Privacy Policy
Last updated: 23 September 2026
This website is operated by GLEAN GOLD MINING INVESTMENT COMPANY LIMITED, registered with Tanzania’s Personal Data Protection Commission (PDPC) as a Data Controller. Certificate 0-000-011-866 was issued on 20 September 2026 and is valid until 20 September 2031. This registration does not replace Data Processor registration, a cross-border transfer permit or other separately applicable permissions, and is not government endorsement of this website, its projects or investments.
View Data Controller certificate (PDF)Company identity and registration records
1. Information We Collect
Depending on the features you use, we may collect: (a) names, email addresses, telephone numbers, company details and intended use provided in membership or enterprise-account applications; (b) contacts, region-level locations and business descriptions entered in project, licence, equipment-company and compliance-assessment forms; where available, the licence-holder form also accepts licence photos or PDFs into private storage; (c) favourites, search history, report-access and account-security records; and (d) technical logs needed to protect the service, such as IP address, browser information, request time and audit records. Please do not submit personal information unrelated to the service.
2. How We Use Information
We process information to review and administer accounts; respond to service enquiries; manually review project, equipment-company and compliance-assessment submissions; publish reviewed public information only within the scope you expressly authorise; provide favourites, history and report features; prevent fraud, abuse and unauthorised access; maintain audit records; and meet applicable legal obligations. Manual publication review does not represent government approval, company certification or a guarantee of project claims. We do not sell or rent personal information.
3. Public Display and Recipients
Project, equipment-company or other information is displayed publicly only after manual review and the relevant display authorisation. Exact coordinates, private contacts, non-public attachments and internal review records are not included in public directories. Where the upload service is available, the licence-holder form accepts licence photos or PDFs into private storage. Files are available only to authorised reviewers after safety checks. If the form indicates that uploads are unavailable, a licence number may be submitted instead. Keep your receipt and private access code confidential; they allow you to check progress. To operate the service, we may disclose necessary information to hosting, database, file-storage, email-delivery and professional service providers that are subject to confidentiality and security obligations, or to competent authorities when legally required. Specific providers, processing locations and cross-border arrangements will be updated only from verified production configuration.
4. Data Security and Retention
We use reasonable safeguards including password hashing, access controls, role-based permissions, audit records and isolation of private files. Anonymous licence-query quota buckets receive a 24-hour cleanup grace period after the daily EAT quota window ends and are then eligible for automatic hard deletion. The bucket does not store the raw IP address or the licence number searched. Other data is retained only for as long as needed for the purposes above, dispute resolution and legal obligations. Record-specific periods will be updated here after the responsible owners verify them and the corresponding deletion process is executable. Data beyond the applicable period will be deleted, anonymised or aggregated. No internet transmission or storage method is guaranteed to be completely secure.
5. Your Rights
Subject to applicable law, you may request access to, correction or deletion of your personal information, restriction of processing, withdrawal of consent-based processing, or raise an objection. We may need to verify your identity before acting on a request. Contact our Data Protection Officer using the details below to make a request. You may also lodge a complaint with Tanzania’s Personal Data Protection Commission (PDPC).
6. Cookies, Analytics and Automation
Necessary login and security cookies support sessions and service protection. To prevent abuse and preserve access to the official data source, anonymous licence searches have a daily network-address quota. The GLEAN application normalises the network address in the request and immediately uses a separate secret and the current daily window to create a short-lived pseudonymous quota identifier. The raw IP address is not written to GLEAN analytics or customer profiles, and the quota identifier is not connected to MIC, Partner Intelligence, advertising or company attribution. Free accounts use an account quota. Administrator business quotas are unlimited, but every account remains subject to a separate short-window security abuse limit. The first-party anonymous analytics cookie (gg_session_id) remains disabled. When enabled, GLEAN may use PostHog to measure public page visits and limited search, registration and payment-flow events. The analytics client writes no cookies, local storage or session storage, and disables autocapture, session recording, person profiles and GeoIP enrichment. Form contents, licence numbers, transaction references and bank details are not sent. Browser Do Not Track settings are respected.
7. Contact and Changes
For a privacy enquiry or deletion request, contact our Data Protection Officer, XIANG ZHEN, or use the site contact form and mark the message “Privacy request”. Postal address: P.O. Box 42450, Dar es Salaam, Tanzania. We will update this notice when processing activities, service providers, registration status or legal requirements materially change and will show the new date on this page. xiang.zhen1st@gmail.com · Contact form