Privacy policy

Last updated: 12 September 2026 · Draft for legal review

This policy explains what personal information Lumira collects when you use this website or join our WhatsApp messages, why we collect it, and the choices you have. We collect as little as we can, and we never sell your information.

Who we are

Lumira is a maternal and child health information service, part of CFE Group. For this policy, the data controller is [REVIEW WITH A LAWYER: full registered name, registration number and postal address of the controlling entity]. You can contact us at hello@lumira.co.tz.

What we collect

When you join on WhatsApp

  • your WhatsApp number (required)
  • your first name and the stage of your journey, if you choose to give them
  • the language of the page you signed up on, where on the site you signed up, and your consent to receive messages

Telling us your stage (for example, that you are pregnant) is information about your health. We only use it to choose which messages to send you, and you do not have to give it.

When you contact us

Your name, email address, phone number if you give one, the type of enquiry, and your message. Please do not send us medical details — we cannot give personal medical advice.

When you browse

  • Our hosting provider keeps short-term server logs (such as IP address, browser type and the pages requested) to keep the site secure and working.
  • We do not use advertising or tracking cookies. If we add visitor statistics, we will use a privacy-friendly tool that does not use cookies or collect personal information, and we will update this policy.
  • Videos and podcasts do not load from YouTube or Spotify until you press play. When you do, those companies receive information about your visit under their own privacy policies.

Why we use it

  • To send you WhatsApp messages you asked for — based on your consent, which you can withdraw at any time.
  • To reply to your enquiry — because you asked us to.
  • To keep the site secure and improve it — using logs and anonymous statistics only.

[REVIEW WITH A LAWYER: confirm lawful bases and wording under the Personal Data Protection Act, 2022 of Tanzania, and whether registration with the Personal Data Protection Commission is required]

Who we share it with

We share information only with service providers who help us run Lumira, and only as much as they need:

  • Netlify — hosts this website and stores form submissions.
  • WhatsApp (Meta) and any WhatsApp messaging provider we use — to deliver messages to you.
  • Email and office tools we use to read and answer enquiries.

Some of these providers store data outside Tanzania, including in the United States and the European Union. [REVIEW WITH A LAWYER: cross-border transfer conditions and safeguards required under the PDPA 2022]

We will share information with authorities only where the law requires it.

How long we keep it

  • WhatsApp signup details: while you are subscribed, and deleted within 30 days after you unsubscribe.
  • Contact messages: up to 24 months, then deleted, unless an ongoing partnership needs them.
  • Server logs: kept by our host for a short period, typically no more than 30 days.

[REVIEW WITH A LAWYER: retention periods]

Your rights

You can ask us at any time to:

  • tell you what information we hold about you, and give you a copy
  • correct information that is wrong
  • delete your information
  • stop sending you messages — reply STOP on WhatsApp, or email us

Email hello@lumira.co.tz and we will reply within 30 days. If you are unhappy with how we have handled your information, you may complain to the Personal Data Protection Commission of Tanzania. [REVIEW WITH A LAWYER: Commission contact details and response timeframe]

Children

Lumira is written for parents and caregivers. We do not knowingly collect information from children. [REVIEW WITH A LAWYER: age threshold for consent under Tanzanian law]

Keeping it safe

We use providers with strong security, limit who on our team can see personal information, and send all traffic over encrypted connections (HTTPS). No system is perfectly secure, but we take care and will tell you and the authorities if a serious breach affects your information, as the law requires.

Changes to this policy

If we change how we use your information, we will update this page and the date above. For significant changes, we will tell WhatsApp subscribers directly.

See also our terms of use and medical disclaimer.