Our commitment. ShipMzigo uses personal and operational data to connect the right people to the right logistics task. We limit access by role, protect sensitive delivery details and do not sell personal information.
1. Who controls the data
ShipMzigo Company Limited is the platform operator and data controller for information collected through ShipMzigo. Warehouses and merchants may also act as controllers for information they independently provide or control, such as their customers, employees and suppliers. They remain responsible for their own notices and lawful instructions.
2. Information we collect
- Account and identity: name, email, phone number, password hash, selected role, business or vehicle identifier and registration time.
- Merchant information: brands, company and registration details, product/SKU data, declared value, quantities, warehouse applications, recipient and delivery instructions.
- Warehouse information: warehouse address, contacts, capacity, storage rows, bins, merchant approvals, receipt counts, damage notes, documents and team permissions.
- Driver information: names, contact and address, licence number/class/expiry, emergency contact, vehicle registration and vehicle details, plus the licence image and driver verification photo uploaded for onboarding.
- Operational and security data: audit events, notifications, session hashes, rate-limit events, browser user-agent, a one-way hash of the registration IP address, support requests and error/security logs.
3. How we use information
- Create and secure accounts, authenticate users and keep one fixed role per account.
- Approve merchants, register warehouses and teams, manage products and inventory, confirm receiving, assign storage and coordinate dispatch and delivery.
- Show only the records needed for a user's role and authorised warehouse, brand, product, transfer or delivery.
- Protect riders and recipients: unverified or unassigned riders do not receive warehouse, destination, phone, product or event details.
- Generate internal product codes, barcode/QR labels, packing lists, receipt reports, discrepancy records, notifications and audit trails.
- Detect abuse, protect accounts, investigate incidents, resolve disputes, provide support and meet legal, tax, accounting or regulatory obligations.
- Improve reliability and usability using aggregated or de-identified information where practical.
4. Role-based sharing
ShipMzigo is designed around least-privilege access. Merchants can see their own brands, products, stock, receipts, transfers and deliveries. A warehouse can see records connected to its locations and approved merchants. A rider sees a delivery only after the required onboarding and assignment gate; the delivery view contains the pickup and recipient details needed to complete that job, not unrelated warehouse or merchant data. We may share data with service providers who host, secure, maintain or support the platform, subject to contractual or technical safeguards.
We do not sell personal information or use recipient phone numbers, driver documents or warehouse records for unrelated advertising. We may disclose information where required by law, to protect people or property, to investigate fraud or abuse, or as part of a lawful business transfer.
5. Driver documents and shipment files
Licence images, verification photos, shipment supporting documents and evidence photos are private operational files. They are stored with the service data, served with no-store and nosniff protections, and are not public assets. Access is limited to the driver, authorised warehouse/operations users and the specific workflows that need the file. Do not upload unnecessary, unrelated or highly sensitive material.
6. Storage, security and international processing
Passwords are stored as salted hashes; sessions are stored as hashes and expire. Server-side role checks protect operational endpoints, and sensitive delivery details are withheld before they reach unauthorised riders. The service is hosted on infrastructure providers that may process data in Tanzania or other countries. We use access controls, encrypted transport where available, private storage and backups appropriate to this stage of the platform. No internet service can promise absolute security, so report suspected compromise immediately.
7. Retention
We keep account, consent, audit and operational records while an account or warehouse relationship is active and for as long as reasonably needed for security, disputes, financial records, legal obligations, backups and service continuity. Driver documents and shipment attachments are retained for the operational and dispute period and then deleted or de-identified when no longer needed, subject to backup cycles and lawful requirements. You may ask us to review retention of a specific file.
8. Your choices and rights
Subject to applicable law and the role of the requesting party, you may ask to access, correct, export or delete personal information, object to a use, withdraw consent where consent is the basis, or ask us to restrict processing. Some records must be retained or cannot be removed while they are needed to protect another person, prove a transaction, resolve a dispute or meet a legal obligation. Send requests through shipmzigo.app/contact with enough information for us to verify the request.
9. Cookies and communications
ShipMzigo uses an essential session cookie to keep a signed-in account secure. It may use necessary browser storage or logs for language preferences, security and basic operation. The current service uses in-app notifications; email, SMS and marketing communications will be introduced only with appropriate notices, controls and provider safeguards.
10. Children, changes and contact
ShipMzigo is a business service and is not intended for children. Do not register a child or upload a child's information unless you have a lawful reason and authority. We may update this policy when the platform or law changes. We will show the new version and, where appropriate, ask for renewed acceptance before continuing with affected features.
For privacy questions or requests, contact ShipMzigo Company Limited at Haile Selassie Road 153, Oysterbay, Dar es Salaam, Tanzania, through shipmzigo.app/contact.