Privacy Policy

1. Introduction

Leisuredential ("we", "us", "our") operates the website leisuredential.africa and associated project websites, including liyongo.co (together, the "Site").

This Privacy Policy explains how we collect, use, store, and protect personal data submitted through our Site, and outlines your rights in relation to that data.

We are committed to handling personal information responsibly, transparently, and in accordance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR) where applicable, and relevant data protection requirements in the United Republic of Tanzania.

2. Personal data we collect

We collect only the data necessary to manage enquiries, provide requested information, and operate our marketing and communications responsibly.

A. Data you provide via forms

When you submit a form on our Site, we may collect:

• Full name
• Email address
• Phone number
• Country (optional)
• Contact preference:
  • Interest in buying / ownership opportunities, or
  • Receiving updates only
• Explicit GDPR consent confirmation (checkbox)

B. Data collected automatically on submission

To ensure proper record-keeping, attribution, and compliance, the following data is automatically recorded when a form is submitted:

• Date and time of submission (UTC timestamp)
• Page URL where the form was submitted
• Referring URL (if applicable)
• Project identifier (e.g. "Liyongo")
• Lead source identifier (e.g. "liyongo.co")
• Marketing attribution data (UTM source, medium, campaign, content, term, where present)
• IP address at the time of submission
• Consent status (true/false) and consent timestamp

This information is collected server-side and is not used for automated decision-making.

3. How we use your data

We use your personal data for the following purposes only:

• To respond to enquiries and requests you submit
• To provide information about ownership opportunities where you have expressed interest
• To send project updates where you have opted to receive them
• To manage and segment enquiries appropriately (e.g. buyer interest vs updates only)
• To maintain internal records of consent and communications
• To understand how users reach our Site and improve its performance
• To ensure compliance with legal and regulatory obligations

We do not sell personal data and do not use it for unrelated third-party marketing.

4. Lawful basis for processing (EU / GDPR)

Where GDPR applies, we process personal data on the following lawful bases:

• Consent
  For marketing communications and project updates, where you have explicitly opted in via a consent checkbox.
• Steps prior to entering a contract
  Where you request information about ownership or purchasing opportunities.
• Legitimate interests
  For limited internal analytics, enquiry management, record-keeping, and safeguarding the integrity of our systems, always in a way that does not override your rights.

You may withdraw consent at any time.

5. Marketing communications

You will only receive marketing or project-related communications if:

• You have explicitly consented, or
• You have requested information about a specific project or opportunity.

Every email communication includes an unsubscribe option, and you may also request removal by contacting us directly at privacy@leisuredential.africa.

6. Service providers and data processing

We use trusted third-party service providers to operate our Site and manage communications. These providers process personal data only on our instructions and are required to protect it appropriately.

Current service providers include:

• Mailchimp – email communications and subscriber management
• Pipedrive – enquiry and relationship management (CRM)
• Lovable – website hosting and development

We may update this list from time to time as our operations evolve.

7. International data transfers

Some of our service providers may process or store data outside the United Republic of Tanzania.

Where personal data is transferred internationally, we take reasonable steps to ensure that appropriate safeguards are in place and that data is handled in accordance with applicable data protection requirements, including contractual and technical protections.

8. Data retention

We retain personal data only for as long as necessary for the purposes described in this policy.

Indicative retention periods are:

• Enquiry and lead data: up to 24 months from last interaction
• Marketing subscriptions: until you unsubscribe or after prolonged inactivity
• Consent and audit records: as required to demonstrate compliance
• Technical and security logs: up to 18 months

Data may be retained longer where required by law or to establish, exercise, or defend legal claims.

9. Your rights

EU / EEA users (GDPR)

You may have the right to:

• Access your personal data
• Correct inaccurate or incomplete data
• Request deletion of your data
• Restrict or object to certain processing
• Request data portability
• Withdraw consent at any time

You also have the right to lodge a complaint with your local data protection supervisory authority.

Tanzania / Zanzibar

We will respect applicable rights under Tanzanian data protection requirements, including reasonable requests to access or correct personal data, subject to lawful limitations.

To exercise any rights, contact: privacy@leisuredential.africa

10. Data security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse.

However, no internet transmission or electronic storage method is completely secure, and absolute security cannot be guaranteed.

11. Cookies and site analytics

Our Site uses essential cookies required for basic functionality.

Where additional analytics or non-essential cookies are used, consent will be requested through a cookie notice or preference tool, where applicable. You may also manage cookies through your browser settings.

12. Third-party links

Our Site may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites and encourage you to review their privacy policies separately.

13. Children's privacy

Our Site is not intended for children, and we do not knowingly collect personal data from individuals below the applicable age of digital consent. If such data is identified, it will be deleted promptly.

14. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last Updated" date.

Continued use of the Site after changes are posted constitutes acceptance of the revised policy.