Last Updated: April 8, 2026

This Privacy Policy describes how Bridging Technologies Limited ("Company", "we", "us", or "our") collects, protects, uses, and strictly safeguards your personal and financial information when you use the Blox real estate and payment platform ("Services"), accessible via https://www.blox.co.tzhttps://www.blox.co.tz.

OUR CORE COMMITMENT TO YOU: Real estate and financial transactions require absolute trust. We do not, and will never, sell, rent, trade, or share your personal or financial data with third-party marketers, advertisers, or data brokers. Your data is yours.

If you have any questions or concerns regarding this policy, please contact us at hello@blox.co.tz.

1. WHAT INFORMATION DO WE COLLECT?

We only collect information that is strictly necessary to provide our services, facilitate your property transactions, and comply with financial regulations.

• Personal Identification Information: Names, phone numbers, email addresses, physical addresses, and government-issued IDs (e.g., NIDA) required for KYC (Know Your Customer) compliance.

• Financial Data: Bank account numbers, mobile money numbers, payment references, and transaction histories necessary to process rent, mortgages, and settlements.

• Property Data: Lease agreements, property details, and utility meter numbers (e.g., LUKU) managed within the platform.

• Account Security Data: Passwords (securely hashed), IP addresses, and device information used solely for fraud prevention and account security.

2. HOW DO WE PROCESS YOUR INFORMATION?

We process your information exclusively to operate the Blox platform. Specifically, we use your data to:

• Facilitate rent collection, mortgage payments, and property settlements.

• Generate accurate financial invoices and receipts.

• Communicate with you regarding your account, pending payments, or system updates.

• Prevent fraudulent activities and unauthorised access to your account.

3. OUR STRICT "NO DATA SELLING" GUARANTEE

Bridging Technologies Limited operates under a strict data-isolation model. We absolutely do not sell, rent, or trade your data. We only share specific, limited data in the following two operational scenarios:

A. Essential Service Providers (Financial Institutions) To process your money, we must transmit specific transactional data (such as account numbers and payment amounts) to our authorised banking and mobile money partners (e.g., CRDB Bank or telecom operators). These partners are bound by strict banking confidentiality agreements and only receive the exact data points required to execute the financial transaction.

B. Legal Compliance and Law Enforcement (Tanzanian Law) We will only disclose your personal or financial information to external entities if we are compelled to do so by a valid, legally binding directive. This includes:

• A valid subpoena, search warrant, or court order issued by a competent court of law within the United Republic of Tanzania.

• Directives from recognised Tanzanian financial regulatory authorities (such as the Bank of Tanzania or the Financial Intelligence Unit) investigating suspected money laundering, fraud, or terrorism financing.

4. COMPLIANCE WITH TANZANIAN LAW

Your data is processed and protected in strict adherence to the laws of the United Republic of Tanzania, specifically:

• The Personal Data Protection Act (PDPA): You have the right to know how your data is used, to access it, and to ensure its accuracy.

• Bank of Tanzania (BOT) Regulations: As a platform handling financial settlements, our data retention and encryption practices meet or exceed the standards required for financial technology operators in Tanzania.

5. HOW DO WE KEEP YOUR INFORMATION SAFE?

We implement bank-grade organisational and technical security measures to protect your data. This includes:

• Encryption: All communication between your device and our servers is secured via SSL/TLS encryption. Sensitive data (like passwords) is irreversibly hashed.

• Secure Infrastructure: Our servers operate within secure, restricted environments, utilising virtual private networks (VPNs) for direct banking integrations to prevent interception.

• Access Control: Only authorised Bridging Technologies Limited personnel with a strict "need-to-know" clearance can access backend systems, and all access is heavily logged and audited.

6. HOW LONG DO WE KEEP YOUR INFORMATION?

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this policy or as required by Tanzanian law. Because Blox processes financial transactions, we are legally required to retain certain transactional records and KYC data for a minimum statutory period (typically up to 10 years) for tax and anti-money laundering auditing purposes, even if you close your account.

7. COOKIES AND TRACKING TECHNOLOGIES

We use essential cookies strictly to keep you logged in, maintain your session security, and ensure the platform functions correctly. We do not use third-party tracking cookies to monitor your browsing behavior across other websites for targeted advertising.

8. DO WE COLLECT INFORMATION FROM MINORS?

We do not knowingly collect data from or market to children under 18 years of age. Blox is a platform for adults engaging in legally binding real estate and financial contracts. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records.

9. YOUR PRIVACY RIGHTS

Under the Tanzanian Personal Data Protection Act, you possess the right to:

• Access: Request a copy of the personal data we hold about you.

• Correction: Request that we correct any inaccurate or incomplete data.

• Deletion: Request the deletion of your account and personal data (subject to the financial data retention laws mentioned in Section 6).

To exercise these rights, please log into your Blox account settings at or contact us directly.

10. UPDATES TO THIS NOTICE

We may update this privacy notice from time to time to reflect changes in Tanzanian law or our operational practices. The updated version will be indicated by an updated "Last Updated" date at the top of this document. We encourage you to review this notice frequently.

11. CONTACT US

If you have questions, concerns, or requests regarding your privacy and data security, please contact our Data Protection Officer at:

Bridging Technologies Limited, House #80, Plot 711, Ghuba Road, Msasani

Dar es Salaam, Kinondoni 14111

Tanzania

Email: hello@blox.co.tz