Privacy Notice
What we collect through this website, why, and how long we keep it.
Last updated 14 September 2026. This notice covers the website only. Client engagements are governed by the confidentiality terms in your engagement letter.
Who we are
Ihsaan Takaful and Financial Services (ITFS), registered in Zanzibar in 2022, of P.O. Box 1957, Rahaleo, Zanzibar. For questions about this notice, write to contact@itfs.co.tz.
What we collect, and when
| Where | What | Why |
|---|---|---|
| Contact form | Name, e-mail, phone, organisation, department and your message | To answer your enquiry and route it to the right team |
| Event registration | Name, e-mail, phone, organisation, job title, delegate type and any notes | To administer the event and confirm your place |
| Newsletter | E-mail address and, optionally, your name | To send research notes and forum invitations after you confirm |
| Document downloads | A one-way hash of your IP address and the referring page | To count downloads. The hash cannot be reversed to your address. |
Cookies
This site sets two cookies, both strictly necessary and neither used for advertising:
- itfs_csrf - a random token that proves a form submission came from this site. Expires after 12 hours.
- itfs_session - set only for staff who sign in to the content platform. Expires after 8 hours.
We run no third-party analytics, advertising or social tracking scripts. Fonts and all other assets are served from this domain, so loading a page does not tell anyone else that you did.
Who sees your data
Enquiries are read by the ITFS team and, for LIAFE academic enquiries, by our partner institution. Data is stored on our web host’s servers. We do not sell personal data and we do not share it for marketing.
How long we keep it
- Enquiries: three years from your last contact, then deleted.
- Event registrations: three years, for delegate records and certification.
- Newsletter: until you unsubscribe.
- Download statistics: aggregated counts are kept indefinitely; the hashed identifiers are purged after twelve months.
Your rights
You can ask us for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it. Write to contact@itfs.co.tz and we will respond within 30 days. If you are in the United Kingdom or the EU and are not satisfied with our response, you may complain to your national data protection authority.
Security
The site is served over HTTPS. Staff passwords are stored hashed, never in readable form. Uploaded files are stored where they cannot be executed as code, forms are rate limited and protected against cross-site request forgery, and every change made in the content platform is recorded with the account that made it.
Changes
If we change how the site handles personal data, we will update this page and the date at the top of it.