Legal
Privacy Policy
How Island Treasures Ltd handles personal information collected through this website.
Last updated: 2026-07-30
This notice explains what personal information this website collects, why we collect it, and what we do with it. It covers this website only. It is written to reflect what the website actually does, rather than to describe practices we do not have.
1. Who we are
Island Treasures Ltd is a company registered in Tanzania and based in Zanzibar. We are the party responsible for personal information collected through this website.
Postal address: Fumba Rd, Maungany, PO Box 4533, Zanzibar 71202, Zanzibar, Tanzania.
Email: admin@itltz.com. Telephone: +255 652 447472.
2. What we collect
We collect personal information in one way only: when you choose to submit it through our business enquiry form. Nothing on this website collects personal information passively for marketing or profiling purposes.
| Information | Whether required | Why we need it |
|---|---|---|
| Full name | Required | To address our reply to you. |
| Business email address | Required | To send our reply and any quotation. |
| Your message | Required | To understand and answer your enquiry. |
| Enquiry type | Required | To route your enquiry to the right person. |
| Company name, phone or WhatsApp number, country, city, business type | Optional | To reply by your preferred route and to understand your business context. |
| Product interest, quantity, frequency, packaging requirement, destination | Optional | To prepare an accurate quotation without a further exchange of emails. |
| Submission timestamp, the page the enquiry came from, and your IP address | Collected automatically with the submission | Security and abuse prevention: to apply rate limits and to detect automated spam. The IP address is not used for marketing, analytics or profiling. |
We do not ask for, and you should not send us, payment card details, identity document numbers, or any special category information such as health data through this form.
3. Why we may process it, and on what basis
- To respond to your enquiry. You submit the enquiry and tick the consent box, so we process the details you gave us in order to reply and, where relevant, to quote. This processing is also necessary to take steps at your request before entering into a possible contract.
- To keep a record of commercial enquiries. We retain enquiries so that we can trace a quotation or an order back to the request that started it.
- To protect the website. We process the submission timestamp and IP address to apply rate limits and block automated abuse. We have a legitimate interest in keeping the site usable and free from spam.
We do not use your details to send marketing you did not ask for. If we ever introduce a mailing list, it will require a separate, explicit opt-in.
4. Who sees your information
Enquiries are delivered by email to our own commercial team and stored on the server that hosts this website. We do not sell personal information, we do not share it with advertising networks, and we do not pass it to third parties for their own marketing.
Personal information may be handled by the following categories of service provider acting on our behalf:
- Our web hosting provider, which operates the server on which this website and its enquiry records are stored.
- Our email provider, which transmits and stores the enquiry notification.
We may also disclose information where we are required to do so by law, or where it is necessary to establish, exercise or defend legal claims.
5. International handling
Our hosting and email infrastructure may process or store data outside Tanzania. Where that happens, it is because the service we use to run this website operates internationally, not because we transfer your details for any separate purpose. If you send us an enquiry from outside Tanzania, your details will necessarily be received and handled in Tanzania.
6. How long we keep it
We keep enquiry records for up to 180 days, after which they are deleted from the website's own enquiry log. Where an enquiry becomes a quotation, an order or an ongoing commercial relationship, the related records are kept in our business systems for as long as we need them for that relationship and for as long as Tanzanian tax and company law requires us to retain commercial records.
Security and rate-limiting records containing IP addresses are kept for a short period only, and are used solely for abuse prevention.
7. How we protect it
This website is served over HTTPS, so information you submit is encrypted in transit. The enquiry form is protected against cross-site request forgery and automated submission, and enquiry records are stored outside the publicly accessible part of the web server so that they cannot be retrieved over the web. Access is limited to people who need it to answer enquiries.
No website can be described as completely secure, and we do not claim that. If you become aware of a security problem with this website, please tell us using the contact details above.
8. Cookies and tracking
This website sets no advertising or analytics cookies and loads no third-party tracking scripts. A single strictly necessary cookie is set by the web server on the business enquiry page, to protect the form against cross-site request forgery. See our Cookie Notice for the detail.
9. Links to other websites
This website links to the websites of our own brands and may link to other external sites. Those websites have their own privacy practices and their own cookie and tracking behaviour, which we do not control. Following such a link means the other site's practices apply, not this notice. Our brand websites are operated as separate websites and may use analytics or e-commerce cookies that this website does not.
10. Embedded content
This website embeds no third-party content: no maps, no video players, no social media widgets, no comment systems, and no external fonts. Everything the page loads is served from this website's own domain.
11. Your rights
Tanzania's Personal Data Protection Act, 2022 gives individuals rights in relation to their personal information. Subject to the conditions and exceptions in the Act, these generally include the right to be informed about how your information is used, to ask for a copy of it, to ask for inaccurate information to be corrected, to ask for information to be deleted, to object to certain processing, and to withdraw consent where processing is based on consent.
To exercise any of these, email admin@itltz.com and tell us what you would like us to do. We may need to ask you for enough information to be sure we are dealing with the right person's records. Withdrawing your consent will not affect anything we did before you withdrew it, and if you withdraw consent we may be unable to continue answering your enquiry.
If you are not satisfied with how we have handled your personal information, you may complain to the Personal Data Protection Commission, which supervises data protection in the United Republic of Tanzania.
12. Children
This is a business-to-business website and it is not directed at children. We do not knowingly collect personal information from children through it.
13. Changes to this notice
If we change what this website does with personal information, we will update this notice and change the date at the top. Material changes will be reflected here rather than notified individually, so please check this page if it matters to you.
14. Contact
For any question about this notice or about personal information we hold, contact us at admin@itltz.com, or write to us at the postal address in section 1.