Privacy policy

1. Introduction

This policy applies to all users of Tambala Market, including buyers, sellers, and visitors to our website and mobile applications.

Tambala Market is a product of 25 Points, a registered business in Malawi. 25 Points operates the Tambala Market website, mobile applications, and related services.

We process personal information only when we have a lawful basis, including performing a contract with you, complying with law, pursuing a legitimate interest that does not override your rights, or acting on your consent where consent is required.

2. Information We Collect

Personal Information You Provide

Information We Collect Automatically

When you use our platform, we automatically collect:

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages visited, time spent, clicks, search queries
• Location Data: General location based on IP address (with your permission for precise location)
• Cookies and Tracking: Site preferences, login status, analytics data

3. How We Use Your Information

4. How We Share Your Information

With Other Users

To facilitate transactions, we share:

• Your name and contact information with buyers/sellers in your transactions
• Your public profile information (name, ratings, reviews)
• Your general location (city/district) for delivery coordination

With Service Providers

We work with trusted third-party providers for:

• Payment Processing: Licensed payment service provider regulated by the Reserve Bank of Malawi for secure card and mobile money transactions
• Email Services: Resend for transactional and marketing emails
• Analytics: Vercel Analytics when you allow optional analytics
• Cloud Services: Firebase for database, authentication, and file storage services, and Vercel for website hosting
• SMS Services: For account verification and order notifications

Legal Requirements

We may disclose your information when required by law or to:

• Comply with legal proceedings or court orders
• Respond to government requests or investigations
• Protect our rights, property, or safety
• Protect the rights and safety of our users
• Prevent fraud or illegal activities

5. Data Security and Protection

Security Measures

Data Retention

We retain your personal information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes and enforce agreements
• Maintain security and prevent fraud

Retention periods depend on the type of record, why it was collected, dispute and fraud risks, and legal or accounting requirements. We delete or de-identify information when it is no longer reasonably required, unless the law requires longer retention.

6. Your Privacy Rights

Your Rights Include

How to Exercise Your Rights

To exercise any of these rights, please:

• Email us at tambalamarket@gmail.com
• Contact our customer support team
• Send a written request to our physical address

We will respond within the period required by applicable law. We may ask you to verify your identity before disclosing, changing, or deleting information so that another person cannot misuse your rights.

7. Cookies and Tracking Technologies

What Are Cookies

Cookies are small text files stored on your device that help us provide and improve our services.

Types of Cookies We Use

Managing Cookies

You can control cookies through:

• Your browser settings
• The analytics choice shown by Tambala Market
• Clearing Tambala Market site data to reset that choice

Note: Disabling essential cookies may affect website functionality.

8. International Data Transfers

Your personal information may be transferred to and processed in countries other than Malawi, including the United States and European Union, where our service providers operate.

When information is processed outside Malawi, we use safeguards appropriate to the service, the information, and applicable law. These may include:

• contracts that require confidentiality, security, and lawful processing
• due diligence on providers and their processing locations
• access controls and data minimisation
• other transfer mechanisms required or recognised by applicable law

9. Children's Privacy

If we become aware that we have collected personal information from someone under 18, we will take steps to delete that information as quickly as possible.

Parents and guardians who believe their child has provided personal information to us should contact us immediately at tambalamarket@gmail.com.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.

When we make changes, we will:

• Update the "Last updated" date at the top of this page
• Notify you via email or platform notifications
• Provide prominent notice for material changes
• Give you time to review changes before they take effect

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

11. Contact Us