Privacy Policy

Last updated: 2026-08-27

This Privacy Policy explains how VITASPHERE ONLINE (“we”, “us”, “our”) collects, uses, shares and protects your personal data when you visit https://vitasphereonline.com, create an account, or place an Order. We are the data controller and handle your data in line with the Personal Data Protection Act, 2022 of the United Republic of Tanzania and its Regulations.

Contact for privacy matters: admin@vitasphereonline.com, or write to Plot 15, Block 15, House No. 15, Mabatini Road, Kijitonyama Ward, Kinondoni District, Dar es Salaam 14113, Tanzania.

1. The data we collect

Identity and contact data – name, phone number, email address, delivery and billing address.
Account data – username and password (stored encrypted), order history, saved addresses.
Order and transaction data – items ordered, amounts, delivery details, payment method used, and the payment confirmation received from our payment provider. We do not collect or store your mobile-money PIN, full card number or bank login.
Communications – messages you send us by email, WhatsApp, contact form or product review.
Technical and usage data – IP address, device and browser type, pages viewed, collected automatically through cookies and analytics.
Marketing preferences – whether you have agreed to receive offers from us.

2. How we collect it

Directly from you when you register, order or contact us; automatically through cookies and analytics when you use the Website; and from our payment provider (AzamPay) when it confirms whether a payment succeeded.

3. Why we use your data and our lawful basis

To process and deliver your Orders and provide support – to perform our contract with you.
To manage your account and keep records required by law (tax, accounting) – contract and legal obligation.
To prevent fraud and keep the Website secure – our legitimate interest and legal obligation.
To improve the Website – our legitimate interest, using analytics.
To send you marketing (offers, new products, abandoned-cart reminders) – only with your consent, which you can withdraw at any time.

4. Payment data

Payments are processed by AzamPay and, for bank transfers, by your bank. You enter your mobile-money or banking details with the payment provider, not with us. We receive only a confirmation of whether the payment succeeded, the amount, and a transaction reference.

5. Cookies and analytics

We use cookies and similar technologies for essential Website and checkout function (WooCommerce), caching and performance (LiteSpeed), the WhatsApp chat button (Joinchat), and analytics (Google Analytics 4 via Google Site Kit). Non-essential cookies are only set where you have given consent through our cookie banner. You can also control cookies in your browser; blocking essential cookies may stop the checkout working.

6. Marketing communications

If you have opted in, we may send you emails about offers, new arrivals, and reminders about items left in your cart. Every marketing message has an unsubscribe link, and you can opt out any time by contacting us. We will still send essential messages about your Orders and account.

7. Who we share your data with

Delivery partners and riders – your name, address and phone number, to deliver your Order.
Payment providers – AzamPay and, where relevant, banks, to process and reconcile payments.
Technology providers – our web host and Google (Analytics / Site Kit and Google Fonts).
Fulfilment partners – for VMAX365 Orders, the VMAX365 Shamo Tower outlet, so drinks can be prepared and handed over.
Authorities and advisers – where required by law, to enforce our rights, or to prevent fraud.

We do not sell your personal data.

8. International transfers

Some service providers (for example Google) process data on servers outside Tanzania. Where this happens, we take reasonable steps to ensure your data remains protected to a standard consistent with the Personal Data Protection Act, 2022.

9. How long we keep your data

We keep Order and transaction records for as long as required by Tanzanian tax and accounting law. Account data is kept while your account is active. Marketing data is kept until you opt out. We then delete or anonymise data we no longer need.

10. Security

We use HTTPS encryption, access controls, and reputable hosting and payment partners. No online service is completely secure, but we work to protect your information and to notify you and the authorities of any serious breach as required by law.

11. Your rights

Under the Personal Data Protection Act, 2022 you have the right to be informed about how we use your data; to access the data we hold; to correct inaccurate data; to ask us to delete data where there is no lawful reason to keep it; to object to or restrict certain processing; to withdraw consent to marketing; and to lodge a complaint with the Personal Data Protection Commission of Tanzania. To exercise any right, contact admin@vitasphereonline.com.

12. Children

The Website is intended for people aged 18 and over. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.

13. Third-party links

The Website may link to other sites (for example Norland or VMAX365 platforms). We are not responsible for their privacy practices; please read their policies.

14. Changes to this policy

We may update this policy from time to time. The current version is always published here with its “last updated” date.

This document is provided in good faith for the operation of this store. It is not legal advice. We recommend it is reviewed by a qualified Tanzanian legal practitioner before final publication.