We ask you not to send passwords, one-time codes, full card details or unnecessary sensitive information through chat, email or support forms.

3. How we use information

We use personal information only for stated and legitimate purposes, including to:

• provide requested products, quotations, invoices, receipts, delivery, warranty and customer support;
• create and secure customer or staff accounts;
• process, verify, reconcile and refund payments;
• send necessary service messages about an account, order, payment, delivery, return or security event;
• send optional marketing only when the required consent has been recorded;
• maintain accounting, tax, inventory, audit and legal records;
• protect customers, staff and systems against abuse, fraud and unauthorised access; and
• improve the storefront using consented, privacy-limited analytics.

Where consent is the basis for optional processing, you may withdraw it without affecting processing already completed lawfully. Transactional messages needed to fulfil a purchase or protect an account are treated separately from marketing.

4. WhatsApp and Meta data

When you contact us through WhatsApp, or ask us to send WhatsApp notifications, we may process your WhatsApp telephone number, profile name where supplied, message content, attachments, message identifiers, timestamps and delivery or read status. We use this information to respond to you, deliver requested transactional notifications and maintain an auditable support record.

WhatsApp communications are transmitted through the Meta WhatsApp Business Platform. Meta and WhatsApp process information under their own terms and privacy notices. We do not sell WhatsApp message data or use it for unrelated advertising. Optional promotional WhatsApp messages require an appropriate opt-in, and you may opt out by replying STOP or contacting us.

Removing our app or business integration from a Meta account stops future access through that connection, but it may not delete information that we must retain for an existing order, invoice, payment, fraud investigation or legal obligation. See our Data Deletion Instructions for the complete process.

5. Service providers and lawful sharing

We may disclose only the information needed to trusted processors or recipients that help us operate, including:

• Meta and WhatsApp for WhatsApp Business messaging;
• email and SMS delivery providers;
• licensed payment providers, banks and mobile-money operators;
• hosting, storage, database, security, error-monitoring and backup providers;
• delivery partners where a customer requests delivery;
• professional advisers, auditors and insurers; and
• regulators, courts, law-enforcement bodies or other recipients where disclosure is required or permitted by law.

Providers may use information only to perform their contracted function, protect their services or meet their own legal obligations. We do not sell personal information.

6. International processing

Some communication, hosting, security or payment providers may process information outside Tanzania. Where cross-border processing applies, we assess the provider and use contractual, organisational and technical safeguards appropriate to the information and applicable Tanzanian data-protection requirements.

7. Retention and security

We keep information only for as long as needed for the purpose collected and under our documented retention obligations. Customer-account and communication information is reviewed when an account is closed or a deletion request is approved. Order, invoice, payment, tax, warranty, refund and audit records may be retained for the periods required by Tanzanian law or needed to resolve disputes and prevent fraud.

We use access controls, authentication, encryption in transit, encrypted secrets, private storage, audit trails, malware scanning where applicable, backups and monitoring. No internet service can promise absolute security, but we investigate suspected incidents and make legally required notifications.

8. Your privacy rights

Subject to applicable law and any lawful retention exception, you may request:

• information about how your data is processed;
• access to or a portable copy of your personal information;
• correction of incomplete or inaccurate information;
• erasure or destruction of eligible information;
• restriction of, or objection to, certain processing;
• withdrawal of consent and cessation of direct marketing; and
• review of a relevant automated decision, if one is introduced.

Signed-in customers can submit and track an export, correction, deactivation or deletion request through Customer account privacy requests. You may also follow our Data Deletion Instructions or email info@allanstores.com.

We may verify your identity before disclosing, changing or deleting information. If you remain dissatisfied, you may contact Tanzania’s Personal Data Protection Commission.

9. Children and third-party links

Our storefront is intended for people able to enter a lawful purchase or for authorised representatives purchasing on their behalf. We do not knowingly invite children to create accounts or provide personal information without appropriate authorisation.

Links to payment providers, Meta, WhatsApp or other external services are governed by those providers. Review their notices before supplying information directly to them.

10. Changes and contact

We may update this notice when our services, providers or legal obligations change. The effective date and version at the top identify this baseline notice. Material changes will be presented through an appropriate website, account or communication notice.

Published business-specific policy

Privacy notice · Version 1 · Effective 12/08/2026