Skip to content
Luna Tech
Legal · Last updated April 2026

Privacy Policy

This Privacy Policy describes how LUNA TECHNOLOGIES LIMITED ("we", "us", "our") collects, uses and shares personal data in connection with the Luna Tech website and services. We act as a data controller and, where applicable, as a data processor on behalf of merchants.

Template notice. This document is a working template prepared in advance of authorisation. LUNA TECHNOLOGIES LIMITED will publish the final, legally reviewed version prior to offering services. Please consult qualified Tanzanian counsel before relying on it.

1. Data we collect

  • Identity: name, date of birth, national ID or passport (for KYC).
  • Contact: email address, phone number, postal address.
  • Financial: card details (tokenised), mobile money MSISDN, bank account.
  • Transaction: amounts, currencies, timestamps, descriptions.
  • Technical: IP address, device, browser, cookies and similar identifiers.

2. How we use your data

  • Provide and operate the services.
  • Verify identity (KYC/KYB) and prevent fraud and money laundering.
  • Comply with legal, regulatory and tax obligations.
  • Improve our products and communicate with you.

3. Lawful basis

We process personal data on the bases of contract performance, compliance with legal obligations, our legitimate interests (including fraud prevention) and, where required, your consent — consistent with the Tanzania Personal Data Protection Act 2022.

4. Sharing

We share personal data with banks, card networks, mobile money operators, identity verification vendors, hosting providers and competent regulators, in each case under appropriate contractual and legal safeguards.

5. International transfers

Where we transfer personal data outside Tanzania, we apply appropriate safeguards in line with the Tanzania Personal Data Protection Act 2022 and applicable regulations.

6. Retention

We retain personal data for as long as necessary to provide the services and to comply with legal, accounting and reporting obligations — typically a minimum of seven (7) years for financial records.

7. Your rights

You may request access, correction, erasure, restriction, objection or data portability where applicable. Contact hello@payluna.tech to exercise your rights.

8. Security

We implement technical and organisational measures appropriate to the risk, including encryption, access controls, network segmentation and continuous monitoring.

9. Children

Our services are not directed to children under 18.

10. Updates

We may update this Policy. The “last updated” date above will reflect the latest version.

11. Contact

Data protection enquiries: hello@payluna.tech.

Questions? Email hello@payluna.tech.