Badri Cold Storage Private Limited, a company incorporated in Tanzania, hereinafter collectively referred to as "We" or "Us" or "Company" or " Badri Cold Storage " has curated this Privacy Notice to demonstrate our privacy commitment to our users. This Privacy Notice (together with our Website Terms and Conditions, and any other documents referred to on it) sets out the basis on which we collect, use, share, and safeguard your Personal Data when you use our products, services, offers, promotions or interact with us by visiting our website through any device or at our Store (collectively the "Services"). By using the Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Notice.
For the purposes of applicable data protection law, Badri Cold Storage is the Data Controller in respect of the personal data collected and processed through this website. Titan Company Limited (TCL) India, support the operation of this website acting as Data Processor, and other third-party service providers engaged by us, support the operation of this website acting as Sub Processors, processing personal data solely on our behalf and under our instructions.
Personal Data (“Data”) refers to any information that (alone or when used in combination with other information) relates to an identified or identifiable individual. The Personal Data we collect varies depending on our relationship and interactions with you.
Sensitive Personal Data refers to certain categories of Personal Data that require a higher level of protection under applicable law. For this website and our services, this may include limited payment related information processed for transaction purposes and any other data that is classified as sensitive under applicable law.
We collect various types of Personal Data to provide and improve our services. Some of the Personal Data in these categories may be considered Sensitive Personal Data in some jurisdictions. Such Personal Data includes but is not limited to:
Contact Information: This includes your name, email address, phone number, shipping address along with other information necessary for communication, order fulfilment, and customer support
Demographic Information: This includes your country or region for the purpose of processing orders, delivering products, and supporting website functionality and
approximate location information may be inferred from your IP address to support website functionality, fraud prevention, and regional settings.
Financial Information: This includes your payment information processed securely by our payment service providers. We do not store full payment card details on our systems. Payment information is processed securely by our payment service providers.
Customer Communication Information: This includes records of your communications with us, including emails, support tickets, and other interactions with our customer service channels.
Usage Information: This includes your IP address, device identifiers, browser type, website activity, and other information collected through cookies and similar technologies to support website functionality, security, and user experience.
User Account Information: This includes information such as your account name, order history, login details, and other account-related information required for account management and customer support.
Product or Services Information: This includes information to improve and enhance existing products & services such as products purchased, used or shown interest in.
Other Information: This includes any information you provide voluntarily or as required by law.
We may combine the information we receive from and about you, including information you provide to us and information automatically collected through our Services, as well as information collected from different devices or interactions with our website, for operational, security, and service delivery purposes.
We may collect Personal Data about you from various sources, including but not limited to:
- Direct interactions with you, including when you make a purchase, create an account, browse our website, or contact our customer support team.
- Data collected automatically through technologies such as cookies, pixel tags, and similar tracking technologies used to operate and improve our website and services.
- Data received from our service providers and technology partners that support the operation of our website and business systems, in connection with order processing, customer support, and related services.
The Personal Data we collect is used for various purposes, all aimed at enhancing our service delivery and customer experience.
| S. No. |
Purpose |
Categories of Personal Data |
| 1 |
Fulfilling our business obligations: We may need to process your Personal Data to allow us to carry out order management, payment processing, contract management, financial management and website and service administration. |
Contact Information
Demographic Information
Financial Information
User Account Information
Communication Information
Usage Information
Product or Services Information |
| 2 |
Managing our contractual obligations and your ongoing relationship with us: We may process your Personal Data to deliver products and services, manage orders and accounts, process billing and payments, provide customer support, send service-related communications (including order updates, shipping notifications, and other transactional messages), and where permitted under applicable law, send reminders relating to incomplete purchases, such as abandoned shopping cart emails, to help you complete your purchase. |
Demographic Information
Financial Information
Contact Information
User Account Information
Communication Information
Usage Information
Product or Services Information |
| 3 |
Data Analytics: We may use information collected through our website and Shopify dashboard to generate basic aggregated and anonymized reports on website traffic, sales performance, and service usage. This information is used solely to help us understand general website performance and improve our services. We do not use your Personal Data for profiling or automated decision-making. |
Demographic Information
User Account Information
Usage Information
Product or Services Information |
| 4 |
Product/Service Improvement: We may use limited information collected through our website and services to improve website functionality, customer experience, product availability, and the overall quality of our services. |
Usage Information
Product or Services Information |
| 5 |
Maintaining secure and safe services and products: We may need to process your Personal Data to preserve and maintain the security of our websites, networks, systems and premises including protection against fraud and malicious security threats. |
Contact Information
Financial Information
User Account Information
Usage Information |
| 6 |
Compliance with legal obligations: We may need to process your Personal Data for purposes which are required by the applicable law, or to respond to compulsory legal processes or enforce compliance with the policies governing our business. |
Contact Information
Financial Information |
| 7 |
Managing our supply chain and business network: To provide our products and services to you, we may need to process your Personal Data in connection with the utilization of our third-party partner business network. |
Contact Information
User Account Information
Product or Services Information |
| 8 |
Corporate activity, including mergers, acquisitions and joint ventures: We may need to process your Personal Data in connection with certain corporate activity, such as a party acquiring all or part of our equity or assets or business operations in the event of a sale, merger, liquidation, dissolution, etc. |
Contact Information
Financial Information
User Account Information
Communication Information
Product or Services Information |
Your Personal Data can be processed on the following lawful basis:
Consent: Based on the explicit consent provided by you.
Legal Basis: To comply with legal obligations, i.e. required by laws and regulations.
Contractual Obligation: To fulfil a contract to which you are a party, such as a contract with you, or as needed to fulfil a contract or agreement between you and the company.
Legitimate Interest: Personal Data may be processed based on legitimate interest, as permitted by applicable laws.
We may disclose your Personal Data to:
- Our Cloud Service providers for the purpose of Data storage and Data processing.
- Our Service Providers who may,in the course ofproviding their respective services, receive and process Data which include storing,protectingand securing our systems, providing customer service and payment processors for the purpose of enabling your payments.
These Service Providers will be required to only process Data in accordance with our instructions. The Service Providers will also be required to safeguard the security and confidentiality of the Data they process by implementing appropriate technical and organizational security measures.
- Our Delivery and Logistics providers for the purpose of managing shipments and deliveries.
- Business Transfers: As we continue to develop our business, we might sell or buy subsidiaries or business units.Your Data may be transferred as part of such transactions.
- Third Parties: We may also share your Data with other third parties where:
- You request or authorize us to do so
- We need tocomply withapplicable law or respond to valid legal process; or
- We need tooperateand maintain the security of our website, including to prevent or stop an attack on our computer systems or networks. The sharing of your Data will be in line with the processes set out in this Privacy Notice.
We may also disclose Personal Data when required by law, to law enforcement agencies, regulators or courts, or as permitted by law or as needed for audit, compliance and corporate governance.
We may transfer, store, or process your Personal Data outside the United Republic of Tanzania where it is necessary for the provision of our services, operational requirements, or engagement with service providers and business partners. Our online store is hosted on Shopify’s e-commerce platform, and your Personal Data may be processed or stored in data centers located outside Tanzania.
Where Personal Data is transferred outside Tanzania, we will take appropriate measures to ensure that such transfer is conducted in accordance with the requirements of the Tanzania Personal Data Protection Act, 2022 and that adequate levels of protection are maintained for your Personal Data.
We will ensure that appropriate safeguards, contractual protections, and security measures are implemented to protect your Personal Data against unlawful or unauthorized access, processing, loss, or disclosure.
In circumstances where the recipient country may not provide an adequate level of data protection, we will only transfer Personal Data where permitted under applicable law, including where:
- you have provided consent to the transfer;
- the transfer is necessary for the performance of a contract;
- the transfer isrequiredfor legal proceedings or public interest purposes; or
- appropriate safeguards and protections have been implementedin accordance withapplicablelaw.
If you have any questions or concerns about the cross-border transfer of your Personal Data, please contact us as indicated in ‘Section 14: Contact Us’.
Data Storage
We prioritize the security of your Personal Data and store it securely using Shopify’s secure infrastructure and trusted service providers that support our website operations. Shopify and our service providers use industry-standard security measures such as encryption, firewalls, and access controls to protect your Personal Data. These measures are designed to help safeguard your information against unauthorized access, alteration, disclosure, or destruction, and to ensure your Personal Data is handled securely.
Data Retention
We are committed to retaining your Personal Data only for as long as it is necessary to fulfill the purposes for which it was collected, or to comply with legal, regulatory, or reporting obligations.
The duration for which we retain your Data is determined by several factors:
Compliance with Laws: We adhere to the retention periods mandated by applicable laws and regulations.
Operational Needs/ Legitimate Interest: We keep your Data for the duration necessary to deliver our Services and maintain our business operations effectively.
Consent-Based Processing: When processing your Data based on consent, we retain the Data for as long as we have your consent.
Legal and Dispute Resolution: In cases of disputes or legal proceedings, we may need to retain your Data for longer periods to resolve issues.
After the relevant retention period has been concluded, we will ensure that your Personal Data is either securely deleted or anonymized, making it impossible to associate the Data with you. In instances where immediate deletion is not feasible, such as Data stored in backup archives, we will take steps to securely store and isolate the Data until it can be deleted.
You may request that we delete your Personal Data or restrict the processing of such information by contacting us as indicated in ‘Section 14: Contact Us’.
We respect your rights in relation to your Personal Data in accordance with the applicable data protection laws, including the Tanzania Personal Data Protection Act, 2022.
Subject to applicable law, you may have the following rights in relation to your Personal Data:
-
Right to Access:You have the right to request copies of the Personal Data we hold about you. This right also includes access to details about how your Personal Data is processed, such as the purposes of processing, the categories of Personal Data involved, and the recipients or categories of recipients.
-
Right to Rectification:You have the right torequestthat your Personal Data be corrected or updated if it is inaccurate or incomplete. Depending upon the nature of the request, you may also be able to update certain Personal Data directly through your account or by contacting us.
-
Right to Erasure:You have the right torequestthat wedeleteor remove your Personal Data from our systems, subject to any legal obligations requiring us toretaincertain information.
-
Right to Withdraw Consent:Where we rely on your consent to process your Personal Data, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing carried out before your consentwaswithdrawn.
-
Right to Object:You have the right to object to the processing of your Personal Data in certain circumstances, including where it is used for direct marketing purposes.
-
Right to Restrict Processing:You have the right torequestthat we temporarily suspend or restrict the processing of your Personal Datawherepermittedunder applicable law.
-
Right to Lodge a Complaint:You have the right to lodge a complaint with the relevant data protection authority if you believe your Personal Data has been processed in violation of applicable laws.
To exercise any of the above rights or to submit a complaint regarding the processing of your Personal Data, you may contact us using the details provided in Section 10: “How to Exercise Your Rights.”
We will respond to your request in accordance with applicable legal requirements. We may require verification of your identity before processing your request. We do not charge a fee for processing data subject requests, except when permitted by applicable law for excessive or unfounded requests. Where legally permitted to do so, we may refuse your request. If we refuse your request, we will provide the reasons for our decision.
If you wish to make a request for exercising your rights, you can submit your online requests at Privacy Web Form or reach out to us as indicated in ‘Section 14: Contact Us’.
To help us confirm your identity and to ensure that the Personal Data is only disclosed to authorized individuals, please provide your full name, email ID and phone number registered with us while sending the request.
Please note, where required we may also request for additional information before taking any actions on the requests raised by you. If you are raising a Data subject request on behalf of another individual, such requests shall be accompanied by appropriate proof of identity of the requester, details of relationship with the person on whose behalf the request is being made and proof of authority for making such a request.
We do not direct the Services to, nor do we knowingly collect any Personal Data from, children under the age of 18. If we learn that a minor has provided Personal Data through the Services, we will use reasonable efforts to destroy such information.
We recognize the importance of safeguarding Personal Data and maintaining the trust of our customers. The Company adopts reasonable technical and organizational measures, relying on secure infrastructure provided by its service providers, including Shopify and other technology partners, to help protect Personal Data against unauthorized access or misuse.
We restrict access to your Personal Data to authorized personnel of the Company and to third-party service providers who reasonably require such access to support the operation of the website, including services such as hosting, payment processing, customer support, and order fulfilment. Appropriate access controls and security practices are applied to limit access on a need-to-know basis.
We use security measures to help protect your Personal Data against unauthorized disclosure, misuse, alteration and other incidents. We are committed to maintaining reasonable security measures to protect your Personal Data.
Some of our websites and applications automatically collect certain Data to improve your user experience. This includes using cookies and similar technologies to track how you interact with our platforms. Such Data helps us enhance our services and understand user behavior better. Kindly consult the cookie policy of the specific website or application to gain a comprehensive understanding of the cookies in use.
If you would like to exercise your privacy rights under the Tanzania Personal Data Protection Act (PDPA) of 2022, please reach out to us via the Privacy Web Form.
For any questions, concerns, or requests relating to this Privacy Notice or the processing of your Personal Data, please contact us at:
Name: Juzer Ghor
Email: [email protected]
(Kindly avoid including sensitive information, such as your account number, in emails).
We may update this Privacy Notice from time to time whenever there are changes in relevant laws or our business practices. Any changes will be posted on this page with an updated effective date. We encourage you to review this Privacy Notice frequently to be informed of how we are protecting your information.
