We aim to create a culture where everyone at M-Pesa has a clear understanding of how important privacy is to our employees and how to ensure it is respected. Our Privacy Promise sets out the principles that govern our approach to privacy and how we communicate with employees, partners and other stakeholders on relevant issues – such as designing products to protect privacy or assisting with law enforcement.
Accountability: we are accountable for living up to these principles throughout our corporate family, including when working with our partners and suppliers. We have in place accountable privacy compliance measures and we monitor and enforce our compliance with these principles;
Fairness and lawfulness: we comply with privacy laws and act with integrity and fairness. We will work with governments, regulators, policy makers and opinion formers for better and more meaningful privacy laws and standards;
Openness and Honesty: we communicate clearly about actions we take that may impact privacy, we ensure our actions reflect our words, and we are open to feedback about our actions;
Choice and access: we give people the ability to make simple and meaningful choices about their privacy and allow individuals, where appropriate, to access, update or delete their personal information.
Responsible Data Management and limited disclosures: we apply appropriate data management practices to govern the processing of personal information. We choose the partners who participate in processing of personal information carefully and we limit disclosures of personal information to such partners to what is described in our privacy statement or to what has been authorized by our employees;
Security safeguards: we implement appropriate technical and organisational measures to protect personal information against unauthorized access, use, modification or loss.
Privacy by Design: respect for privacy is a key component in the design, development and delivery of our products and services
Balance: when we are required to balance the right to privacy against other obligations necessary to a free and secure society, we work to minimize privacy impacts
M-Pesa Limited are the controller of your personal information. We are a member of Vodacom Tanzania Plc, the Vodafone Group, Vodacom Group Pty and manage HR operations, including the processing of personal information about the employees and applicants to the Vodafone Group to which you are applying.
Our registered office is 7th Floor, Vodacom Tower, Ursino Estate, Plot No.23, Bagamoyo Road, Dar es Salaam. We are registered in the United Republic of Tanzania under company number 138001296. We provide details of how to contract us in the How to contact us section of this privacy statement.
In this privacy statement:
“we/us” means M-Pesa Limited;
“third party” means someone who is not you or us or a part of Vodacom Tanzania Plc, Vodacom Group or Vodafone Group; and “Vodafone Group” means Vodafone Group Plc and any company or other organisation in which Vodafone Group Plc owns 50% or above of the share capital
M-Pesa’s legitimate business interest, when you apply for a role at M-Pesa you provide us with your personal information so that we can use this information to assess your application, progress your application through the recruitment process, make a decision about your suitability for the role and contact you throughout the recruitment and onboarding process;
We collect personal information about you when you register a general interest in careers at M-Pesa or when you apply for a specific role at M-Pesa. Some of the information we collect about you is required to make an assessment on your application to M-Pesa and contact you about your progress through the recruitment process, for example your telephone number, email address, CV. If you do not provide this information then we will be unable to assess your application or contact you to invite you to interview, or make you an offer.
We may collect information about you from recruitment agencies or from the public internet where you have made this information publicly available, for example, we may find your profile on LinkedIn and contact you about suitable roles.
We may also process sensitive personal information about you – but only where this is strictly necessary to assess your suitability for the role you have applied for or where we have a legal obligation. For example,
We may collect records of criminal convictions or right to work in the country you are applying to in order to perform security background checks where it is required by local law;
We may collect information such as your ethnicity, race, but only where it is required by law or we have collected your explicit consent to process this information
We may process the personal information that we collect about you for the following purposes:
We may share personal information about you with:
Other companies in the M-Pesa and Vodafone Group, which will process your personal information solely and only, for the purposes in section 4.1.4;
Third parties, such as recruitment agencies, test providers and others who help us fill vacancies and assess the suitability of candidates and progress applications. Where we use third parties, M-Pesa ensures that there is a written agreement and that they meet the same privacy and security standards as M-Pesa;
Law enforcement agencies, government bodies, regulatory organisations, courts or other public authorities if we have to, or are authorised to by law;
A third party or body where such disclosure is required to satisfy any applicable law, or other legal or regulatory requirement.
In doing the above, we may need to transfer personal information about you to other companies in the M-Pesa Group or Vodafone Group or third parties located (or whose servers may be located) in countries outside of the country where you have applied. If we send personal information about you to a country outside of the country where you have applied, we will make sure that there is a legal basis for such transfer and that your personal information is adequately protected as required by applicable law, for example, by using Data Protection agreements and by requiring the use of other appropriate technical and organisational measures to protect your personal information. Please contact our Privacy Officer if you would like to find out more about the way we comply with our legal obligations in relation to international data transfers. Their contact details are available under section 7 ‘How to contact us’ in this privacy statement.
We will keep your information for as long as it is necessary for the recruitment process. If you are successful, we will keep your information for the duration of your employment, should you wish to apply for other roles within Vodafone. If we are not able to offer you a role, we may keep your information for up to 2 years to contact you about future roles that may interest you, but only where we have collected your consent to do so – you can withdraw your consent at any time in your candidate profile.
We will anonymise your information in accordance with our retention policy and may retain those anonymised records to monitor the effectiveness of our recruitment process. For example, we may create reports to understand what nationalities have applied for roles with M-Pesa in the last 12 months – you will not be identifiable in these reports and you can withdraw your consent at any time by updating the information in your candidate profile.
If we do not take action based on any of the above requests, we will inform you of the reasons why.
This privacy statement is updated from time to time, so we would encourage you to check it regularly in your candidate profile on the recruitment portal. If we make a major change, we will let you know by email.
If you have further questions about this privacy statement or how we process your information, please contact our Privacy Officer. You can contact them through Ask.Privacyteam@vodacom.co.tz or 0754711058. We will do our best to help but if you are still unhappy, you can contact local relevant authority.