Privacy Policy
Last updated: July 2026
Legal Review Completed. The PDPC registration application is in preparation and has not been submitted or approved. GLEAN GOLD does not claim to be PDPC-registered or regulator-certified. The formal privacy contact, operational facts and versioned approval record will be updated only with verified information.
1. Information We Collect
Depending on the features you use, we may collect: (a) names, email addresses, telephone numbers, company details and intended use provided in membership or enterprise-account applications; (b) contacts, region-level locations and business descriptions entered in project, licence, equipment-company and compliance-assessment forms; current public forms do not accept binary files; (c) favourites, search history, report-access and account-security records; and (d) technical logs needed to protect the service, such as IP address, browser information, request time and audit records. Please do not submit personal information unrelated to the service.
2. How We Use Information
We process information to review and administer accounts; respond to service enquiries; manually review project, equipment-company and compliance-assessment submissions; publish reviewed public information only within the scope you expressly authorise; provide favourites, history and report features; prevent fraud, abuse and unauthorised access; maintain audit records; and meet applicable legal obligations. Manual publication review does not represent government approval, company certification or a guarantee of project claims. We do not sell or rent personal information.
3. Public Display and Recipients
Project, equipment-company or other information is displayed publicly only after manual review and the relevant display authorisation. Exact coordinates, private contacts, non-public attachments and internal review records are not included in public directories. Current public forms accept structured information and do not provide public binary-file upload. If private file intake is enabled later, it will use a controlled secure channel with an additional notice. To operate the service, we may disclose necessary information to hosting, database, file-storage, email-delivery and professional service providers that are subject to confidentiality and security obligations, or to competent authorities when legally required. Specific providers, processing locations and cross-border arrangements will be updated only from verified production configuration.
4. Data Security and Retention
We use reasonable safeguards including password hashing, access controls, role-based permissions, audit records and isolation of private files. Anonymous licence-query quota buckets receive a 24-hour cleanup grace period after the daily EAT quota window ends and are then eligible for automatic hard deletion. The bucket does not store the raw IP address or the licence number searched. Other data is retained only for as long as needed for the purposes above, dispute resolution and legal obligations. Record-specific periods will be updated here after the responsible owners verify them and the corresponding deletion process is executable. Data beyond the applicable period will be deleted, anonymised or aggregated. No internet transmission or storage method is guaranteed to be completely secure.
5. Your Rights
Subject to applicable law, you may request access to, correction or deletion of your personal information, restriction of processing, withdrawal of consent-based processing, or raise an objection. We may need to verify your identity before acting on a request. The PDPC registration application is currently in preparation and has not been submitted or approved. The formal privacy contact and complete instructions for complaints to Tanzania’s Personal Data Protection Commission will be updated after verification.
6. Cookies, Analytics and Automation
Necessary login and security cookies support sessions and service protection. To prevent abuse and preserve access to the official data source, anonymous licence searches have a daily network-address quota. The GLEAN application normalises the network address in the request and immediately uses a separate secret and the current daily window to create a short-lived pseudonymous quota identifier. The raw IP address is not written to GLEAN analytics or customer profiles, and the quota identifier is not connected to MIC, Partner Intelligence, advertising or company attribution. Approved members use an account quota. Administrator business quotas are unlimited, but every account remains subject to a separate short-window security abuse limit. The first-party anonymous analytics cookie (gg_session_id) remains disabled unless the relevant notice, choice mechanism, retention period and deletion method are live. PDPC application preparation does not by itself suspend registration, licence search, membership, manual NMB payment or project-submission services; each function remains subject to its own terms, safeguards and availability limits.
7. Contact and Changes
For a privacy enquiry or deletion request, use the site contact form and mark the message “Privacy request”. The formal privacy contact will be published after internal authorisation and a send-and-receive test. We will update this notice when processing activities, service providers, PDPC status or legal requirements materially change and will show the new date on this page. Legal review has been completed; subsequent updates must continue to use verified operational facts. Contact form