Privacy Policy

Effective Date: July 1, 2026
Last Updated: July 1, 2026

1. Introduction

HM Consult ("we," "us," or "our") is committed to protecting your personal data in accordance with the Personal Data Protection Act No. 11 of 2022 (PDPA) of Tanzania, which came into force on 1 May 2023, and its accompanying regulations. This Privacy Policy explains how we collect, use, store, and protect personal data when you visit hmconsult-ea.com or engage with our services.

By using our website, you consent to the practices described in this policy.

2. Who We Are

HM Consult is an operational consulting firm registered and operating in East Africa. For the purposes of the PDPA, HM Consult acts as the data controller — meaning we determine the purpose and means of processing any personal data collected through this website.

📧 hadiyah@hmconsult-ea.com
🌐 hmconsult-ea.com

3. What Personal Data We Collect

In line with the PDPA's principle of data minimisation, we only collect personal data that is strictly necessary for the purposes for which it is collected. This may include:

Full name
Email address
Phone number
Business name and industry
Any information you voluntarily provide through contact or enquiry forms
Website usage data collected through cookies or analytics tools (non-identifying)

4. How We Collect Your Data

We collect personal data directly from you when you:

Fill out a contact or enquiry form on our website
Send us an email
Book a consultation or engage our services
Subscribe to any communications from HM Consult

We do not collect personal data through unlawful means, and we do not collect data without your knowledge, in accordance with Section 18 of the PDPA.

5. Why We Collect Your Data (Purpose of Processing)

Your personal data is collected and processed for the following lawful purposes:

To respond to your enquiries and provide our consulting services
To communicate service updates, proposals, or relevant information
To process and fulfil contractual obligations
To improve our website and user experience
To comply with any applicable legal obligations

We will not process your data for any purpose beyond what is stated here without obtaining your prior consent.

6. Legal Basis for Processing

Under the PDPA, we process your personal data on the following lawful grounds:

Consent — where you have freely and explicitly given us permission to process your data
Contractual necessity — where processing is required to fulfil a contract with you
Legal obligation — where we are required by law to process certain data
Legitimate interest — where processing is necessary for our legitimate business operations and does not override your rights

7. How We Store & Protect Your Data

We are committed to keeping your personal data secure. We implement appropriate technical and organisational safeguards including:

Encrypted data storage and transmission
Restricted access to personal data on a need-to-know basis
Regular review of our data security practices

Your data will not be stored for longer than is necessary for the purpose for which it was collected.

8. Sharing Your Data

We do not sell, rent, or trade your personal data to third parties. We may share your data only in the following limited circumstances:

With trusted service providers who assist in delivering our services (e.g. email platforms, scheduling tools), under strict confidentiality obligations
Where required by law, regulation, or lawful authority in Tanzania
With your explicit consent

9. International Data Transfers

As we operate across East Africa, your data may be processed or stored outside Tanzania. Where this occurs, we ensure that any transfer is made only to countries with adequate data protection laws, in compliance with Part VII of the PDPA governing cross-border data transfers.

10. Your Rights Under the PDPA

As a data subject under the Personal Data Protection Act 2022, you have the right to:

Access the personal data we hold about you
Correct any inaccurate or incomplete data
Object to how your data is being processed
Withdraw consent at any time, without affecting the lawfulness of prior processing
Request deletion of your personal data where it is no longer necessary
Lodge a complaint with the Personal Data Protection Commission (PDPC) of Tanzania if you believe your rights have been violated

To exercise any of these rights, contact us at: hadiyah@hmconsult-ea.com

11. Cookies

Our website may use cookies to improve your browsing experience and gather anonymised usage data. You may choose to disable cookies through your browser settings. Disabling cookies may affect some functionality of the website.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. Any updates will be posted on this page with a revised effective date. We encourage you to review this policy periodically.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact:

HM Consult
📧 hadiyah@hmconsult-ea.com
🌐 hmconsult-ea.com