Privacy policy
Last updated: April 2026
This policy explains how Lockwood Technology Tanzania Ltd ("Lockwood", "we", "us") and its product Wedding by Lockwood handle personal information for couples, vendors, and their guests in Tanzania and the wider East African region.
This is a first-draft policy published in good faith. It will be reviewed by counsel and aligned to TCRA and Bank of Tanzania guidance before public launch. Material changes will be posted here with a fresh "Last updated" stamp at least 14 days before taking effect.
1. What we collect
We collect only what we need to operate the platform and to provide the service you have asked for.
- Account data: phone number, name, wedding date, theme preferences. Email and partner details are optional.
- Couple content: photos, story copy, guest list entries, RSVP responses, contribution destinations.
- Vendor business data: business name, category, service areas, portfolio images, packages, pricing, tax identifiers where legally required.
- Transaction metadata: the identifier, amount, currency, channel (M-Pesa, Mixx by Yas, Airtel Money, Halotel, TTCL Pesa, CRDB, NMB), and timestamps for every contribution and booking. We never see or store your MNO PIN or bank password.
- Device + usage: IP address, user agent, referring URL, anonymised event analytics. Used to keep the service running and to spot abuse.
2. Legal basis
We process personal information under the Tanzania Personal Data Protection Act, 2022, on one of the following bases:
- Contract: to set up your account, list a vendor profile, accept bookings, or run an RSVP.
- Consent: for marketing communications and any optional analytics beyond what is required to run the platform.
- Legal obligation: to comply with TRA fiscal receipting, anti-money-laundering rules, and lawful regulator requests.
- Legitimate interest: security monitoring, abuse prevention, and platform improvement.
3. How we use it
- To deliver the service you signed up for: vendor discovery, bookings, the budget planner, the guest list, and the personalised story page.
- To verify identity and prevent fraud, including before approving a vendor profile or releasing escrowed funds.
- To send service messages (OTP codes, booking confirmations, deposit receipts, RSVP notifications).
- To produce TRA-compliant EFD receipts on transactions where this is required.
- To respond to your support requests.
- To improve the platform with aggregated, de-identified analytics.
4. Where money goes
Contributions and booking payments are routed to your nominated Changisha, Mchango, Lipa Namba, or bank account through Malipopay, our payment partner. For event-day vendor payments, funds may be held in a Lockwood-managed escrow account at the partner bank and released 24 hours after the event, or refunded within 24 hours if a dispute is upheld. The platform is a facilitator, not a custodian, except for the limited escrow window described above. We do not hold client funds outside of that window.
5. Sub-processors
We share personal information only with the sub-processors we need to run the service. Each is bound by a written data processing agreement.
| Sub-processor | Purpose | Region |
|---|---|---|
| Malipopay | Payment processing, MNO and bank rails, escrow movements | Tanzania |
| MongoDB Atlas | Primary database hosting | EU / South Africa |
| Resend | Transactional email delivery | EU / US |
| Airtel SMPP | SMS OTP and notifications | Tanzania |
| Cloudflare | CDN, DDoS protection, DNS | Global |
| Vercel | Web application hosting | EU / US |
6. Retention
We keep account data for as long as your account is active, plus seven years for transaction records as required by tax and AML law. Marketing consent is kept until you withdraw it. Couple story pages and RSVP entries are retained for 12 months after the wedding date by default; you can request earlier deletion at any time.
7. Your rights
Under the Tanzania PDPA you have the right to access the information we hold about you, to ask us to correct or delete it, to object to processing, to data portability, and to lodge a complaint with the Personal Data Protection Commission. To exercise any of these, write to privacy@wedding.co.tz with enough detail for us to verify the request. We respond within 30 days.
8. Security
Account access is protected by phone OTP and short-lived RS256 JWT access tokens. All traffic is TLS 1.2 or higher. Production databases are encrypted at rest. See our security page for the longer view.
9. Cookies and analytics
We use a small number of first-party cookies to keep you signed in and to remember your preferences. We use anonymised, aggregated event analytics to understand which parts of the product are useful. We do not run third-party advertising trackers.
10. Children
The platform is intended for adults planning weddings. We do not knowingly collect personal information from anyone under 18. If you believe a minor has created an account, write to us and we will remove the data promptly.
11. Changes to this policy
Material changes are posted on this page with at least 14 days' notice before taking effect. Continued use of the platform after the effective date is taken as acceptance of the updated terms.
12. Contact
Lockwood Technology Tanzania Ltd. Privacy office, Dar es Salaam. privacy@wedding.co.tz.