Privacy Policy
How we protect and use your personal information
Last updated: December 4, 2025
1. Introduction
Your privacy matters to us. This Privacy Policy explains how Tambala Market collects, uses, shares, and protects your personal information.
We are committed to transparency and giving you control over your personal data.
This policy applies to all users of Tambala Market, including buyers, sellers, and visitors to our website and mobile applications.
By using our services, you consent to the collection and use of your information as described in this policy.
2. Information We Collect
Personal Information You Provide
Account Information
- • Full name
- • Email address
- • Phone number
- • Password (encrypted)
- • Profile picture
Business Information
- • Business name
- • Business address
- • Tax identification
- • Bank account details
- • Verification documents
Transaction Data
- • Purchase history
- • Payment information
- • Delivery addresses
- • Order preferences
- • Reviews and ratings
Communication Data
- • Messages between users
- • Customer support inquiries
- • Feedback and surveys
- • Email communications
- • SMS notifications
Information We Collect Automatically
When you use our platform, we automatically collect:
- Device Information: IP address, browser type, operating system, device identifiers
- Usage Data: Pages visited, time spent, clicks, search queries
- Location Data: General location based on IP address (with your permission for precise location)
- Cookies and Tracking: Site preferences, login status, analytics data
3. How We Use Your Information
Core Services
- Create and manage your account
- Process transactions and payments
- Facilitate communication between buyers and sellers
- Provide customer support services
- Verify seller identities and business credentials
Platform Improvement
- Analyze usage patterns to improve user experience
- Develop new features and services
- Personalize content and recommendations
- Conduct research and analytics
- Test and optimize platform performance
Security and Safety
- Prevent fraud and unauthorized access
- Detect and investigate suspicious activities
- Enforce our Terms of Service
- Protect users from scams and abuse
- Maintain platform security and integrity
Communications
- Send order confirmations and updates
- Notify about account activities
- Share promotional offers and news
- Provide important service announcements
- Respond to your inquiries and feedback
4. How We Share Your Information
We do not sell your personal information to third parties.
We only share your information in the specific circumstances outlined below.
With Other Users
To facilitate transactions, we share:
- Your name and contact information with buyers/sellers in your transactions
- Your public profile information (name, ratings, reviews)
- Your general location (city/district) for delivery coordination
With Service Providers
We work with trusted third-party providers for:
- Payment Processing: Licensed payment service provider regulated by the Reserve Bank of Malawi for secure card and mobile money transactions
- Email Services: Resend for transactional and marketing emails
- Analytics: Sentry for error tracking and performance monitoring
- Cloud Services: Firebase for database and authentication services
- SMS Services: For account verification and order notifications
Legal Requirements
We may disclose your information when required by law or to:
- Comply with legal proceedings or court orders
- Respond to government requests or investigations
- Protect our rights, property, or safety
- Protect the rights and safety of our users
- Prevent fraud or illegal activities
5. Data Security and Protection
Your data security is our top priority.
We implement industry-standard security measures to protect your personal information.
Security Measures
Technical Safeguards
- • SSL/TLS encryption for data transmission
- • Encrypted password storage
- • Secure cloud infrastructure
- • Regular security audits and updates
Access Controls
- • Two-factor authentication options
- • Role-based access for staff
- • Regular access reviews
- • Secure backup procedures
Data Retention
We retain your personal information for as long as necessary to:
- Provide our services to you
- Comply with legal obligations
- Resolve disputes and enforce agreements
- Maintain security and prevent fraud
Account information is typically retained for 7 years after account closure, while transaction records are kept for 10 years as required by Malawi financial regulations.
6. Your Privacy Rights
You have control over your personal information.
We respect your privacy rights and provide tools to manage your data.
Your Rights Include
Access and Portability
Request a copy of your personal data in a portable format
Correction
Update or correct inaccurate personal information
Deletion
Request deletion of your personal data (subject to legal requirements)
Restriction
Limit how we use your personal information
Objection
Object to certain uses of your personal data
How to Exercise Your Rights
To exercise any of these rights, please:
- Email us at dev@25points.com
- Use the privacy settings in your account dashboard
- Contact our customer support team
- Send a written request to our physical address
We will respond to your request within 30 days and may ask you to verify your identity to protect your privacy.
7. Cookies and Tracking Technologies
What Are Cookies
Cookies are small text files stored on your device that help us provide and improve our services.
Types of Cookies We Use
Essential Cookies
Required for basic website functionality, login, and security
Performance Cookies
Help us understand how users interact with our platform
Functional Cookies
Remember your preferences and personalize your experience
Marketing Cookies
Show relevant ads and measure advertising effectiveness
Managing Cookies
You can control cookies through:
- Your browser settings
- Our cookie preference center
- Third-party opt-out tools
Note: Disabling essential cookies may affect website functionality.
8. International Data Transfers
Your personal information may be transferred to and processed in countries other than Malawi, including the United States and European Union, where our service providers operate.
When we transfer your data internationally, we ensure appropriate safeguards are in place, including:
- Standard contractual clauses approved by data protection authorities
- Adequacy decisions by relevant regulatory bodies
- Certification schemes and codes of conduct
- Service provider agreements with privacy protection requirements
9. Children's Privacy
Tambala Market is not intended for users under 18 years of age.
We do not knowingly collect personal information from children under 18.
If we become aware that we have collected personal information from someone under 18, we will take steps to delete that information as quickly as possible.
Parents and guardians who believe their child has provided personal information to us should contact us immediately at dev@25points.com.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.
When we make changes, we will:
- Update the "Last updated" date at the top of this page
- Notify you via email or platform notifications
- Provide prominent notice for material changes
- Give you time to review changes before they take effect
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
11. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
Email: dev@25points.com
Phone: +265 894 053 137
Address: Likonde Building, Area 47, Lilongwe
This Privacy Policy is designed to help you understand how we collect, use, and protect your personal information.