Privacy Policy

Who we are

Our website addresses are: https://www.nei-ltd.com/, https://www.viva-vanilla.com, and https://www.viva-cocoa.com.

Update

Natural Extracts Industries Limited, its affiliates, assigns, and subsidiaries (collectively the Company) is committed to respecting and protecting your personal data in accordance with the legal requirements instituted by the Personal Data Protection Act No. 11 of 2022 (PDPA) and its regulations, reinforced and supplemented by the General European Regulation 2016/679 (GDPR) on the protection of individuals with regard to the processing of personal data, which came into force on May 25, 2018. If you use this site, it means that you understand and accept the terms stipulated below.

Manager's identity

Personal data is collected from the website(s) on behalf of the Company, which is responsible for processing the personal data collected. The Manager may be contacted at [email protected].

Definition of personal data

The term “personal data” refers to any information relating to an identified or identifiable natural person that is recorded in any form. An “identifiable natural person” is one who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, location data, an online identifier, or to one or more factors specific to his or her physical, physiological, genetic, mental, economic, cultural or social identity. “Processing” means any operation or set of operations which may or may not be performed upon personal data or sets of data by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Collected data

As part of its collection activities, the Company collects the following data in particular:

identity data: title, surname, first names, address, job title, telephone number, e-mail address, and IP address.
if applicable, invoice payment data: payment methods, postal or bank details, tax identification numbers, balances and unpaid invoices.
if applicable, transaction data: order number, purchase details, products purchased, quantity, amount, frequency, delivery address, history of contractual relationship, product returns, origin of sale (salesperson, representative, partner) or order, customer correspondence, exchanges and comments from customers and prospects.

Collection of personal data

In general, you can visit the sites without providing any personal information. Only the data you voluntarily enter on the Contact Form and Newsletter Registration Form will be collected. When using the Contact Form, you will be asked to provide personal data such as your surname, first name, telephone number, e-mail address, and the company name or geographical location; the purpose of collecting this data is to respond to individual contact requests and record the details of the request in our internal systems for future reference of said request. When using the Newsletter Registration Form, your e-mail address will be collected and stored, for the purpose to send you newsletters and related Company news and information.

Internal pages

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other sites behaves in the same way as if the visitor were visiting that other site. These websites may collect data about you, use cookies, embed third-party tracking tools, and track your interactions with such embedded content if you have a logged-in account on their website.

Use of cookies

We use cookies for the purposes of browsing our website, as well as for site optimization (statistics on the number of visits, location of connection, etc.). By continuing to browse our site, you accept the use of cookies. However, this use of cookies is in no way linked to any personally identifiable information on our website(s).

Personal data processing

In particular, this data may be used to carry out operations relating to:

processing a request made via the online form;
cookie management (see “Use of cookies”);
processing information requests, sales orders and tracking deliveries;
the performance of a contract or a request prior to the conclusion of a contract;
billing, accounting and sales account management;
to follow up on supplier, partner or customer relations in order to provide information or follow up on services requested and to be able to contact the user, in particular regarding various Company events, price offer updates, new product launches and complementary products;
maintaining and updating files;
claims management;
collect user feedback on products and services;
resolve disputes and enforce our contracts;
statistics and marketing analyses;
obtaining certifications requested by the users;
requests for access, modification, rectification and opposition; and
compliance with legal, regulatory and administrative obligations.

Use of personal data

Personal data is used and processed by the Company and may be transferred to other affiliates, related parties, and/or to any partners and service providers contractually bound to the Company for the performance of any of the above operations and in particular to our hosting provider, without the user’s authorization being required. It is specified that the partners in question are subject to an obligation of confidentiality and may only use and process the data in accordance with our contractual provisions and applicable legislation. Any other use or processing is subject to prior consent. The Company undertakes to restrict access to personal data to company employees and agents authorised to process such data by virtue of their duties, which involve the consultation of such data.

Confidentiality of information

The personal information you provide to the Company will not be sold to any other company. It will not be exchanged, transferred, or given to a third party, except to any judicial or administrative authorities that may request it and unless we are obliged to do so for a legitimate reason.

Transfer of data to countries outside the EU or EEA

For the purposes of providing services, some recipients of your data are located outside Tanzania and the EU. The guarantees provided for in the PDPA and GDPR will be implemented to ensure a sufficient level of protection. The Company undertakes to provide them with the information they strictly need to provide the required services and to prohibit them from using the information for purposes other than the provision of the services they are asked to provide.

Retention of personal data

Personal data are kept for the period necessary to achieve the purpose of their processing, which may not exceed:

three years from the last contact from a non-customer prospect in the case of consultation of our websites (refer to “Who we are”);
three years from the date of the customer’s or partner’s last contact with the Company if the data is used for sales promotion and canvassing purposes;
in any other case, for as long as the customer, supplier or partner has a contractual relationship with the Company;
in the event of termination of the contract binding the customer, supplier or partner to the Company, such as at the end of the requested service, and if there is no other reason to continue processing, ten years from the end of any business relationship to comply with current regulations, particularly in terms of contractual, accounting and tax requirements.

Protecting information

We implement various organisational, technical and IT measures to ensure the security and confidentiality of your personal information, and in particular to prevent it from being distorted, damaged, lost, misappropriated, corrupted, disclosed, transmitted or communicated to unauthorised persons. We also protect your information offline. Computers and servers used to store personally identifiable information are kept in a secure environment.

Rights and remedies

In accordance with national and European regulations applicable to personal data, you have the right to access your personal data at any time, by writing to [email protected]. This right of access enables you in particular to obtain confirmation that data concerning you is (or is not) being processed and communication of a copy of all personal data held by the data controller concerning you. You also have the right to request that your data be updated, corrected (if it becomes obsolete, erroneous or incomplete) or deleted (if your data is no longer required for processing, subject to legal retention periods). You have the right to portability and limitation of processing. To exercise these rights, please contact us at [email protected]. In support of your request, before implementing this right, the Company may ask for proof of your identity. You may define general directives with the data controller concerning the conservation, deletion and communication of your personal data after your death. These directives may be modified or revoked at any time. If you do not agree with the collection or use of your personal data, you may lodge a complaint with the Personal Data Protection Commission of Tanzania.