1. Scope of this Privacy Policy
This Privacy Policy applies to ORBI Business OS and all ORBI products, applications, websites, portals, APIs, integrations and related support services operated by or on behalf of Dali Geotech Ltd (“ORBI”, “Dali Geotech”, “we”, “our” or “us”).
It also applies to any ORBI mobile app or companion application that links to this Privacy Policy. A specific ORBI product may provide an additional privacy notice where its processing activities require more detailed information.
2. Our Data Protection Role
Depending on how ORBI is used, Dali Geotech may act as a data controller, a data processor, or both.
We generally act as a controller for information used to create and administer ORBI accounts, provide support, protect our systems, manage subscriptions, communicate with customers and operate our own websites and services.
When an organisation uses ORBI to store or manage information about its own customers, employees, suppliers, guests, recipients or other individuals, that organisation generally determines why and how that information is used. In such cases, ORBI may process that information on the organisation's behalf and according to its instructions.
3. Information We Collect
Account and identity information
We may collect names, usernames, business names, job titles, user roles, account identifiers, profile information and authentication information.
Contact information
We may collect telephone numbers, email addresses, organisation details and other contact information you provide.
Business and transaction information
Depending on the ORBI product you use, information may include invoices, sales records, purchases, stock movements, expenses, customer records, supplier records, bookings, orders, table or room information, payment references, project records and other operational business information.
Employee and workforce information
Where ORBI Corporate or related features are used for workforce administration, authorised business users may enter employee information such as staff profiles, attendance, leave, payroll-related records, job information and employment records.
Messaging information
When using ORBI SMS & Email or messaging features in another ORBI product, we may process recipient contact details, message content, templates, sender information, delivery status, campaign information and interaction or delivery metrics where supported.
Device, log and technical information
We may automatically receive IP address, browser type, operating system, device type, app version, language, login timestamps, crash information, security events, diagnostic information and other technical logs.
Support and communications
We process information you provide when requesting support, reporting an issue, submitting feedback, requesting a quotation or otherwise communicating with us.
Optional information
Certain app features may allow you or your organisation to upload documents, photographs, files, location-related information or other content. We only process such information when the relevant feature is used or permission is granted.
4. How We Collect Information
We may collect personal information:
- directly from you when you register, sign in, enter data, contact support or use an ORBI feature;
- from your employer, organisation or an authorised ORBI administrator;
- automatically from your browser, device, app or network when you use the services;
- through integrations, APIs, payment providers, messaging providers and other services enabled by you or your organisation; and
- from other lawful sources where necessary to provide or secure the services.
5. How We Use Information
We use information as reasonably necessary to:
- create, authenticate and administer user accounts;
- provide ORBI features and process instructions submitted by authorised users;
- manage sales, inventory, billing, finance, restaurant, hotel, HR, payroll, project and messaging workflows;
- send service notifications, receipts, alerts, reports and other requested communications;
- provide customer support and respond to questions or incidents;
- maintain, troubleshoot, improve and develop ORBI products;
- monitor availability, performance, fraud, misuse and security threats;
- maintain audit logs and business records;
- comply with applicable laws, lawful requests and regulatory obligations; and
- protect the rights, safety, property and integrity of users, customers, ORBI and third parties.
6. Legal Bases for Processing
Where applicable law requires a legal basis, we process personal information on one or more appropriate grounds, including performance of a contract, compliance with legal obligations, consent, legitimate interests, protection of vital interests, or another lawful basis permitted by applicable law.
ORBI is operated with regard to Tanzania's personal data protection framework, including the Personal Data Protection Act, 2022 (Cap. 44) and applicable regulations.
7. Mobile App Permissions
An ORBI mobile application may request device permissions only when required for a feature you choose to use. Depending on the app and device, these may include:
- Camera or photos/files: for uploading receipts, documents, profile images, product images or other business records;
- Notifications: for service alerts, tasks, approvals, transaction updates or other app notifications;
- Location: only for an ORBI feature that requires location information and where the feature is enabled;
- Network access: to connect the app securely to ORBI servers and synchronise authorised data; and
- Other permissions: where clearly requested by a specific feature and supported by the operating system.
You can manage app permissions through your device settings. Disabling a permission may prevent the related feature from working correctly.
9. Payments and Financial Information
Some ORBI products may connect with third-party payment providers, mobile-money services, banks or other financial services. When you choose a payment method, relevant transaction information may be transmitted to or received from the applicable provider so the transaction can be initiated, verified, reconciled or recorded.
Third-party payment providers process information under their own terms and privacy practices. ORBI may retain transaction references, status, amount, payer or customer information and related accounting records as necessary for the service and applicable record-keeping obligations.
10. SMS, Email and Business Communications
ORBI provides tools that businesses may use to communicate with their customers, staff or other recipients. The business using ORBI is responsible for ensuring it has an appropriate lawful basis, permission or other authority to contact recipients and for respecting applicable opt-out and direct-marketing requirements.
ORBI may process recipient details, message content, delivery information and related technical data solely as necessary to provide, secure and support the communication service, subject to our role and the customer's instructions.
11. Storage and International Data Transfers
ORBI may use cloud, communications, infrastructure or technology providers whose systems are located in Tanzania or other countries. Where personal information is transferred across borders, we take reasonable steps to use safeguards and transfer mechanisms required by applicable data protection law.
12. How Long We Keep Information
We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, to provide the services, maintain appropriate business and security records, resolve disputes, enforce agreements and comply with legal, tax, accounting or regulatory requirements.
Retention periods may differ by data category and by instructions from a business customer. When information is no longer required, we may delete it, securely dispose of it or anonymise it, subject to applicable legal and technical constraints.
13. Information Security
We use reasonable administrative, technical and organisational safeguards designed to protect information against unauthorised access, alteration, disclosure, loss or destruction. Measures may include authentication, access controls, encryption where appropriate, monitoring, backups, logging, secure infrastructure practices and restricted administrative access.
14. Your Privacy Rights
Subject to applicable law and the circumstances of the processing, you may have rights relating to your personal information, including rights to be informed, request access, request correction, request erasure or destruction, restrict certain processing, object to certain processing, request data portability, withdraw consent where processing relies on consent, raise concerns about automated decision-making, and lodge a complaint with the appropriate authority.
If your information was entered into ORBI by your employer, a merchant, restaurant, hotel or another ORBI customer, you should normally contact that organisation first because it may be the controller responsible for responding to your request. We will assist our customers with valid requests where required.
15. Data Entered by ORBI Business Customers
ORBI customers control the business records and personal information they or their authorised users submit to their ORBI environment. Customers are responsible for configuring user permissions appropriately, limiting access, providing required notices to individuals, maintaining lawful processing grounds and using ORBI in accordance with applicable law.
If you are an employee, customer, guest, supplier or other individual whose information is stored in ORBI by one of our customers, requests concerning that information may need to be directed to that customer.
16. Children's Privacy
ORBI is designed as business-management software and is not intended as a consumer service directed to children. We do not knowingly invite children to create independent ORBI business accounts. If information relating to a child must lawfully be processed by an ORBI business customer, the customer is responsible for ensuring the processing is permitted and appropriately protected under applicable law.
18. Third-Party Services and Links
ORBI may integrate with or link to third-party services. Their collection and use of personal information is governed by their own privacy notices and terms. We encourage you to review those notices before using a third-party service.
19. Changes to this Privacy Policy
We may update this Privacy Policy to reflect changes to ORBI products, legal requirements, technology or our privacy practices. The latest version will be posted on the applicable ORBI website or made available through the app, with the updated effective date shown at the top of this page.
Where required by law, we will provide additional notice or request consent before a material change takes effect.
20. Contact Us
For privacy questions, data protection requests or concerns about an ORBI service, contact:
Dali Geotech Ltd — ORBI Business OS
Tanzania
Email: business@daligeotech.com
Phone: +255 755 255 292
Website: www.orbi.co.tz
You may also have the right to lodge a complaint with Tanzania's Personal Data Protection Commission (PDPC) or another competent data protection authority, as applicable.