Data Protection Policy

Our principles

• Lawful, fair and transparent: we tell you what we collect and why.
• Purpose limitation: we use data only for running and improving Sapitwa.
• Data minimisation: we collect only what the service needs.
• Accuracy: you can update your details at any time in Settings.
• Storage limitation: we keep data no longer than necessary.
• Integrity and confidentiality: we protect data against loss and unauthorised access.

Legal basis

We process account and content data to provide the service you signed up for, analytics data on the basis of your consent, and security and abuse-prevention data in our legitimate interest in keeping Sapitwa safe.

Your rights

• Access: ask for a copy of the personal data we hold about you.
• Correction: fix inaccurate details, most of which you can edit yourself in Settings.
• Deletion: request that your account and data be deleted.
• Objection and restriction: object to or ask us to limit certain processing.
• Withdraw consent: change your cookie choice at any time.
• Complain: raise a concern with us, or with the Malawi Communications Regulatory Authority (MACRA) as the data protection authority.

Security

Passwords are stored hashed, connections are encrypted, and access to personal data is limited to staff who need it to run the service.

Data breaches

If a breach puts your personal data at risk, we will notify the authority and affected users as the law requires.

Transfers

Some of our service providers may store data outside Malawi. Where they do, we rely on providers that offer adequate protection for that data.

Contact

To exercise your rights or ask about this policy, contact us at no-reply@sapitwapoetry.com.