Privacy Policy

What we collect, why we collect it, and what you can ask us to do about it. Last updated 27 July 2026.

In short: we collect what you send us through the contact form, plus standard website analytics. We do not sell your data, and we do not run advertising trackers on this site.

1. Who is responsible for your data

Dziko Digital is the data controller for personal data collected through this website. We are a company registered in Malawi (company registration number BRN-R6SPPEDL), operating from Blantyre, Malawi.

2. What we collect

Information you give us. Our contact form asks for your name, email address, phone number and a message. We use this only to respond to your enquiry and, if we go on to work together, to run the engagement. Submissions are delivered to our email inbox.

Information collected automatically. When you visit, we receive standard technical data: IP address, browser and device type, pages viewed, time on page, and the site that referred you. This comes from our analytics tools and our web server logs.

We do not ask for and do not want sensitive personal data through this website. Please do not send financial details, identity documents or health information through the contact form.

3. Why we process it, and on what basis

To answer your enquiry and provide services. Basis: taking steps at your request before entering a contract, and performing that contract once agreed.
To understand how the site is used and improve it. Basis: our legitimate interest in running and improving our own website.
To keep the site secure and working. Basis: our legitimate interest in protecting the service.
To meet legal and accounting obligations. Basis: compliance with a legal obligation.

4. Analytics

We use Google Analytics 4 (measurement ID G-MP6MX2DBW9), connected through Google Site Kit, to see which pages people find useful. Google processes this data on our behalf and as a controller for its own purposes under its own terms.

We also use Google PageSpeed Insights to measure site performance. Full detail of the cookies involved is in our Cookie Policy, which also explains how to opt out.

5. Who else handles your data

We keep the list of third parties short and use reputable providers:

Hostinger, our web host, which stores the site and its server logs.
Google, for analytics, performance measurement and the web fonts this site loads.
Our email provider, which receives and stores contact form submissions.
Unsplash, which serves some images on our Solutions page directly to your browser.

Loading fonts and images from Google and Unsplash means your IP address is visible to them as part of that request. We do not sell personal data, and we do not share it with advertisers.

6. Data leaving Malawi

Our hosting, analytics and email providers operate servers outside Malawi. This means your personal data may be transferred to and stored in other countries. We choose established providers that offer contractual data protection commitments, and we transfer no more than the service requires.

7. How long we keep it

Enquiries that do not become projects: normally up to 24 months, then deleted.
Client records: for the length of the engagement and afterwards as long as we need them for legal, tax and accounting purposes.
Analytics data: according to the retention period set in Google Analytics.
Server logs: a short rolling period set by our host.

8. Your rights

Under the Malawi Data Protection Act, 2024 you have the right to:

ask what personal data we hold about you and get a copy;
have inaccurate data corrected;
ask us to delete data where we no longer have grounds to keep it;
object to, or ask us to restrict, processing based on our legitimate interests;
receive data you gave us in a portable format; and
withdraw consent at any time, where we relied on consent.

To exercise any of these, email info@dziko.digital. We will respond within the period the Act requires. If you are not satisfied with our response, you can complain to the Malawi Communications Regulatory Authority (MACRA), which is the data protection authority for Malawi.

9. Client data we handle during projects

When we build automations, we often work inside systems that hold your customers' personal data. In that situation you remain the data controller and we act as your data processor. We:

connect only the data a given automation actually needs;
work within your existing accounts and permission structures, so you keep control of access;
use your data only to deliver the work you have asked for; and
document what a system touches, so you can account for it.

Where the law requires a written processing agreement between us, we will put one in place.

10. Security

We use encrypted connections (HTTPS) on this site, limit who can access client systems, and prefer providers with their own strong security practices. No system is perfectly secure, but if a breach affects your personal data we will notify you and MACRA as required by the Act.

11. Children

This site is aimed at businesses and is not directed at children. We do not knowingly collect data from anyone under 16.

12. Changes to this policy

We update this policy when our practices or the law change. The date below shows the current version. Material changes will be noted clearly on this page.

13. Contact

Dziko Digital, Blantyre, Malawi. Email info@dziko.digital, phone +265 882 092 624.