01Who We Are
Asili Language Services ("ALS", "we", "us") operates this platform (the "Platform"), through which clients learn languages and order professional language services โ Translation, Interpretation, Editing & Proofreading, Multimedia, and Localization.
ALS, based in Dar es Salaam, Tanzania, is the data controller responsible for personal data processed as described in this policy. You can reach our privacy team at privacy@asililanguages.com.
We process personal data in accordance with the Personal Data Protection Act, 2022 of Tanzania and its regulations and, where applicable to users in other regions, with international frameworks such as the EU/UK General Data Protection Regulation (GDPR).
02Scope of This Policy
This policy applies to:
- Learners โ people enrolled in our language learning programs;
- Clients โ individuals and organizations ordering language services;
- Linguists and applicants โ translators, interpreters, editors, and instructors who work with us or apply to;
- Visitors โ anyone browsing the Platform or contacting us.
It does not cover third-party websites or services linked from the Platform, which have their own privacy policies.
03Data We Collect
3.1 Data you provide
| Category | Examples |
|---|---|
| Identity & contact | Name, email address, phone number, organization, country, postal address where needed for invoicing |
| Account | Username, password (stored hashed), profile preferences, language pairs of interest |
| Order & billing | Order details, quotes, invoices, payment status, transaction references (we do not store full card numbers or mobile-money PINs) |
| Learning | Course enrollments, attendance, assessments, progress, placement-test results, feedback |
| Client content | Documents, audio, video, and other Source Materials submitted for translation, interpretation, editing, multimedia, or localization work (see Section 6) |
| Linguist data | CVs, qualifications, certifications, language pairs, work samples, rates, bank or mobile-money details for payment, tax identifiers where required |
| Communications | Messages sent through the Platform, emails, support requests, survey responses |
3.2 Data collected automatically
- Device and log data: IP address, browser type, operating system, device identifiers, pages viewed, timestamps, referring URLs;
- Usage data: features used, session duration, error reports;
- Approximate location derived from IP address (country/city level);
- Cookies and similar technologies (see Section 12).
3.3 Data from third parties
Payment confirmation from payment processors; identity or qualification verification for Linguists; and, where you choose to sign in through a third-party account, the basic profile data that provider shares with us.
04How We Use Data
- To provide the Services โ creating and managing accounts, delivering courses, matching Orders with qualified Linguists, performing and delivering language work, and providing customer support;
- To process payments โ issuing quotes and invoices, collecting payment, paying Linguists, and keeping accounting records;
- To communicate with you โ service notices, order updates, lesson reminders, and responses to your enquiries;
- To improve the Platform โ analytics, quality assurance, testing, and development of new features and courses;
- To keep the Platform safe โ detecting and preventing fraud, abuse, and security incidents, and enforcing our Terms of Service;
- To comply with the law โ tax, accounting, and other legal obligations, and responding to lawful requests from authorities;
- Marketing, with your consent โ newsletters and offers about our courses and services (see Section 13).
05Legal Bases for Processing
We rely on the following legal bases, as recognized under the Tanzanian Personal Data Protection Act, 2022 and the GDPR where it applies:
- Contract โ processing necessary to perform our contract with you (accounts, courses, orders, delivery, payment);
- Legitimate interests โ running, securing, and improving the Platform, preventing fraud, and business administration, balanced against your rights;
- Consent โ marketing communications, non-essential cookies, and any processing of sensitive data contained in materials you choose to submit. You may withdraw consent at any time;
- Legal obligation โ record-keeping, tax, and responses to lawful requests.
06Client Content & Confidentiality
Source Materials submitted for language work may themselves contain personal data โ names in legal documents, voices in recordings, patient details in medical files. For that content:
- we process it only to perform the Order, acting on your instructions; where the material contains personal data about others, we act as a processor on your behalf and you are responsible for having the right to share it with us;
- access is restricted to the personnel and Linguists assigned to your project, all of whom are bound by confidentiality obligations;
- we do not use your Source Materials or Deliverables for advertising, and we do not sell them or their contents;
- translation memories and terminology databases we retain for quality and consistency are maintained in a form that minimizes identifying details wherever practicable;
- for regulated or highly sensitive projects, we can agree to enhanced handling: dedicated NDAs, restricted teams, and deletion of materials on completion.
Interpretation assignments are not recorded by ALS unless expressly agreed in the Order.
08International Transfers
Because our Linguists, clients, and service providers may be located in different countries, personal data may be transferred outside Tanzania (or outside your country of residence). When it is, we ensure appropriate safeguards, such as:
- transfers to countries recognized as providing adequate protection;
- contractual safeguards, including standard contractual clauses, with recipients;
- compliance with the cross-border transfer requirements of the Tanzanian Personal Data Protection Act, 2022, including any required permissions or notifications.
You may contact us for more information about the safeguards applied to a specific transfer.
09Data Retention
We keep personal data only as long as needed for the purposes described in this policy, then delete or anonymize it. Typical periods:
| Data | Retention |
|---|---|
| Account data | Life of the account, plus up to 12 months after closure |
| Orders, invoices & payment records | As required by tax and accounting law (typically 5โ7 years) |
| Client Source Materials & Deliverables | 12 months after project completion by default (to support revisions and follow-up work), or deleted earlier on request or per project agreement |
| Learning records | Duration of enrollment plus 24 months, so certificates and transcripts can be reissued |
| Support communications | Up to 24 months after resolution |
| Server logs | Up to 12 months |
We may keep data longer where required by law or to establish, exercise, or defend legal claims.
10Security
We apply technical and organizational measures appropriate to the risk, including:
- encryption of data in transit (TLS) and at rest for stored files;
- password hashing, access controls, and role-based permissions;
- confidentiality agreements with all staff and Linguists;
- logging, monitoring, backups, and tested recovery procedures;
- vendor due diligence and data-processing agreements with providers.
No system is completely secure. If a personal data breach occurs that is likely to result in a risk to your rights, we will notify the relevant supervisory authority and, where required, notify you without undue delay.
11Your Rights
Subject to applicable law, you have the right to:
- Access โ obtain a copy of the personal data we hold about you;
- Rectification โ correct inaccurate or incomplete data;
- Erasure โ request deletion of your data where there is no overriding reason to keep it;
- Restriction โ limit how we process your data in certain circumstances;
- Objection โ object to processing based on legitimate interests, and to direct marketing at any time;
- Portability โ receive data you provided in a structured, machine-readable format;
- Withdraw consent โ where processing is based on consent, without affecting processing before withdrawal.
To exercise any right, email privacy@asililanguages.com. We may need to verify your identity. We respond within the timeframe required by applicable law (generally within 30 days), free of charge except where requests are manifestly unfounded or excessive.
13Marketing Communications
We send marketing emails โ course announcements, offers, and language-learning tips โ only with your consent or where otherwise permitted by law for existing customers. Every marketing message includes an unsubscribe link, and you can opt out at any time from your account settings or by contacting us. Opting out does not affect service messages such as order confirmations and lesson reminders.
14Children's Privacy
The Platform is intended for users aged 18 and over. Learners under 18 may be enrolled only by a parent or legal guardian, who provides the required information and consents on the child's behalf. We collect only the minimum data needed to deliver the course to a minor learner, and we do not send marketing to minors. If you believe a child has provided us data without appropriate consent, contact us and we will delete it.
15Automated Decisions
We may use automated tools to suggest course levels from placement tests or to match Orders with suitable Linguists. These tools support, and do not replace, human decisions: no decision with legal or similarly significant effect on you is made solely by automated means. You may always request human review of any outcome that affects you.
16Changes to This Policy
We may update this policy to reflect changes in our practices, technology, or the law. The "Effective date" above shows the latest revision. For material changes, we will notify you by email or a prominent Platform notice before they take effect, and where required we will seek your consent.
17Contact & Complaints
Data Protection Contact โ Asili Language Services (ALS)
Dar es Salaam, Tanzania
Email: privacy@asililanguages.com
If you are not satisfied with our response, you may lodge a complaint with the Personal Data Protection Commission (PDPC) of Tanzania or, where the GDPR applies to you, with your local data protection authority.
For questions about our services and contractual terms, see the Terms of Service.