1. Introduction

Welcome to WimboLink, a product of Link Technologies ("we," "our," or "us"). We are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

Business Information:

• Company: Link Technologies
• BPRA Registration: Z0000298781
• License No: BSL-SP20025-2026/69703
• TIN: 126 882 211
• Jurisdiction: Zanzibar, Tanzania
• Data Protection Officer: info@wimbolink.com

By using WimboLink, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use our Service.

2. Information We Collect

2.1 Personal Information (All Users)

• Email address - for account login and communication
• Full name - for identification and comments
• Phone number - for mobile money payments and 2FA
• Password - hashed and stored securely

2.2 Kwaya/Group Additional Information

• Kwaya Name - official name of the choir/group
• Contact Person - manager or leader name
• Registration Number - government registration (optional)
• Registration Certificate - uploaded document (optional)
• Tax Clearance Certificate - uploaded document (optional)
• Bank Account Details - for direct payouts
• Mobile Money Details - alternative payout method
• Physical Address, Region, District - for location verification

2.3 Single Artist Additional Information

• Stage Name - public artist name
• TIN Number - personal TIN (optional)
• Bank Account Details - for direct payouts
• Mobile Money Details - alternative payout method

2.4 Contract Documents

• Signed Contract - legally binding agreement between artist and Link Technologies
• Signatory Name - full name of person who signed the contract
• Signature Date - date when contract was signed

2.5 Automatically Collected Information

• Device information - browser type, operating system, device model
• Usage data - pages visited, time spent, clicks
• Purchase history - albums and singles you have bought
• Play history - tracks you have streamed or downloaded
• Cookies - for authentication and preferences

3. How We Use Your Information

• Account Management - Create and manage your account
• Authentication - Verify your identity and secure access
• Contract Verification - Verify signed contracts and activate accounts
• Artist Verification - Verify artist eligibility and documentation
• Payment Processing - Facilitate payments through Clickpesa (WimboLink does not handle payments directly)
• Payouts - Ensure artists receive their 75% share directly from Clickpesa
• Tax Compliance - Comply with government tax reporting requirements (5% TRA tax)
• Purchase Confirmations - Send receipts and licenses after purchase
• Customer Support - Respond to inquiries and resolve issues
• Platform Improvement - Analyze usage patterns to improve our service
• Notifications - Send important updates about purchases, payouts, and platform changes
• Security - Detect and prevent fraud or abuse
• Legal Compliance - Comply with Zanzibar and Tanzanian laws

4. How We Share Your Information

4.1 With Service Providers

• Government Authorities (TRA) - Tax reporting as required by law (5% government charges)
• Email Service Provider - Sending verification and notification emails
• Cloud Hosting (AWS) - Storing platform data securely
• Analytics Providers - Understanding platform usage

4.2 Data Processing Agreements

We have signed Data Processing Agreements (DPAs) with all third-party service providers (Clickpesa, AWS, email providers) to ensure your data is protected according to applicable data protection laws.

4.3 Public Information

• Artist stage name and profile - Public on the platform
• Album and single details - Public for customers to browse
• Comments you post - Public on album and single pages
• Your email and phone - NOT public
• Your payment details - NEVER public. Only used for processing payouts through ClickPesa.
• Your bank account information - NEVER public. Only shared with ClickPesa for payout processing.

4.4 Legal Requirements

We may disclose information if required by Zanzibar law or court order. We will notify you before disclosing unless prohibited by law.

5. Important Note About Payments

6. Data Security

• Passwords - Hashed and never stored in plain text
• Encryption - All data transmitted via HTTPS encryption (TLS 1.2/1.3)
• Secure Storage - Data stored in secure databases with access controls
• Regular Audits - Security audits and updates performed regularly
• Limited Access - Only authorized staff can access user data
• Clickpesa Security - Clickpesa maintains their own security compliance (PCI DSS)
• Two-Factor Authentication (2FA) - Optional but recommended for all users
• Contract Document Security - All contract documents are stored securely with restricted access

Note: No method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Your Rights

Under Zanzibar law (Data Protection Act) and best practices, you have the following rights:

• Access - You can view your profile and purchase history anytime
• Correction - You can edit your personal information
• Deletion - You may request account deletion (after all obligations met)
• Opt-out - You can disable email notifications
• Data Portability - You can request a copy of your data
• Withdraw Consent - You can withdraw consent for data processing
• Contract Review - You can request a copy of your signed contract

7.1 How to Withdraw Consent

You can withdraw consent at any time by:

• Emailing info@wimbolink.com
• Using account settings (for marketing preferences)
• Contacting our DPO directly

Withdrawal does not affect the lawfulness of processing before withdrawal.

7.2 Right to Lodge a Complaint

You have the right to lodge a complaint with the Zanzibar Data Protection Commission if you believe your data rights have been violated.

To exercise these rights, please contact our Data Protection Officer at info@wimbolink.com.

8. Cookies

We use cookies and similar technologies to enhance your experience:

• Authentication Cookies - Keep you logged in
• Preference Cookies - Remember your settings and preferences
• Analytics Cookies - Understand how you use the platform
• Security Cookies - Detect and prevent fraud

You can disable cookies in your browser settings, but some features may not work properly.

9. Data Retention

• Account Data - Kept while your account is active
• Purchase Records - Kept for 7 years (government tax requirement)
• Artist Payout Records - Kept for 7 years (audit requirement)
• Tax Records - Kept for 7 years (TRA requirement)
• Verification Documents - Kept for 7 years (compliance)
• Contract Documents - Kept for 7 years (legal requirement)
• Deletion Request - You may request account deletion after all obligations met

Note: We retain data as long as necessary to comply with legal obligations and resolve disputes.

10. Children's Privacy

Our platform is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us immediately.

10.1 Age Requirements

• Customers: Must be at least 13 years old. Users under 18 must have parental/guardian consent.
• Artists: Must be at least 18 years old (legal age for contracts in Zanzibar).
• We do not knowingly collect data from children under 13.

11. Third-Party Links

Our platform may contain links to third-party websites (artist social media, external music players, etc.). We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies.

12. Automated Decision-Making

We may use automated systems to recommend music, detect fraud, and personalize your experience. You have the right to request human review of automated decisions that significantly affect you.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes via:

• Email notification
• Platform notification (banner/alert)
• Posting the updated policy on our Service

Continued use of the platform constitutes acceptance of the updated policy.

Last Updated: October 02, 2026

14. Data Protection Under Zanzibar Law

WimboLink complies with the Zanzibar Data Protection Act and other applicable data protection laws.

14.1 Lawful Processing

We process data based on the following legal bases:

• Consent: Marketing emails, optional features
• Contract Performance: Account management, payments, payouts
• Legal Obligation: Tax reporting, contract retention (7 years)
• Legitimate Interest: Fraud prevention, platform security, analytics
• Vital Interest: Emergency security issues

14.2 Data Subject Rights

• You have the right to access, correct, and delete your data
• You have the right to data portability
• You have the right to withdraw consent
• You have the right to lodge a complaint with the Zanzibar Data Protection Commission

14.3 Data Breach Notification

In case of a data breach, we will notify affected users and the Zanzibar Data Protection Commission within 72 hours of becoming aware of the breach.

14.4 International Data Transfers

Your data may be transferred to and stored on servers located outside Zanzibar/Tanzania, including AWS cloud servers. By using our platform, you consent to such transfers. We ensure appropriate safeguards are in place (standard contractual clauses, encryption, etc.).

14.5 Data Protection Officer (DPO)

Our DPO is responsible for monitoring compliance with data protection laws, advising on data protection impact assessments, and acting as a contact point for data subjects and the supervisory authority. Contact: info@wimbolink.com

14.6 Regulatory Authority

Zanzibar Data Protection Commission

15. Contract Data

• What We Collect: Signed contract documents, signatory name, signature date, IP address.
• Why We Collect: To verify artist identity, ensure legal compliance, and activate accounts.
• How We Store: Encrypted and stored securely with restricted access.
• How Long: 7 years (legal requirement).
• Your Rights: You may request a copy of your contract at any time.

16. Contact Us

For privacy concerns, data requests, or questions about this policy, contact us:

• Company: Link Technologies
• BPRA: Z0000298781
• License: BSL-SP20025-2026/69703
• Privacy Email: info@wimbolink.com
• Website: www.wimbolink.com
• Address: Zanzibar, Tanzania

1. Utangulizi

Karibu kwenye WimboLink, bidhaa ya Link Technologies ("sisi," "yetu"). Tumejitolea kulinda faragha na taarifa zako binafsi. Sera hii inaeleza jinsi tunavyokusanya, kutumia, kushiriki, na kulinda taarifa zako unapotumia jukwaa letu.

Taarifa za Biashara:

• Kampuni: Link Technologies
• Usajili wa BPRA: Z0000298781
• Namba ya Leseni: BSL-SP20025-2026/69703
• Namba ya Kodi (TIN): 126 882 211
• Eneo: Zanzibar, Tanzania
• Afisa wa Ulinzi wa Data: info@wimbolink.com

Kwa kutumia WimboLink, unakubali taratibu za data zilizoelezwa katika sera hii. Ikiwa hukubaliani na sera hii, tafadhali usitumie Huduma yetu.

2. Taarifa Tunazokusanya

2.1 Taarifa za Kibinafsi (Watumiaji Wote)

• Barua pepe - kwa kuingia na mawasiliano
• Jina kamili - kwa utambulisho na maoni
• Nambari ya simu - kwa malipo ya pesa za simu na 2FA
• Nenosiri - limefichwa na kuhifadhiwa kwa usalama

2.2 Taarifa za Ziada kwa Kwaya/Kikundi

• Jina la Kwaya - jina rasmi la kwaya/kikundi
• Mtu wa Kuwasiliana Naye - meneja au kiongozi
• Nambari ya Usajili - usajili wa serikali (hiari)
• Cheti cha Usajili - hati iliyopakiwa (hiari)
• Cheti cha Kusafisha Kodi - hati iliyopakiwa (hiari)
• Maelezo ya Akaunti ya Benki - kwa malipo ya moja kwa moja
• Maelezo ya Pesa za Simu - njia mbadala ya malipo
• Anwani, Mkoa, Wilaya - kwa uthibitishaji wa eneo

2.3 Taarifa za Ziada kwa Msanii Binafsi

• Jina la Kisanii - jina la umma la msanii
• Namba ya Kodi (TIN) - TIN ya mtu binafsi (hiari)
• Maelezo ya Akaunti ya Benki - kwa malipo ya moja kwa moja
• Maelezo ya Pesa za Simu - njia mbadala ya malipo

2.4 Nyaraka za Mkataba

• Mkataba Uliosainiwa - makubaliano ya kisheria kati ya msanii na Link Technologies
• Jina la Mtia Sahihi - jina kamili la mtu aliyesaini mkataba
• Tarehe ya Kusaini - tarehe mkataba uliposainiwa
• Anwani ya IP - kwa ajili ya uthibitishaji wa mkataba

2.5 Taarifa Zinazokusanywa Kiotomatiki

• Anwani ya IP - kwa eneo na usalama
• Maelezo ya Kifaa - aina ya kivinjari, mfumo wa uendeshaji, modeli ya kifaa
• Data ya Matumizi - kurasa zilizotembelewa, muda uliotumika, mibofyo
• Historia ya Ununuzi - albamu na single ulizonunua
• Historia ya Uchezaji - nyimbo ulizosikiliza au kupakua
• Vidakuzi (Cookies) - kwa uthibitishaji na mapendeleo

3. Jinsi Tunavyotumia Taarifa Zako

• Usimamizi wa Akaunti - Kuunda na kusimamia akaunti yako
• Uthibitishaji - Kuthibitisha utambulisho wako na usalama
• Uthibitishaji wa Mkataba - Kuthibitisha mikataba iliyosainiwa na kuwasha akaunti
• Uthibitishaji wa Msanii - Kuthibitisha ustahiki na nyaraka za msanii
• Uchakataji wa Malipo - Kuwezesha malipo kupitia Clickpesa (WimboLink haishughulikii malipo moja kwa moja)
• Malipo ya Wasanii - Kuhakikisha wasanii wanapata 75% yao moja kwa moja kutoka Clickpesa
• Kodi - Kutii mahitaji ya kodi ya serikali (5% ya TRA)
• Uthibitisho wa Ununuzi - Kutuma risiti na leseni baada ya ununuzi
• Msaada kwa Wateja - Kujibu maswali na kutatua matatizo
• Kuboresha Jukwaa - Kuchanganua mifumo ya matumizi ili kuboresha huduma yetu
• Arifa - Kutuma taarifa muhimu kuhusu ununuzi, malipo, na mabadiliko ya jukwaa
• Usalama - Kugundua na kuzuia ulaghai au matumizi mabaya
• Utii wa Kisheria - Kutii sheria za Zanzibar na Tanzania

4. Jinsi Tunavyoshiriki Taarifa Zako

4.1 Kwa Watoa Huduma

• Mamlaka za Serikali (TRA) - Kuripoti kodi kama inavyotakiwa na sheria (5% gharama za serikali)
• Huduma ya Barua Pepe - Kutuma uthibitisho na arifa
• Huduma za Kompyuta (AWS) - Kuhifadhi data za jukwaa kwa usalama
• Watoa Huduma wa Uchanganuzi - Kuelewa matumizi ya jukwaa

4.2 Makubaliano ya Uchakataji wa Data

Tumesaini Makubaliano ya Uchakataji wa Data (DPAs) na watoa huduma wote wa wahusika wengine (Clickpesa, AWS, watoa huduma wa barua pepe) ili kuhakikisha data yako inalindwa kulingana na sheria zinazotumika za ulinzi wa data.

4.3 Taarifa za Umma

• Jina la kisanii na wasifu wa msanii - Ya umma kwenye jukwaa
• Maelezo ya albamu na single - Ya umma kwa wateja
• Maoni unayochapisha - Ya umma kwenye kurasa za albamu na single
• Barua pepe na nambari yako ya simu - SI za umma
• Maelezo yako ya malipo - SI ya umma kamwe. Yatatumika kwa malipo tu na ClickPesa
• Mkataba wako - SI ya umma kamwe.

4.4 Mahitaji ya Kisheria

Tunaweza kutoa taarifa ikiwa inahitajika na sheria za Zanzibar au amri ya mahakama. Tutakujulisha kabla ya kutoa isipokuwa ikikatazwa na sheria.

5. Taarifa Muhimu Kuhusu Malipo

6. Usalama wa Data

• Nyosiri - Zimefichwa na hazihifadhiwi wazi
• Usimbaji fiche - Data zote hutumwa kwa usimbaji fiche wa HTTPS (TLS 1.2/1.3)
• Uhifadhi Salama - Data huhifadhiwa kwenye hifadhidata salama na udhibiti wa ufikiaji
• Ukaguzi wa Mara kwa Mara - Ukaguzi na sasisho za usalama zinafanywa mara kwa mara
• Ufikiaji Mdogo - Wafanyakazi walioidhinishwa tu wanaweza kufikia data za watumiaji
• Usalama wa Clickpesa - Clickpesa inazingatia viwango vyao vya usalama (PCI DSS)
• Uthibitishaji wa Sabini Mbili (2FA) - Hiari lakini inapendekezwa kwa watumiaji wote
• Usalama wa Nyaraka za Mkataba - Nyaraka zote za mkataba zimehifadhiwa kwa usalama na ufikiaji mdogo

Kumbuka: Hakuna njia ya usambazaji mtandaoni ambayo ni 100% salama. Ingawa tunajitahidi kulinda taarifa zako, hatuwezi kuhakikisha usalama kamili.

7. Haki Zako

Chini ya sheria za Zanzibar (Sheria ya Ulinzi wa Data) na mbinu bora, una haki zifuatazo:

• Kufikia - Unaweza kuangalia wasifu wako na historia ya ununuzi wakati wowote
• Kusahihisha - Unaweza kuhariri taarifa zako binafsi
• Kufuta - Unaweza kuomba kufutwa kwa akaunti (baada ya majukumu yote kukamilika)
• Kujiondoa - Unaweza kuzima arifa za barua pepe
• Kubeba Data - Unaweza kuomba nakala ya data zako
• Kujiondoa Idhini - Unaweza kujiondoa idhini ya kuchakata data
• Kagua Mkataba - Unaweza kuomba nakala ya mkataba wako uliosainiwa

7.1 Jinsi ya Kujiondoa Idhini

Unaweza kujiondoa idhini wakati wowote kwa:

• Kutuma barua pepe kwa info@wimbolink.com
• Kutumia mipangilio ya akaunti (kwa mapendeleo ya uuzaji)
• Kuwasiliana na DPO wetu moja kwa moja

Kujiondoa hakuathiri uhalali wa uchakataji kabla ya kujiondoa.

7.2 Haki ya Kuwasilisha Malalamiko

Una haki ya kuwasilisha malalamiko kwa Tume ya Ulinzi wa Data Zanzibar ikiwa unaamini haki zako za data zimevunjwa.

Kutumia haki hizi, tafadhali wasiliana na Afisa wetu wa Ulinzi wa Data kwa info@wimbolink.com.

8. Vidakuzi (Cookies)

Tunatumia vidakuzi na teknolojia zinazofanana ili kuboresha uzoefu wako:

• Vidakuzi vya Uthibitishaji - Kukukumbusha ukiwa umeingia
• Vidakuzi vya Mapendeleo - Kukumbuka mipangilio na mapendeleo yako
• Vidakuzi vya Uchanganuzi - Kuelewa jinsi unavyotumia jukwaa
• Vidakuzi vya Usalama - Kugundua na kuzuia ulaghai

Unaweza kuzima vidakuzi kwenye mipangilio ya kivinjari chako, lakini baadhi ya vipengele vinaweza kutofanya kazi vizuri.

9. Uhifadhi wa Data

• Data za Akaunti - Huhifadhiwa wakati akaunti yako ikiwa hai
• Rekodi za Ununuzi - Huhifadhiwa kwa miaka 7 (mahitaji ya kodi)
• Rekodi za Malipo ya Wasanii - Huhifadhiwa kwa miaka 7 (mahitaji ya ukaguzi)
• Rekodi za Kodi - Huhifadhiwa kwa miaka 7 (mahitaji ya TRA)
• Nyaraka za Uthibitishaji - Huhifadhiwa kwa miaka 7 (utii)
• Nyaraka za Mkataba - Huhifadhiwa kwa miaka 7 (mahitaji ya kisheria)
• Ombi la Kufuta - Unaweza kuomba kufutwa kwa akaunti baada ya majukumu yote kukamilika

Kumbuka: Tunahifadhi data kwa muda mrefu kama inavyohitajika kutimiza wajibu wa kisheria na kusuluhisha migogoro.

10. Faragha ya Watoto

Jukwaa letu halikusudiwi kwa watoto chini ya umri wa miaka 13. Hatukusanyi taarifa za kibinafsi kutoka kwa watoto chini ya miaka 13 kwa makusudi. Ikiwa unaamini mtoto ametupatia taarifa za kibinafsi, tafadhali wasiliana nasi mara moja.

10.1 Mahitaji ya Umri

• Wateja: Lazima wawe na umri wa miaka 13 au zaidi. Watumiaji chini ya miaka 18 lazima wawe na idhini ya mzazi/mlezi.
• Wasanii: Lazima wawe na umri wa miaka 18 au zaidi (umri halali wa mikataba Zanzibar).
• Hatukusanyi data kutoka kwa watoto chini ya miaka 13 kwa makusudi.

11. Viungo vya Wahusika Wengine

Jukwaa letu linaweza kuwa na viungo vya tovuti za wahusika wengine (media za kijamii za wasanii, vicheza muziki vya nje, n.k.). Hatutawajibika kwa sera zao za faragha. Tunakuhimiza kusoma sera zao za faragha.

12. Uamuzi wa Kiotomatiki

Tunaweza kutumia mifumo ya kiotomatiki kupendekeza muziki, kugundua ulaghai, na kubinafsisha uzoefu wako. Una haki ya kuomba ukaguzi wa binadamu wa maamuzi ya kiotomatiki yanayokuathiri kwa kiasi kikubwa.

13. Mabadiliko ya Sera Hii

Tunaweza kusasisha Sera hii ya Faragha mara kwa mara. Tutawajulisha watumiaji kuhusu mabadiliko makubwa kupitia:

• Arifa ya barua pepe
• Arifa ya jukwaa (bango/tahadhari)
• Kuchapisha sera iliyosasishwa kwenye Huduma yetu

Kuendelea kutumia jukwaa kunamaanisha unakubali sera iliyosasishwa.

Sasisho la Mwisho: October 02, 2026

14. Ulinzi wa Data Chini ya Sheria za Zanzibar

WimboLink inatii Sheria ya Ulinzi wa Data ya Zanzibar na sheria nyingine zinazotumika za ulinzi wa data.

14.1 Uchakataji Halali

Tunachakata data kulingana na misingi ifuatayo ya kisheria:

• Idhini: Barua pepe za uuzaji, vipengele vya hiari
• Utekelezaji wa Mkataba: Usimamizi wa akaunti, malipo, malipo ya wasanii
• Wajibu wa Kisheria: Kuripoti kodi, kuhifadhi mkataba (miaka 7)
• Maslahi Halali: Kuzuia ulaghai, usalama wa jukwaa, uchanganuzi
• Maslahi Muhimu: Masuala ya usalama wa dharura

14.2 Haki za Mhusika wa Data

• Una haki ya kufikia, kusahihisha, na kufuta data yako
• Una haki ya kubeba data
• Una haki ya kujiondoa idhini
• Una haki ya kuwasilisha malalamiko kwa Tume ya Ulinzi wa Data Zanzibar

14.3 Arifa ya Uvunjaji wa Data

Katika kesi ya uvunjaji wa data, tutawajulisha watumiaji walioathirika na Tume ya Ulinzi wa Data Zanzibar ndani ya masaa 72 baada ya kufahamu kuhusu uvunjaji huo.

14.4 Uhamisho wa Data wa Kimataifa

Data yako inaweza kuhamishwa na kuhifadhiwa kwenye seva zilizo nje ya Zanzibar/Tanzania, ikiwa ni pamoja na seva za AWS. Kwa kutumia jukwaa letu, unakubali uhamisho kama huo. Tunahakikisha ulinzi unaofaa umewekwa (vifungu vya kawaida vya mkataba, usimbaji fiche, n.k.).

14.5 Afisa wa Ulinzi wa Data (DPO)

DPO wetu anawajibika kwa kufuatilia utii wa sheria za ulinzi wa data, kutoa ushauri kuhusu tathmini za athari za ulinzi wa data, na kutumika kama sehemu ya mawasiliano kwa wahusika wa data na mamlaka ya usimamizi. Wasiliana: info@wimbolink.com

14.6 Mamlaka ya Udhibiti

Tume ya Ulinzi wa Data Zanzibar

15. Data ya Mkataba

• Tunachokusanya: Nyaraka za mkataba zilizosainiwa, jina la mtia sahihi, tarehe ya kusaini, anwani ya IP.
• Kwa Nini Tunakusanya: Kuthibitisha utambulisho wa msanii, kuhakikisha utii wa kisheria, na kuwasha akaunti.
• Jinsi Tunavyohifadhi: Kwa usimbaji fiche na uhifadhi salama wenye ufikiaji mdogo.
• Muda Gani: Miaka 7 (mahitaji ya kisheria).
• Haki Zako: Unaweza kuomba nakala ya mkataba wako wakati wowote.

16. Wasiliana Nasi

Kwa masuala ya faragha, maombi ya data, au maswali kuhusu sera hii, wasiliana nasi:

• Kampuni: Link Technologies
• BPRA: Z0000298781
• Leseni: BSL-SP20025-2026/69703
• Barua pepe ya Msaada: info@wimbolink.com
• Tovuti: www.wimbolink.com
• Anwani: Zanzibar, Tanzania