SwahiliBridge
Legal document

Privacy Policy

This policy explains what personal data SwahiliBridge collects, how it is used, how it is protected, and your rights as a data subject. It applies to this website and to all services provided by SwahiliBridge.

Last updated: January 2026GDPR compliant8 sections · ~5 min read

Pending legal review — effective date TBD. This policy is a working draft prepared in good faith. It must be reviewed by qualified counsel and an effective date applied before publication.

01

Who We Are

SwahiliBridge is a professional language services and Tanzania research agency, founded and operated by Mathayo Kapela, based in Dar es Salaam, Tanzania. For the purposes of the General Data Protection Regulation (GDPR) and applicable data protection law, Mathayo Kapela is the data controller responsible for any personal data collected through this website and in the course of providing services.

Registered entity: SwahiliBridge, operated by Mathayo Kapela · Dar es Salaam, Tanzania · privacy@swahilibridge.com
02

What Data We Collect

We collect only the personal data necessary to provide our services and respond to your enquiries. We do not collect data speculatively or in excess of what is required.

  • Contact details you provide: name, email address, company name, phone number.
  • Project files and documents you share with us for translation, research, or review.
  • Payment information — processed entirely by Stripe or PayPal; we never store card numbers or bank details.
  • Communications: emails, messages, and notes from discovery calls or project discussions.
  • Website analytics: anonymised visit data (page views, approximate geography). No cross-site tracking.
We do not collect: government IDs, biometric data, health data, or sensitive personal information unless explicitly required by a specific certified translation engagement (e.g. immigration documents) — in which case it is handled only for the purpose of completing that translation.
03

How We Use Your Data

Your personal data is used only for legitimate purposes directly related to the services you have requested or enquired about. We do not use data for automated profiling or algorithmic decision-making.

  • To provide, manage, and deliver the services you commissioned.
  • To send quotes, invoices, project updates, and delivery notifications.
  • To respond to enquiries and support requests.
  • To comply with legal and regulatory obligations (e.g. tax record-keeping, certified translation requirements).
  • To improve the quality and scope of our services based on project feedback.
We will never: use your data for advertising, sell it to third parties, include it in mailing lists without your explicit consent, or use it to train AI or machine learning models.
04

How We Store and Protect Your Data

We take security seriously. Project files often contain sensitive business, legal, or personal information — and we treat them accordingly. All data is handled with the same rigour we would apply to our own confidential information.

  • Files transferred and stored using AES-256 encrypted cloud storage (AWS and Google Cloud).
  • All email communications transmitted via TLS encryption.
  • Access restricted to team members directly involved in your project.
  • Project files are retained for 90 days after delivery to allow for revision requests, then permanently deleted.
  • Earlier deletion is available on request — we will confirm deletion in writing.
  • Payment processing handled exclusively by Stripe and PayPal, both PCI-DSS certified.
NDA standard: Every project begins with a signed NDA before any files are shared. This is not optional — it is our default. Data protection and confidentiality are structurally built into our process.
05

Who We Share Your Data With

We do not sell, rent, lease, or trade your personal data to any third party. Full stop.

The only circumstances in which your data is processed by another party are:

  • Payment processors (Stripe, PayPal): receive only the payment information necessary to process your transaction, governed by their own privacy policies.
  • Cloud infrastructure providers: store encrypted files on our behalf under data processing agreements.
  • Vetted translators or researchers (for large-volume projects): sign their own NDA before accessing any project files. We disclose this in advance.
  • Legal obligation: if compelled by law, court order, or regulatory authority, we will notify you wherever legally permitted before disclosing.
No advertisers. No data brokers. No analytics platforms with cross-site tracking. No exceptions.
06

Your Rights (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, you have the following rights under GDPR and UK GDPR. We will respond to all requests within 30 days.

Access
Request a copy of the personal data we hold about you.
Rectification
Correct any inaccurate or incomplete personal data.
Erasure
Request deletion of your personal data ("right to be forgotten").
Portability
Receive your data in a structured, machine-readable format.
Object
Object to processing based on legitimate interests.
Withdraw consent
Withdraw any consent given at any time, without affecting prior processing.

To exercise any of these rights, email privacy@swahilibridge.com. If you are not satisfied with our response, you have the right to lodge a complaint with your national data protection authority (e.g. ICO in the UK, or your country's supervisory authority).

07

Cookies

This website uses a minimal, privacy-first approach to cookies. We do not use advertising cookies, cross-site tracking, or third-party marketing pixels.

  • Strictly necessary cookies: used for website function (form submissions, session continuity). These cannot be opted out of without disabling basic site functionality.
  • Analytics cookies: anonymised visit data to understand which content is most useful. No personally identifiable information is collected. No cross-site tracking.
  • No advertising cookies. No retargeting. No social media tracking pixels.
You can manage or disable non-essential cookies through your browser settings at any time. Disabling strictly necessary cookies may affect website functionality. See our Cookie Policy for the full list.
08

Privacy Contact

For any questions about this Privacy Policy, requests to exercise your rights, or concerns about how your data is handled, contact us directly:

Response time
Within 2 business hours (Tanzania time)
GDPR requests
Responded to within 30 days
Last updated
January 2026

This policy may be updated periodically. Material changes will be communicated to active clients by email. The "Last updated" date at the top of this page reflects the most recent revision.