How we use and protect your data
Last updated: 5 October 2026
Who we are
Systems 2000 Limited (“we”, “us”) is a private company registered in Tanzania under incorporation number 27480, with its registered office at Plot 2008/93, Indira Gandhi Street / Morogoro Road, Mchafukoge Ward, Ilala CBD, Dar es Salaam 11105, Tanzania. We are the data controller for the personal data described in this policy, and we are registered with the Personal Data Protection Commission under number 0-000-001-816.
Our data protection officer is Kaushik Patel, who can be reached at privacy@s2.co.tz.
What we collect
- Account and contact details: name, company, email, phone and postal address, when you register, order or contact us.
- Billing records: invoices, payments and the payment method used. Card and mobile-money details are entered on our payment provider's pages and are never stored by us.
- Domain registration data: the registrant, administrative and technical contacts that registries require for every domain.
- Service data: the content you store on our hosting and email services. We process it only to provide the service.
- Support history: tickets, emails and call notes.
- Technical data: IP addresses, browser type, and records of logins and actions in your account, kept for security and fraud prevention.
- Cookies: only the cookies needed to keep you logged in and to remember your cart and currency.
Why we use it
| Purpose | Lawful basis |
|---|---|
| Providing and billing the services you order | Performing our contract with you |
| Registering and renewing domains with registries | Contract, and registry rules |
| Tax and accounting records | Legal obligation |
| Protecting our systems and customers from fraud and abuse | Legitimate interest |
| Service and account notices | Contract |
| Marketing emails about our products | Your consent, which you can withdraw at any time |
Who we share it with
We do not sell personal data. We share only what each party needs:
- domain registries and registrars, including tzNIC for .tz domains, as required to register a domain
- our payment provider, PesaPal, to process payments
- our data centre and backup providers, who store data on our behalf
- authorities, when Tanzanian law requires us to
How long we keep it
- Account and billing records: for as long as you are a client, then for 7 years for tax purposes.
- Hosting and email content: deleted within 30 days of a service ending; backups roll off within 12 months under our backup cycle.
- Server logs: 90 days.
Your rights
Under the Personal Data Protection Act, 2022 you may ask us to:
- tell you what data we hold about you and how we use it
- correct inaccurate data
- erase data we no longer need
- stop or restrict processing that may cause you harm
- stop direct marketing
You may also object to decisions made solely by automated means. Contact our data protection officer; we reply within 30 days. If you are not satisfied, you may complain to the Personal Data Protection Commission.
Security
We protect data with encrypted connections (HTTPS), access controls, malware scanning, firewalls and daily encrypted off-site backups. If a breach affects your personal data, we will notify the Commission and, where required, you.
Changes
We will post any change here and update the date above. Clients are notified of material changes by email.
