Privacy policy

CITADEL Tanzania Limited (“CITADEL”, “we”, “us”) operates this job portal. We are the data controller for the personal data described here, which means we decide what is collected and why.

• Registered company number: to be confirmed
• Registered address: to be confirmed
• Data protection officer: to be confirmed — privacy@citadel.tz
• Registration with the Personal Data Protection Commission: to be confirmed

We collect personal data directly from you, as section 23 of the Act requires.

If you are looking for work

• Your name, email address and, if you give it, your phone number.
• Your professional profile: the role you want, a headline and summary you write yourself, your skills, years of experience, your region, your salary expectation and how you prefer to work.
• Your employment and education history, if you add it.
• The CV files you upload.
• Your applications, the answers you give to an employer's screening questions, interview times you choose, jobs you save and searches you turn into alerts.
• Your language preference, so we write to you in English or Kiswahili.

If you are an employer or a recruitment agency

• Your name, work email and phone number.
• Your company's details, and the registration documents you submit to be verified.
• Your job adverts, your notes and ratings on applicants, and your billing history.

Everyone

• Basic records of use — when you signed in, when a job advert was viewed — kept so the product works and so we can spot abuse.
• Messages you send us.

We do not ask for your gender, date of birth, marital status, religion, ethnicity, national identity number or a photograph, and there is nowhere on this site to enter them. We do not use advertising or tracking analytics.

Section 5 of the Act requires that data is collected for explicit, specified and legitimate purposes, and used only for those purposes. Ours are:

• To run your account and let you sign in.
• To let you apply for jobs, and to let the employer you applied to consider your application.
• To let employers advertise roles, and to review those adverts before they go live.
• To let employers find candidates who have chosen to be discoverable.
• To email you about your own activity — an application's progress, an interview time, an alert you asked for.
• To take payment from employers for credits, and to keep the accounting records the law requires.
• To keep the platform safe: checking uploaded files, investigating misuse, and verifying that employers are real businesses.

We will not use your data for a new and unrelated purpose without asking you first, except where section 25 of the Act permits it — for example where the law requires it.

The Act treats some data as sensitive and, under section 30, it may not be processed without your prior written consent. In Tanzania that category is wider than many people expect: it includes gender, health, religious or political beliefs, trade union membership, ethnic origin, an individual’s financial transactions, and data relating to children.

We have designed this site so that we do not ask you for any of it. There is no field for gender, health, religion or ethnicity anywhere on CITADEL.

Section 26 of the Act forbids disclosing personal data except for the purpose it was collected for. We share your data in exactly these situations:

• The employer you apply to. When you apply for a job, that employer sees your name, contact details, CV and your answers to their questions. A recruitment agency appointed by that employer may see the same, acting on their behalf.
• An employer who unlocks your profile — only if you turned on discoverability. See section 6 below.
• Companies that run parts of the service for us. These are data processors, bound by contract to act only on our instructions, as section 27(4) requires: our hosting and database provider (Supabase), our email provider (Resend), and our payment provider (Selcom) when card or mobile-money payment goes live.
• Authorities, where a written law or a court order requires it.

We do not sell personal data, we do not share it with advertisers, and we do not pass your details to employers who have not either received an application from you or paid to unlock a profile you chose to publish.

Employers can search a directory of candidates. This is the part of CITADEL that most affects your privacy, so it works on these rules:

• You are not in it unless you opt in. Discoverability is off by default. Nobody appears until they switch it on, and switching it off removes you.
• What is free to see: your name, the role you are looking for, your own headline and summary, your skills, region, years of experience, salary expectation and preferred way of working. All of it is written by you.
• What costs the employer a credit: your CV file and your email address and phone number. It is free to them only if you have already applied to that employer.
• We never show your current employer on the free listing. If you are job-hunting quietly, browsing employers cannot see where you work now.
• You can see who unlocked you. A record is kept of every employer who paid for your details, and you are entitled to that list.

An employer who unlocks your details may use them to contact you about work. Using them for marketing, or passing them to anyone else, is a breach of our terms and of section 25 of the Act. Tell us if it happens.

Part V of the Act governs sending personal data outside Tanzania. We are telling you plainly: your data is stored outside Tanzania.

• Our database and uploaded files are hosted by Supabase in a data centre in Frankfurt, Germany.
• Our emails are sent through Resend.

Germany is subject to the European Union’s General Data Protection Regulation, which the Act’s section 32 test recognises as an adequate level of protection. We use these providers so that your data sits behind stronger security than we could operate ourselves, they process it only on our instructions and only for the purposes described in this policy, and we have assessed that transfer as necessary for the service to work.

Section 27 of the Act requires security appropriate to the risk. What we actually do:

• Access is enforced by the database itself, not merely hidden in the screens. Every table carries rules stating who may read or change each row, so an employer cannot reach another employer's applicants even by going around the website.
• CV files sit in private storage. They are never on a public address. An employer opens one through a link that expires after fifteen minutes.
• Uploaded files are checked before an employer can open them. A file that has not passed that check cannot be opened at all.
• Passwords are stored only as an irreversible hash. Nobody at CITADEL can read your password.
• Payment card details are handled by the payment provider and never reach our servers.

If a security breach affects your personal data we will notify the Personal Data Protection Commission without undue delay, as section 27(5) requires, and we will tell you where the breach is likely to affect you.

Section 5(e) of the Act says data must not be kept in a form that identifies you for longer than the purpose needs. In practice:

• Your account and profile: while your account is open. Close it and we delete or anonymise it, except where the law requires us to keep something.
• Applications: kept while the employer's recruitment is live and afterwards as their record of the decision.
• CV files: until you delete them, or until your account closes.
• Records of who unlocked your profile: kept as long as your account is open, because you are entitled to see that list.
• Payment and accounting records: kept for the period Tanzanian tax and company law requires, even after an account closes.
• Records of job views: kept for a limited period for statistics, then removed.

Part VI of the Act gives you the following rights, and we honour all of them:

• To know whether we hold data about you, what it is, why we process it and who receives it (s.33).
• To have it corrected if it is wrong, incomplete or misleading (s.29). Most of it you can edit yourself in your profile.
• To have it blocked, erased or destroyed (s.38).
• To stop processing that is likely to cause you substantial damage (s.34).
• To stop direct marketing at any time (s.35).
• Not to be subject to a decision made purely by machine that significantly affects you, and to have such a decision reconsidered by a person (s.36).
• To compensation if you suffer damage because we broke the Act (s.37).

On machine-made decisions: CITADEL does not decide anything about you automatically. We do not score, rank or filter candidates by algorithm. Every hiring decision on this platform is made by a person at the employer.

CITADEL is for people aged 18 and over. Data relating to children is sensitive personal data under section 3 of the Act, and we do not knowingly collect it. If you believe a child has created an account, tell us and we will remove it.

If you are unhappy with how we have handled your personal data, write to privacy@citadel.tz first and give us the chance to put it right.

You also have the right to complain directly to the Personal Data Protection Commission, which supervises compliance with the Personal Data Protection Act, Cap. 44 in Tanzania. Going to us first does not take that right away.

If we change how we use personal data we will update this page and change the date at the top. Where a change materially affects you we will email you before it takes effect, rather than relying on you to notice.

Questions about anything here: privacy@citadel.tz, or see our terms of use.