Tanga Legacy Holdings LLC ("Tanga Legacy," "we," "us") is a Massachusetts limited liability company. We design and sell bags and textiles, publish media, and build mobile applications under our brands, including MFUKO., NIMEVAA, Dunia Docs and Kosa Khronicles.
This policy covers personal information we handle through:
Where a service has its own policy — for example our shop platform's — that policy also applies to information handled by that platform.
If you buy something. Your name, delivery address, email address, and order details. Our shop platform processes payment for us; we do not receive or store full payment card details. We use this to take payment, fulfil and ship your order, and handle returns.
If you use one of our apps. Information the app needs to work, and basic diagnostic information. Details are given in the app's own listing.
If you join a waitlist. Your email address, and your mobile number if you give it. We use this to tell you when a product is available.
If you contact us. Whatever you choose to send us, so that we can reply. A person reads what you send, and a person decides what we say back — including whether to reply at all. We use AI tools to help draft the reply and to send it, so a message you send to us may be processed by an AI system, and a reply you receive may be sent by one. Some messages, such as order confirmations and waitlist confirmations, are sent automatically; those are described in section 6.
Why we work this way: we are a small team, and these tools let us read everything that arrives and reply properly and promptly, rather than slowly or not at all.
If you receive our messages. Your mobile number and a record of your consent and of the messages we sent. See section 6.
When you visit the site. Basic technical information such as pages viewed, and cookies where used, to keep the site working and understand what is useful.
Some of what we publish features real people — their voice, image, name or story. This includes members of our own team and people who take part in a production.
What we hold. The recordings, photographs and footage a contribution consists of, and our records of what was agreed.
How we use it. Only for the production a person took part in, and for our own promotion of that production.
If you follow, watch, comment on or message our accounts, the platform holds that information under its own privacy policy.
The platforms show us statistics about our own accounts — such as how many people liked or commented on a post. If you send us a comment or a direct message, a person reads it and decides whether to reply, and we use AI tools to help draft and send that reply, as described above.
We do not sell your information.
We hold contact details and work-related information for team members, contractors and collaborators, to run the business and pay people. Where a team member takes part in our messaging programme, section 6.2 applies, including the right to decline or stop with no effect on their role.
We operate an internal tool so that our own team can schedule and publish our own content. We connect it only to social media accounts we own. This section describes that tool. Information we hold through our shop, our apps, our waitlists and our messaging is described in the other sections.
When a member of our team connects one of our own accounts, the tool is granted access to that account and reads:
It also stores the video and image files our team produces, so they can be scheduled and published.
Two purposes only:
We do not sell, rent or trade it.
It passes through the providers that run the tool — our hosting provider, for hosting and storage, and the social platforms’ own APIs. Those providers process it on our instructions and under their own terms, and are not given it for their own use.
Metrics and scheduling data are stored on our hosting provider’s infrastructure, in encrypted storage. Access credentials for the connected accounts are held in encrypted environment variables. They are not stored in the source code of this tool.
We keep performance metrics as a historical record, so we can see change over time. Media files are kept while they are scheduled or published, and removed when they are no longer needed.
Because every connected account belongs to us, access can be revoked at any time from the platform itself — under the app or connected-app settings on Instagram, Facebook or TikTok. Revoking access stops all further collection and publishing for that account immediately.
To have stored data deleted, write to the address below and we will remove it.
We share personal information only with the service providers who help us run the business — payment and shop platforms, print and fulfilment partners, shipping carriers, email and messaging providers, AI service providers, and analytics — and only so that they can perform that service for us. We may also share information where the law requires it, or to protect our rights.
These providers handle information under their own privacy policies and under the terms on which we use their services. Where a provider's policy governs information we have shared with them, that policy applies in addition to this one. We choose providers we consider appropriate for the purpose, but we do not control their policies and they may change them.
We use AI tools to help operate this business, including to help read and draft correspondence and to help create some of what we publish. A person sets the direction for what we make and publish, and a person can stop or withdraw anything at any time. How we handle the voice, image and stories of real people who appear in our content is described above.
We operate two separate messaging programmes. They never share a sender, a recipient list, or a message. They are sent from different phone numbers, to different recipients, for different purposes. A customer never receives an internal operational message, and an internal number is never used to contact the public.
Sent from a dedicated toll-free number.
Who receives it. People who have submitted their mobile number to the NIMEVAA waitlist at nimevaa.com and agreed to receive text messages.
What we send. Confirmation that you have joined the waitlist, and alerts when a collection drops or a product becomes available. These are recurring marketing messages, and you agree to receive them when you join the waitlist.
The waitlist is operated at nimevaa.com.
How consent is obtained. The waitlist form at nimevaa.com collects your email address and your mobile number in separate fields, and carries a separate tick box that is not ticked for you. The box reads: “I agree to receive recurring marketing texts from Nimevaa (Tanga Legacy Holdings LLC) at the number provided. Consent is not a condition of any purchase. Message frequency varies. Message and data rates may apply. Reply STOP to cancel or HELP for help.” Giving us your number and agreeing to texts are two separate actions, and consent is not a condition of any purchase.
Frequency. Message frequency varies. In practice we send a message when a collection drops or a product becomes available, so how often you hear from us follows how often we release something.
Stopping. Reply STOP to any message to stop receiving them. Reply HELP for help, or email info@tangalegacy.com.
Sent from a separate internal number, which is not published.
Who receives it. The owner of the business and members of the Tanga Legacy team, who have each given their own mobile number for this purpose. It is never used to contact customers, waitlist members, or any member of the public, and no customer or waitlist number is or can be enrolled in it.
How consent is obtained. Each recipient enrols their own number voluntarily. Taking part is optional, and a team member may decline or stop at any time with no effect on their role, standing, or work. We do not enrol anyone's number on their behalf.
What we send. Operational notifications about the company's own systems — status of internal jobs, and alerts that need attention when a recipient is away from a desk. No marketing or promotional content is sent on this programme.
Frequency. Message frequency varies. We aim to send no more than one routine notification per day. Urgent alerts are sent whenever they are needed and are not subject to that limit, so on some days there will be more than one message and on most days there will be none.
Stopping. Reply STOP to stop. Reply HELP for help.
Message and data rates may apply. Message frequency varies as described above. Carriers are not liable for delayed or undelivered messages. Phone numbers collected for messaging are used only to send the messages described here, are never sold or shared with third parties for marketing, and are shared only with the messaging providers who deliver them on our behalf.
We keep personal information only as long as we need it for the purpose it was given — to complete an order and meet our tax and accounting obligations, to run a waitlist or messaging programme you joined, or to operate our own accounts. We delete it on request where we are not required to keep it.
We use reasonable measures to protect personal information, including access controls and encryption where appropriate. No system is perfectly secure, and we do not claim otherwise.
You may ask us to access, correct, or delete the personal information we hold about you, and you may unsubscribe from emails or reply STOP to messages at any time. Depending on where you live you may have additional rights. To make a request, email info@tangalegacy.com — we will not treat you differently for making one.
Our products and services are not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has given us information, contact us and we will delete it.
We are based in the United States and our service providers may process information there or elsewhere. Where information is transferred internationally, we rely on the protections our providers have in place.
If we change this policy we will post the updated version on this page and change the date above.
info@tangalegacy.com · Tanga Legacy Holdings LLC, Massachusetts, USA.