Privacy Policy

Version 1.0. Last updated: 23 October 2026.

1. Who we are

Owner to confirm runs ELITE-X TANZANIA. This policy explains what personal data we handle when you browse the site, create an account, enrol in a course or contact support, and what choices you have. We keep data to run the service and do not sell personal information.

2. Information we collect

  • Account information: full name, email address, phone number, WhatsApp number and password (stored only as a salted hash).
  • Payment information: the name you paid with, an optional transaction reference, the screenshot you upload, the amount, the course and the decision on the payment. We do not receive card details. Payments are made by mobile money to the number on the site, handled by the provider and checked by an administrator.
  • Support messages: the name, email, topic, subject and message you send us, and a ticket reference.
  • Usage and device data: IP address, browser type, pages requested, times of sign-in, and records of security events such as failed sign-ins, kept to protect accounts.
  • Subscription data: course selected, approval and rejection dates, subscription start and end dates, and WhatsApp access requests.

3. How we use it

  • To provide your account, process enrolment and payment checks, and calculate subscription dates.
  • To send you notices, such as a payment decision or a warning before your subscription ends.
  • To answer support requests and keep a record of them.
  • To keep the service secure and to prevent fraud and misuse.
  • To meet legal obligations, such as keeping financial records.

4. Legal basis

We process data because it is needed to provide the subscription you ask for (performance of a contract), because the law requires some records to be kept, and because keeping the service secure and preventing fraud is in our legitimate interest and does not override your rights. Where we ever use optional cookies, we will ask for your consent first. We currently use none.

5. Who we share it with

We share data only with service providers that help us run the site and hosting, under obligations of confidentiality, and when the law requires it. Administrators at ELITE-X see payment and support records they need to do their work. We do not sell personal information and we do not share your data for advertising.

6. How long we keep it

  • Account data: Owner to confirm.
  • Payment evidence and screenshots: Owner to confirm.
  • Support messages: kept as part of the support record for as long as the owner's retention schedule requires.

Retention periods are set by the owner and must match the law that applies to the business.

7. Security

The site is served over HTTPS, and we send security headers, hash passwords with Argon2id, store payment screenshots outside public web folders, served only through an authorised controller, protect forms against forged requests, limit repeated sign-in and form attempts, and record administrator decisions in an audit log. No system is completely secure. If we learn of a breach affecting you, we will tell you as the law requires.

8. Your rights

You can ask us to: access the personal data we hold about you; correct it; delete it, subject to records we must keep; restrict how we use it; give you a copy in a portable format; object to some uses; and withdraw consent where we rely on it. To exercise a right, email Owner to confirm from the address on your account. We may ask you to confirm your identity first.

9. Cookies

We set a small number of essential cookies and a preference cookie. The full list, with purposes and durations, is in the Cookie Policy.

10. Third-party services

  • Tailwind CSS and Lucide icons are loaded from public content delivery networks (cdn.tailwindcss.com and cdn.jsdelivr.net). Your browser connects to them, so they receive your IP address and request details.
  • Mobile money provider: handles the payment you make to the number on the site. Its own privacy terms apply to that transaction.
  • WhatsApp: the course group runs on WhatsApp, and WhatsApp's privacy terms apply to what you do inside it.

11. Children

The service is not directed at children. You must be at least Owner to confirm to create an account. If we learn that we hold data about a child who should not have an account, we will delete it.

12. International transfers

Data is stored in Owner to confirm. Where a service provider processes data outside that location, we choose providers that protect data under written terms. Owner to confirm the transfer safeguards in use.

13. Changes to this policy

We will update this policy when our practices change. For significant changes we will tell registered users by email or in the app, and we will update the version and date at the top of this page.

14. Contact

Privacy requests: Owner to confirm. Data Protection Officer: Owner to confirm. Address: Owner to confirm.

15. Making a complaint

Please contact us first so we can try to put things right. If you are not satisfied, you can complain to the data protection regulator: Owner to confirm.