Last updated: 8 October 2026
One Crystal Company Limited respects your privacy and is committed to protecting personal data entrusted to us.
This Privacy Policy explains how One Crystal collects, uses, stores, protects and discloses personal information when you visit www.onecrystal.co.tz, communicate with us or use our services.
Our approach is based on the principles of lawful, fair and transparent processing, purpose limitation, data minimisation, accuracy, appropriate retention and security reflected in Tanzania's personal-data protection framework.
1. Who We Are
For the purposes of this Privacy Policy, "One Crystal", "we", "our" and "us" refer to One Crystal Company Limited.
Depending on the particular service, One Crystal may determine how and why personal data is processed or may process information on behalf of a client.
2. Scope of This Policy
This Privacy Policy applies to personal information collected through:
- our website;
- enquiries;
- service applications;
- client onboarding;
- quotations;
- consultations;
- email communications;
- project engagements;
- regulatory facilitation;
- payments;
- customer support; and
- other interactions with One Crystal.
3. Personal Data We May Collect
Depending on the service or interaction, we may collect:
Identity Information
This may include:
- name;
- date of birth;
- nationality;
- gender where relevant;
- national identification information;
- passport information;
- signature;
- photograph where necessary; and
- other identification information.
Contact Information
This may include:
- email address;
- telephone number;
- postal address;
- physical address; and
- other contact details.
Business and Corporate Information
This may include:
- company name;
- business name;
- registration information;
- directors;
- shareholders;
- beneficial owners;
- company secretary information;
- shareholding details;
- registered office information;
- business activities;
- licences;
- tax-related business information; and
- supporting corporate records.
Financial and Transaction Information
This may include:
- invoices;
- transaction references;
- proof of payment;
- payment status;
- bank or mobile-payment details where necessary; and
- information required for accounting and reconciliation.
We do not intend to retain payment-card information unless necessary and lawfully processed through an appropriate service provider.
Intellectual Property Information
This may include:
- trademarks;
- brand names;
- logos;
- inventions;
- designs;
- specifications;
- creative works;
- classifications;
- ownership information; and
- filing instructions.
Project Information
Technology, creative and consultancy projects may involve:
- specifications;
- files;
- source materials;
- images;
- documents;
- technical information;
- business information; and
- project communications.
Communication Information
We may retain communications such as:
- emails;
- enquiry forms;
- client instructions;
- support requests;
- complaints;
- approvals; and
- other business correspondence.
Testimonial Information
Where you submit a testimonial, we may collect your name, role, organisation, rating, statement, verification contact information and an optional photograph or company logo. Verification contact information is not intended for public display. Approved testimonial content may be published with your permission and remains subject to administrative review.
Technical and Website Information
When you use our website, certain technical information may be processed, including:
- IP address;
- device type;
- browser type;
- operating system;
- pages viewed;
- date and time of access;
- website interactions;
- referring source; and
- cookie-related identifiers.
4. How We Collect Information
We may collect personal information:
- directly from you;
- through website forms;
- through email or other communications;
- when you engage our services;
- from documents you provide;
- from an authorised representative;
- from publicly available records;
- from official or regulatory databases where access is lawful;
- from service providers; or
- automatically through website technologies.
5. Purposes of Processing
We may process personal information to:
- respond to enquiries;
- identify and communicate with clients;
- prepare quotations and proposals;
- provide requested services;
- verify information or documents;
- prepare regulatory applications;
- submit authorised applications and filings;
- conduct intellectual property searches;
- provide business and compliance services;
- develop technology products;
- deliver creative projects;
- issue invoices;
- reconcile payments;
- maintain records;
- provide customer support;
- fulfil contractual obligations;
- comply with legal obligations;
- prevent fraud;
- protect our systems;
- resolve disputes;
- establish or defend legal claims;
- improve our services; and
- manage our website.
We may also review, verify and, where permission has been given, publish testimonial content submitted through the website.
We will not intentionally use personal information for purposes incompatible with the purpose for which it was lawfully obtained without an appropriate legal basis.
6. Basis for Processing
One Crystal will process personal data only where there is an appropriate basis under applicable law.
Depending on the circumstances, this may include:
- your consent;
- steps necessary to enter into an engagement with you;
- performance of a contractual obligation;
- compliance with a legal or regulatory obligation;
- protection of legitimate business interests consistent with applicable law;
- establishment, exercise or defence of legal rights; or
- another legally permitted basis.
Where consent is the basis of processing, you may withdraw that consent, subject to applicable law and any processing already lawfully carried out.
7. Data Minimisation
We aim to collect only information reasonably necessary for the purpose concerned.
For example, where a regulatory service requires identification documents, we may collect those documents because they are necessary for that engagement.
We do not seek to collect excessive personal information unrelated to the service requested.
8. Accuracy
We take reasonable steps to maintain accurate records.
Clients are requested to notify us where information supplied to One Crystal becomes inaccurate, incomplete or outdated.
9. Sensitive Personal Data
Certain services may require information that is regarded as sensitive under applicable law.
Where such information is required, One Crystal will seek to ensure that:
- there is a lawful reason for processing it;
- access is limited appropriately;
- it is used only for the relevant purpose; and
- reasonable safeguards are applied.
10. Sharing Personal Information
We may share personal information where reasonably necessary with:
- government authorities;
- regulatory bodies;
- registries;
- intellectual property offices;
- tax authorities;
- local government authorities;
- banks or payment providers;
- technology and hosting providers;
- professional advisers;
- contractors;
- couriers;
- printers or production providers; and
- other service providers involved in fulfilling the engagement.
We seek to disclose only information reasonably necessary for the relevant purpose.
11. Disclosure Required by Law
Personal information may be disclosed where reasonably required by:
- applicable law;
- a lawful government request;
- a regulatory requirement;
- a court order;
- an investigation;
- enforcement of legal rights; or
- another legally authorised process.
12. International Processing and Transfers
Some technology or service providers used by One Crystal may operate infrastructure outside Tanzania.
Where personal information is transferred or processed outside the country, One Crystal will seek to ensure that the transfer is carried out in accordance with applicable personal-data protection requirements and subject to appropriate safeguards.
We will not treat international transfer as unrestricted merely because a third-party technology service is available.
13. Data Security
We take reasonable technical and organisational measures appropriate to the information we process.
These may include:
- access controls;
- password protection;
- secure authentication;
- controlled user permissions;
- secure storage;
- encryption where appropriate;
- backups;
- security updates;
- confidentiality requirements;
- restricted document access; and
- appropriate technical monitoring.
No internet-based or electronic system can be guaranteed to be completely secure.
14. Data Retention
One Crystal retains personal information only for as long as reasonably necessary for the purpose for which it was collected or for legitimate legal, regulatory, accounting, contractual or business requirements.
Retention may depend on:
- the type of service;
- applicable legal requirements;
- regulatory record-keeping requirements;
- the existence of an active engagement;
- dispute or claims considerations; and
- legitimate business-record requirements.
When information is no longer reasonably required, we may securely delete, destroy, anonymise or otherwise dispose of it in an appropriate manner.
15. Your Rights
Subject to applicable law and relevant exemptions, you may have rights concerning your personal data, including the right to:
- request information about how your data is processed;
- request access to your personal data;
- request correction of inaccurate or incomplete information;
- request deletion where legally appropriate;
- object to certain processing;
- request restriction of processing where appropriate;
- withdraw consent where processing depends on consent;
- object to certain direct marketing;
- raise concerns about processing; and
- lodge a complaint with the competent data-protection authority.
Tanzania's data-protection framework expressly establishes data-subject protections and gives the PDPC regulatory and complaint-handling functions.
16. Requests Concerning Personal Data
Privacy-related requests may be sent to:
Email: administration@onecrystal.co.tz
We may request reasonable information to verify the identity and authority of the person making the request.
17. Children
One Crystal's general website and professional services are primarily intended for adults and organisations.
We do not knowingly seek to collect children's personal data through the general website unless it is required for a lawful service and appropriate authority or consent requirements have been satisfied.
18. Direct Marketing
Where One Crystal sends promotional or marketing communications, recipients may request that such communications stop.
Opting out of marketing will not necessarily prevent One Crystal from sending communications necessary for an existing engagement, transaction, regulatory matter or contractual relationship.
One Crystal does not currently use the public website for automated decision-making, behavioural profiling or advertising-based tracking.
19. Cookies and Similar Technologies
The public website currently uses no analytics, advertising or marketing cookies. Strictly necessary authentication cookies are used only when authorised administrators access the protected content portal.
Further information is available in our Cookie Policy.
20. Third-Party Websites
Our website may contain links to external websites and platforms.
Once you leave One Crystal's website, the processing of information by the external service is governed by that provider's own policies.
We are not responsible for independent third-party privacy practices.
21. Personal Data Incidents
Where we become aware of a personal-data security incident, we will assess and respond to the incident in accordance with applicable law and our security procedures.
Where notification to affected individuals or a competent authority is legally required, we will take appropriate steps.
22. Complaints
If you have concerns about how One Crystal handles personal information, please contact us first so that we can investigate and respond.
You may also have the right to submit a complaint to the competent personal-data protection authority in Tanzania.
23. Changes to This Privacy Policy
One Crystal may revise this Privacy Policy when necessary to reflect changes in our services, systems, processing practices or legal obligations.
The current version will be published on this website.
24. Contact
One Crystal Company Limited
Jamhuri Street, Ilala
Dar es Salaam, Tanzania
Website: www.onecrystal.co.tz
Telephone: +255 686 700 805
Email: administration@onecrystal.co.tz