TANZANIA COMMERCIAL BANK PLC

WEBSITE PRIVACY NOTICE

1. Introduction

Welcome to Tanzania Commercial Bank PLC ("we," "our," or "us"). We are committed to protecting your personal data and ensuring that your personal information is handled in accordance with the Personal Data Protection Act, 2022, and its regulations.

This Privacy Notice explains how we collect, use, disclose, and protect your personal data when you visit our website: https://www.tcbbank.co.tzn

2. Data Protection Principles

In processing personal data, we shall be guided by the principles of data protection as captured in the Personal Data Protection Act, 2022 (“PDPA” / “the Act”).

We will ensure that your personal data is:

• Processed lawfully and in accordance with the Act;
• Collected for explicit, specified, and legitimate purposes;
• Adequately protected during processing;
• Adequate, relevant, and limited to what is necessary;
• Accurate and kept up to date;
• Stored only for as long as necessary;
• Processed in accordance with data subject rights;
• Not transferred abroad contrary to the Act.

3. Information We Collect

The personal data we may collect includes:

1. Personal details (name, date of birth, ID details);
2. Contact details (address, phone number, email);
3. Next-of-kin details;
4. Proof of income documents;
5. Security credentials and geographical locations;
6. Additional compliance-related information.

We may also process sensitive personal data where necessary and lawful, including biometric information, financial data, family details, and more.

4. Why and How We Collect Personal Information

We process your information for purposes such as:

• Providing banking and financial services;
• Fraud prevention and security;
• Regulatory compliance;
• Customer support and service improvements;
• Marketing and communications.

We may collect information when:

• You apply for products or services;
• You visit our branches;
• You use our website or mobile apps;
• You contact us through communication channels;
• You provide information directly to us.

5. Legal Basis for Processing

We process personal data based on:

• Consent;
• Contractual necessity;
• Legal obligations;
• Legitimate interests;
• Public interest.

6. How We Use Collected Personal Data

Legal Basis	Purpose
Contractual Necessity	Providing banking services, managing accounts, handling transactions, debt recovery, complaints handling, and customer communications.
Legitimate Interest	Fraud prevention, improving services, customer analysis, business development, legal claims, marketing updates, and monitoring communications.
Legal & Regulatory Obligations	Compliance with banking laws, AML regulations, fraud prevention, reporting obligations, and identity verification.
Consent	Marketing communications, biometric authentication, and other consent-based processing activities.

7. How We May Share Personal Data

We may share your information with third parties where necessary and lawful, including:

• TCB agents and branches;
• Financial institutions;
• Government and regulatory agencies;
• Credit reference bureaus;
• Fraud prevention agencies;
• Payment processing providers;
• Business partners and advisers;
• Insurance providers;
• Third-party service providers.

8. Disclosure of Personal Data

Personal data may be disclosed to provide requested services, comply with lawful obligations, conduct identity verification, prevent fraud, process payments, and support business operations.

9. Cross-border Data Transfers

We currently do not transfer personal data outside Tanzania. Should this change, transfers will only occur where adequate safeguards and legal permissions are in place.

10. Children’s Privacy

We may process children’s personal data where necessary and lawful, with consent obtained from parents or guardians as required under the law.

11. Where Personal Data May Be Held

Personal data may be stored in physical facilities and electronic systems. Appropriate security measures are implemented to protect your data.

12. Data Retention

We retain personal data only as long as necessary for business, legal, contractual, and regulatory purposes.

13. Your Rights as a Data Subject

• Right of access;
• Right to prevent certain processing;
• Right to object to direct marketing;
• Rights relating to automated decisions;
• Right to compensation;
• Right to rectification or erasure.

14. Security of Personal Data

We implement appropriate security measures including encryption and access controls to protect personal data.

15. Automated Decision-Making and Profiling

We currently do not use automated decision-making processes involving your personal data.

16. Access to Your Personal Data

You may request access to your personal data by contacting us using the contact information provided below.

17. Third-party Links

Our website does not contain links to third-party websites.

18. Cookies and Tracking Technologies

We use cookies and similar technologies to improve security, functionality, and user experience across our websites and applications.

19. How to Complain

If you have concerns regarding your personal data or privacy rights, please contact us:

Address:
Head Office 10th LAPF Towers,
Bagamoyo Road, Opp Makumbusho Village,
Kijitonyama, P.O BOX 9300,
Dar es Salaam.

Email: dpo@tcbbank.co.tz

20. Changes to this Privacy Notice

We may update this Privacy Notice from time to time. Any changes will be posted on this page together with an updated effective date.