Tisonkhe Data Privacy Policy

1. Introduction

Tisonkhe is committed to protecting the privacy and security of its users' personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information in accordance with the Malawi Data Protection Act of 2024 and applicable international standards.

2. Data We Collect

We collect and process the following types of personal data:

• Identity Information: Full name, gender & date of birth.
• Contact Information: Email address, phone number, district of residence.
• Financial Information: Bank account details, Mobile money details & payment transaction history on the platform.
• User-Generated Content: Campaign details, comments, messages, and contributions.

3. How We Use Your Data

We use personal data for the following purposes:

• To create and manage your Tisonkhe account.
• To process transactions and facilitate crowdfunding contributions.
• To comply with legal and regulatory obligations.
• To improve user experience and provide customer support.
• To detect and prevent fraud, unauthorized access, and security breaches.
• To send updates, promotional messages, and service-related communications (you may opt out of marketing messages).

4. Legal Basis for Processing

We process your data based on the following legal grounds:

• Your consent (where required, e.g., marketing emails).
• Performance of a contract (e.g., facilitating transactions and providing platform services).
• Compliance with legal obligations (e.g., anti-money laundering regulations).
• Legitimate business interests, provided they do not override your rights.

5. Data Sharing and Disclosure

We do not sell your personal data. However, we may share it with:

• Regulatory authorities where required by law.
• Payment service providers and financial institutions to process transactions.
• Service providers (e.g., hosting, analytics, fraud detection) under strict data protection agreements.
• Legal authorities in case of fraud, legal disputes, or law enforcement requests.

6. Data Security Measures

We implement robust security measures to protect personal data, including:

• Encryption of sensitive data during storage and transmission.
• Access controls to prevent unauthorized access.
• Regular security audits and compliance reviews.
• User authentication mechanisms to prevent fraudulent access.

7. Data Retention

We retain your personal data only for as long as necessary for:

• Providing services and maintaining user accounts.
• Complying with legal and regulatory requirements.
• Resolving disputes and enforcing agreements.

Once the retention period expires, we securely delete or anonymize the data.

8. Your Rights as a Data Subject

Under the Malawi Data Protection Act of 2024, you have the right to:

• Access your personal data.
• Request corrections to inaccurate data.
• Request deletion of your data where applicable.
• Restrict processing under certain circumstances.
• Object to processing for direct marketing.
• Request data portability to another service provider.
• Withdraw consent for processing where applicable.

To exercise your rights, contact us at support@tisonkhe.com.

9. Cross-Border Data Transfers

If we transfer personal data outside Malawi, we ensure adequate protection through:

• Compliance with international data protection standards.
• Ensuring recipients have appropriate safeguards (e.g., contractual agreements).

10. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Enhance user experience.
• Analyze website traffic and improve performance.
• Personalize content and advertisements.

You can manage cookie preferences via your browser settings.

11. Updates to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes through email or website notices.

12. Contact Us

If you have any questions or concerns regarding this Privacy Policy, contact us at: