Privacy Notice

1. Scope

This notice explains how MK Accounting Service Provider processes personal data for MK Accounting. The Provider acts as controller for registration, subscription, billing, support, security and service-administration data. For personal data entered by a Customer into its business records, the Customer normally acts as controller and the Provider acts as processor.

2. Data collected

Data may include names, email addresses, phone numbers, company identity, login and role records, subscription and payment references, support communications, IP address, browser/device information, audit events and uploaded documents. Customers determine the personal data they enter in accounting, customer, supplier, employee and payroll records.

3. Purposes and legal grounds

Data is processed to create and administer accounts, perform the service contract, secure the platform, prevent fraud, provide support, keep audit evidence, manage payments, meet legal duties and pursue legitimate operational interests that do not override individual rights. Consent is used where applicable and may be withdrawn without affecting earlier lawful processing.

4. Sharing and transfers

Data is disclosed only to authorised staff, contracted hosting/support providers, professional advisers, payment providers or public authorities where necessary and lawful. Cross-border transfers, if any, require a lawful basis and appropriate safeguards under applicable Tanzania data-protection requirements.

5. Retention

Account, transaction, audit and acceptance records are retained for the active service period and thereafter as required for accounting, tax, dispute, fraud-prevention, security and legal obligations. Data no longer required is securely deleted or anonymised, subject to backups and lawful holds.

6. Security

Safeguards include tenant separation, role-based access, password hashing, audit logs, controlled administrative access, source-document integrity records, backups and incident handling. Security is risk based and informed by recognised information-security and governance practices.

7. Individual rights

Subject to applicable law, individuals may request access, correction, deletion, restriction, objection, withdrawal of consent and information about relevant processing, and may complain to the Personal Data Protection Commission. Some requests may be limited by legal record-retention or another lawful basis.

8. Customer responsibilities

Customers must provide their own privacy notices where required, collect data lawfully, configure access appropriately, respond to data-subject requests and avoid entering unnecessary or unlawful personal data.

9. Contact

Privacy enquiries: info@sslgroup.co.tz. Provider: MK Accounting Service Provider, Tanzania. Effective date: 06 October 2026.