Privacy Policy

Leen Auto Spares

Effective Date: 23 February 2026

Last Updated: 23 February 2026

PLEASE READ THIS PRIVACY POLICY CAREFULLY.

This Privacy Policy explains how Leen Auto Spares (“Company,” “we,” “us,” “our”) collects, uses, stores, shares, and protects personal data when you access, browse, create an account on, or purchase from the Leen Auto Spares e-commerce Platform (the “Platform”).

This Privacy Policy forms part of the agreement between you (“Customer,” “you,” “your”) and Leen Auto Spares, together with our Terms and Conditions and Return & Cancellation Policy.

We aim to process personal data in compliance with applicable laws of the United Republic of Tanzania, including the Personal Data Protection Act, 2022 (PDPA) and related regulations. Tanzania’s PDPA establishes minimum requirements for collection and processing of personal data and is administered by the Personal Data Protection Commission (PDPC).

1. Definitions

For the purpose of this Privacy Policy:

“Personal Data” means information that identifies or can reasonably identify an individual.
“Processing” means any operation performed on personal data, including collection, recording, storage, use, sharing, updating, or deletion.
“Account” means a registered user profile on the Platform.
“Platform” means the Leen Auto Spares website/app and related services.
“Products” means auto parts/spares and related items listed on the Platform.
“Order” means a request submitted by you to purchase Products.

2. Who This Policy Applies To

This Policy applies to personal data collected from:

website/app visitors;
customers creating accounts;
customers placing orders;
persons contacting us for support, quotations, or inquiries;
business clients (where applicable).

3. Personal Data We Collect

3.1 Information You Provide to Us

We may collect personal data that you provide directly, including:

Full name
Phone number
Email address
Delivery/collection address
Billing details (where applicable)
Account login details (username/email and password)
Vehicle/product compatibility information you submit (e.g., model, year, engine details)
Communications with us (customer support messages, inquiries, complaints)
Order history and preferences

3.2 Information Collected During Orders and Payments

When you place an Order, we may collect:

Ordered Products and quantities
Transaction reference numbers
Payment status
Delivery instructions
Invoice/receipt information

Important: Payment processing may be handled by third-party payment providers (e.g., Mobile Money, banks, card processors). We generally do not store full card details when payments are processed through third-party gateways.

3.3 Information Collected Automatically (Website/App Usage)

When you use the Platform, we may automatically collect technical and usage information such as:

IP address
Browser type and version
Device type / operating system
Pages viewed and time spent
Referral source (where you came from)
Date/time of visits
Basic diagnostic and error logs

3.4 Cookies and Similar Technologies

We may use cookies and similar technologies for:

essential Platform functionality (e.g., login sessions, cart persistence);
security and fraud prevention;
remembering preferences;
analytics and performance improvement.

You may manage cookies through your browser settings, but disabling essential cookies may affect Platform functionality.

4. How We Use Your Personal Data

We may use your personal data for the following purposes:

4.1 To Provide the Platform and Our Services

create and manage your Account;
process Orders and payments;
arrange delivery, shipping, or collection;
provide invoices, receipts, and order updates.

4.2 Customer Support and Communications

respond to inquiries and complaints;
provide fitment/compatibility assistance (where requested);
communicate about returns, refunds, exchanges, or warranty matters.

4.3 Platform Operations and Improvement

monitor and improve Platform performance and usability;
analyse product demand and customer behaviour (in aggregated form where possible);
troubleshoot technical issues.

4.4 Security, Fraud Prevention, and Compliance

verify transactions;
prevent unauthorized access, fraud, and abuse;
comply with legal obligations, lawful requests, and dispute handling.

4.5 Marketing and Promotions (Where Applicable)

send promotional messages or offers (email/SMS/WhatsApp) where permitted by law or with your consent where required;
manage your communication preferences and opt-out requests.

You may opt out of marketing communications at any time.

5. Legal Basis / Grounds for Processing (Where Applicable)

We process personal data only where there is a valid basis to do so, including where processing is necessary to:

perform our contract with you (e.g., fulfil Orders, delivery, returns);
comply with legal or regulatory obligations;
protect legitimate business interests (e.g., fraud prevention, security, service improvement), provided your rights are respected;
act on your consent (e.g., certain marketing communications or optional cookies), where required.

6. Sharing and Disclosure of Personal Data

We do not sell your personal data.

We may share personal data only where necessary and lawful, including with:

6.1 Service Providers / Data Processors

Third parties that help us operate the Platform and services, such as:

hosting/infrastructure providers,
payment processors,
delivery/courier services,
messaging/notification services (SMS/email),
analytics providers,
customer support tools.

These parties are expected to process data only for authorized purposes and with appropriate safeguards.

6.2 Professional and Legal Advisors

Where reasonably necessary, we may share data with lawyers, auditors, insurers, or consultants.

6.3 Authorities and Law Enforcement

We may disclose personal data where required by law, court order, lawful request, or to protect our rights, customers, staff, or the public.

6.4 Business Transfers

If Leen Auto Spares undergoes reorganization, sale, merger, or transfer of assets, personal data may be transferred as part of that transaction, subject to applicable law.

7. International / Cross-Border Data Transfers

Some service providers may store or process data outside Tanzania. Where cross-border transfer occurs, we will aim to ensure that:

the transfer is lawful under applicable Tanzanian data protection rules;
appropriate safeguards are in place; and
personal data remains protected to a standard reasonably consistent with this Policy and applicable law.

8. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Policy, including:

maintaining your Account;
processing Orders and after-sales support;
handling returns, refunds, exchanges, and warranties;
tax, accounting, audit, and legal compliance;
resolving disputes and enforcing agreements.

When personal data is no longer required, we will delete, anonymize, or securely dispose of it, unless continued retention is required by law.

9. Data Security

We take reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. These may include:

access controls and password protection;
secure hosting and system monitoring;
limited access by authorized personnel;
backups and operational security measures;
vendor/processor controls where applicable.

However, no internet-based system is completely secure, and we cannot guarantee absolute security.

10. Your Rights (Subject to Applicable Law)

Depending on applicable law and circumstances, you may have the right to:

request access to your personal data;
request correction of inaccurate or incomplete data;
request deletion of personal data (where lawful);
object to or restrict certain processing;
withdraw consent (where processing is based on consent);
request information about how your personal data is processed;
lodge a complaint with the relevant authority, including the PDPC, where applicable. (pdpc.go.tz)

To exercise your rights, contact us using the details in Section 14.

We may request verification of identity before processing your request.

11. Children’s Privacy

The Platform is intended for users who are legally capable of entering into a binding contract under Tanzanian law. We do not knowingly collect personal data from children without lawful authority/consent where required.

If you believe we have collected personal data from a child improperly, please contact us so we can review and take appropriate action.

12. Third-Party Links and Services

The Platform may contain links to third-party websites or services (e.g., payment providers, courier tracking links, social media pages). We are not responsible for the privacy practices of third parties. We encourage you to review their privacy policies before providing personal data.

13. Cookies and Analytics Notice

We may use analytics tools (such as website traffic analytics) to understand how visitors use the Platform and improve performance. These tools may collect non-identifying or aggregated information and, in some cases, technical identifiers.

You can control cookies through your browser settings, but blocking essential cookies may reduce Platform functionality.

14. Contact Us (Privacy Requests / Questions)

If you have questions about this Privacy Policy or want to make a privacy request, contact: