Privacy policy

Last updated: 25 September 2026

This policy explains what Bariki Pharma Group Limited ("Bariki", "we", "us") does with the information you give us when your business registers with us, orders from us, or uses the Bariki Pharmacy website and mobile apps. We are the data controller for that information.

1. Who this policy covers

Bariki supplies licensed pharmacies, dispensaries, health centres, hospitals, clinics and institutions. This policy covers the people behind those businesses: owners, pharmacists and the staff who order from us. It applies to the website at barikipharmacy.co.tz, the ordering platform, and the Bariki Pharmacy apps for Android and iOS.

2. What we collect

When your business registers

Business name, facility type and region.
The owner's name and phone number.
The contact phone number you sign in with, and your email address.
Where the business is: the address you type or choose, and its map coordinates if you use "use my current location" or pick the place from the map search.
The registration documents you upload, such as your Pharmacy Council or TMDA licence, your ZFDA and business licence in Zanzibar, and your TIN certificate.

When you order

What you ordered, the quantities and the prices charged.
The payment method you chose and, for mobile money, the payment reference returned to us. We never see or store your mobile money PIN.
The delivery address for that order, any instructions you leave for the driver, the delivery code, and who signed for the order and when.
Your credit limit and outstanding balance, if we have given your business credit terms.

When you use the POS till

The till in the app is your shop's own record of what it sells. It keeps its records on the phone first, so it works without a network, and sends a copy to our server when it is online, so a new or reinstalled phone can restore them. That copy holds:

Your shelf: the products you sell, your prices, barcodes and reorder levels.
Your stock: what you received and when, the Bariki order it came from if any, batch numbers, expiry dates, what it cost you, and any note you add to a stock change.
Your sales: each receipt, what was sold, the total, how the customer paid, cash given and change, refunds and voids.
A customer's name and phone number, only if you choose to type them in at the counter.
Your shifts: when the till was opened and closed, the cash expected and the cash counted.
An identifier the app creates for that phone, so we know which till a record came from.

These are your business's records, not ours. We keep them for you and use them only to store, restore and show them back to you. We do not use them to market to your customers, and we do not share them. If you record a customer's name or phone number, you are responsible for having a reason to, and for telling them; we hold it on your behalf.

Automatically

A record of what happened on your account, such as an order placed or a status change, with the time it happened. We keep these so a disputed order can be traced.
Nothing else. This website carries no analytics, no advertising tags and no tracking cookies. The only thing it stores in your browser is your choice of English or Kiswahili. The apps keep your language, your signed-in account and your unsent cart on your own phone, not on our server.

3. Why we use it, and on what basis

To supply you. Taking and delivering orders, invoicing and running credit accounts is how we perform our contract with your business.
Because the law requires it. We may only supply medicines to licensed facilities, so we have to see and keep your licence and record what was supplied to whom. Tax law also requires us to keep sales records.
Our legitimate interests. Preventing fraud, confirming that the person ordering is entitled to order for your business, setting credit limits, and improving the service.

4. Who we share it with

We do not sell your information and we do not use it for advertising. We share it only with:

The rider or delivery partner carrying your order, who receives your business name, delivery address, contact number and what to deliver, so they can find you and hand the order over.
Mobile money providers, when you pay by M-Pesa, Mixx by Yas or Airtel Money. The payment runs on their systems under their own terms.
Our accounting and stock system, which holds the sales orders, invoices and receipts raised against your account.
Google, if you search for your pharmacy location using the map search during registration. What you type is sent to Google Places to return suggestions, under Google's own privacy policy. You can skip that search and type your address instead.
Google, again, when the till scans a barcode. The scanning runs on the phone and no picture leaves it, but Google's ML Kit, which reads the barcode, sends Google basic information about the phone and how the scanner performed, so Google can keep it working.
Regulators, auditors and law enforcement, where we are required to disclose, for example to the Pharmacy Council, TMDA or the Tanzania Revenue Authority.

5. Where it is kept

Your records and the documents you upload are held on servers we control, hosted with DigitalOcean in the United States. Access is limited to Bariki staff who need it to do their work: verifying registrations, packing and dispatching orders, running credit accounts and answering your questions. A driver sees only the order being carried.

6. How long we keep it

Your account and its documents: for as long as your business trades with us.
Orders, invoices and receipts: five years from the date of each invoice, even if you close your account, because tax law and the pharmaceutical record-keeping rules require us to be able to produce them. Then they are deleted.
Your till records: for as long as your account is open. Closing your account deletes our copy; the copy on your phone stays until you uninstall the app.
Registration documents for applications we turn down: kept only as long as we may need them to answer a query about the decision, then deleted.

7. Your rights

Under the Personal Data Protection Act, 2022 you may ask us to show you the personal data we hold about you, correct it if it is wrong, delete it where we are not required to keep it, or object to a particular use. Write to barikihq@barikipharmacy.co.tz or call +255 744 221 315, and we will respond within 30 days. To close your account and have your data deleted, see Delete my account.

If our answer does not satisfy you, you may complain to the Personal Data Protection Commission of Tanzania.

8. Keeping it safe

An account is reached with a one-time code sent to the registered phone number. Office and sales staff sign in with their own accounts, and every delivery is handed over against a code shown only in your app, so an order cannot be signed for by the wrong person. Only the staff verifying your registration can open the documents you upload.

Everything the apps and this website send to our server travels over an encrypted (HTTPS) connection, including your registration documents and your till's records.

9. Children

The service is for registered businesses and the adults who run them. It is not directed at anyone under 18 and we do not knowingly collect their data.

10. Changes to this policy

If we change this policy we will update the date at the top of this page, and tell you in the app or by SMS when the change affects how we use your data.

Bariki Pharma Group Limited, Plot 6, Block 27, Kipata/Nyamwezi St, Kariakoo, Ilala, P.O. Box 13863, Dar es Salaam, Tanzania.
+255 22 218 1390 · +255 744 221 315 · barikihq@barikipharmacy.co.tz
TIN 119-936-144 · TMDA account reference 26231