K4S Security Group Ltd is committed to handling personal information lawfully, fairly, transparently and only for a clear business, security or legal purpose. This notice explains what we collect through k4ssecurity.co.tz, why we need it, who may receive it and the choices available to you.
1. Scope and who is responsible
K4S Security Group Ltd is the data controller for the personal data described in this notice. This notice applies to the public website, contact and quotation requests, appointment booking, confidential misconduct reporting and related website-security records. Employment, client contracts and individual security assignments may require an additional notice tailored to that relationship.
2. Information we collect
Information you provide
- Names, organisation, email address, telephone number and communication preferences.
- Security-service requirements, locations, dates, access concerns and assignment details.
- Appointment department, meeting format, schedule, purpose and preparation notes.
- Correspondence, feedback and records connected with a request or business relationship.
Confidential reporting information
A misconduct report may contain allegations, dates, locations, people involved, supporting facts, witnesses and optional reporter contact details. It may also contain personal data about other people. Submit only information reasonably connected with the concern and never include passwords, banking credentials or classified security procedures.
Technical information
The website, hosting provider and protective services may generate IP addresses, browser and device details, requested pages, timestamps, form-security signals and server logs. This information helps deliver the site, diagnose faults and prevent abuse.
3. Why we use personal data
Depending on the interaction, K4S may process personal data to respond to enquiries, prepare quotations, arrange appointments, take steps toward or perform a contract, plan security services, maintain business records, investigate misconduct, protect people and systems, meet legal obligations, establish or defend legal claims and improve service controls.
The legal basis may include performance of a contract or requested pre-contract steps, compliance with law, legitimate interests in operating and protecting the business, protection of vital interests in an emergency, or consent where consent is the appropriate basis. K4S does not use public website forms to make decisions producing legal or similarly significant effects solely by automated means.
4. Sharing and access
Access is limited according to role and reasonable need. Information may be shared with authorised K4S personnel, hosting and email providers, contracted service providers, professional advisers, investigators, insurers, clients where necessary for an agreed service, and competent authorities where required or permitted by law. K4S does not sell personal data collected through these forms.
Confidential web reports are delivered to ethics@k4ssecurity.co.tz with the designated oversight address copied. The form does not create a public or private report post inside WordPress.
Some technology suppliers may process information outside Tanzania. Where this occurs, K4S must consider the destination, purpose, provider safeguards and any approval or protection required by applicable data-protection law.
5. Retention
Personal data is retained only for as long as reasonably required for the original purpose, service and contractual needs, investigation and follow-up, legal or regulatory duties, limitation periods, dispute handling and website security. Different records have different retention periods. When information is no longer required, it is securely deleted, anonymised or archived where preservation is legally required.
6. How we protect information
K4S uses administrative, organisational and technical controls intended to reduce accidental loss, misuse, unauthorised access, alteration and disclosure. Controls include restricted access, authentication, encrypted transport where supported, form-abuse protection, security headers, backups and supplier controls. No internet or ordinary email service can be guaranteed completely secure.
7. Your rights
Subject to Tanzania’s Personal Data Protection Act, 2022, applicable regulations and lawful exemptions, you may request information about processing, access to your data, correction of inaccurate information, erasure or restriction where the conditions are met, portability where applicable, objection to certain processing and withdrawal of consent where processing relies on consent.
K4S may request reasonable information to verify identity before acting on a rights request. Information may be restricted where disclosure would adversely affect another person, an investigation, legal privilege, security or another lawful exemption.
8. Cookies and external services
WordPress, hosting and security services may use strictly necessary cookies or similar storage for administration, sessions, forms and protective controls. External font and interface-icon providers may receive technical connection data such as an IP address. Analytics, advertising or embedded-media services should be assessed before activation and supplied with consent controls where required. External websites, including Instagram, apply their own privacy terms after you follow a link away from K4S.
9. Children
The public website is directed to organisations, clients, workers and adults seeking K4S services. Do not submit a child’s personal data unless it is necessary, lawful and relevant to a genuine security, safeguarding or reporting matter.
10. Contact and complaints
Send privacy questions and rights requests to info@k4ssecurity.co.tz. Describe the interaction or information concerned and the right you wish to exercise. You may also raise a complaint with Tanzania’s Personal Data Protection Commission.
Public version: 1.0 · Effective: 15 July 2026 · This notice will be reviewed when services, systems or legal obligations materially change.