Privacy Policy

1. Data Controller

Bylinki Limited is the data controller responsible for your personal data. Our contact for data protection matters is:

2. Data We Collect

We collect the following categories of personal data:

3. Legal Basis for Processing

Under the Personal Data Protection Act, 2022, we process your data on the following legal grounds:

• Contractual necessity: To create and manage your account and provide our recruitment services.
• Legitimate interests: To operate, maintain, and improve the Platform; to prevent fraud and abuse.
• Consent: For optional features such as email notifications. You may withdraw consent at any time.
• Legal obligation: Where required by Tanzanian law or a competent regulatory authority.

4. How We Use Your Data

• To create and maintain your user account.
• To match Job Seekers with relevant job listings and Employers with suitable candidates.
• To send application status notifications (in-platform and, where configured, by email).
• To verify Employer accounts and prevent fraudulent listings.
• To generate your downloadable CV (Job Seekers only).
• To comply with regulatory requirements and respond to lawful requests from Tanzanian authorities.
• To improve our services through aggregated, anonymised analytics.

5. Sharing of Personal Data

We do not sell your personal data. We share your data only in the following circumstances:

• With Employers: When you submit a job application, your profile data is shared with the relevant Employer for recruitment purposes only.
• Service Providers: We use Supabase (database and authentication) and SMTP email providers. These processors are bound by data processing agreements and are not permitted to use your data for their own purposes.
• Legal Disclosure: We may disclose your data to the Tanzania Communications Regulatory Authority (TCRA), the Prevention and Combating of Corruption Bureau (PCCB), or any other competent authority when required by law.
• Business Transfer: In the event of a merger, acquisition, or sale of assets, your data may be transferred, subject to the same privacy protections.

6. Data Retention

We retain your personal data for as long as your account is active or as required to provide our services. Upon account deletion, we will erase or anonymise your data within 30 days, unless retention is required by law (e.g., for tax or regulatory purposes, which may require retention for up to 7 years under the Tax Administration Act, Cap. 438).

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction, in accordance with Section 29 of the Personal Data Protection Act, 2022. These measures include encrypted storage, HTTPS transmission, and access controls. However, no method of transmission over the internet is 100% secure.

8. Your Rights

Under the Personal Data Protection Act, 2022, you have the following rights:

To exercise any of these rights, email privacy@bylinki.com. We will respond within 30 days as required by the PDPA.

9. Cookies and Tracking

We use essential session cookies necessary for authentication and Platform functionality. We do not use third-party advertising cookies. Usage analytics are collected in anonymised, aggregated form only.

10. Children's Privacy

Our Platform is not directed at persons under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, please contact us immediately at privacy@bylinki.com.

11. International Transfers

Your data may be processed on servers located outside Tanzania (e.g., via Supabase infrastructure). Where such transfers occur, we ensure equivalent protection is in place in accordance with Section 35 of the Personal Data Protection Act, 2022.

12. Changes to This Policy

We may update this Privacy Policy to reflect changes in law or our practices. We will notify you of material changes by email or in-platform notice at least 14 days before the changes take effect.

13. Supervisory Authority

You have the right to lodge a complaint with the Personal Data Protection Commission (PDPC) of Tanzania if you believe your data rights have been violated: