Last Updated: December 2024
Your privacy is important to us. This policy explains how Mlatho 360 collects, uses, and protects your data in compliance with Malawi's Data Protection Act 2024.
Mlatho 360 ("we," "us," "our," or "Company") operates the Mlatho 360 enterprise management platform. This Privacy Policy explains our practices regarding the collection, use, disclosure, and protection of your information when you use our website, mobile application, and services (collectively, the "Service").
We are committed to maintaining the highest standards of data protection and compliance with applicable privacy laws, including Malawi's Data Protection Act 2024, GDPR, CCPA, and other local data protection regulations.
Under Malawi's Data Protection Act 2024, we process your personal data only when we have a valid legal basis. These include: Consent, Contract Performance, Legal Obligation, and Legitimate Interests.
When you register an organization account, we collect: organization name, administrator name and email, phone number, company address, business type, and account preferences.
Your organization uploads employee data to the platform, including: personal information, employment details, attendance and leave records, performance evaluations, asset assignments, and project assignments.
We automatically collect information about your interactions with our Service, including IP address, browser type, pages visited, time spent on pages, device information, and login timestamps.
We use the information we collect for the following purposes: Service Delivery, Account Management, Communications, Security & Fraud Prevention, Analytics & Improvement, and Legal Compliance.
By registering for a Mlatho 360 account, you agree to join the Mlatho 360 community and acknowledge that you may receive marketing communications and updates from Mlatho 360 and Mlatho 360.
Upon registration, you become a member of the Mlatho 360 community. This includes receiving: Product updates and feature announcements, Community news and events, Educational content and webinars, and Promotional offers.
You explicitly consent to receive emails from Mlatho 360 and Mlatho 360 at the email address you provide during registration. This consent is based on your voluntary registration, acceptance of our Terms of Service, and explicit agreement to join our community.
You can manage your communication preferences at any time: Click "Unsubscribe" at the bottom of any marketing email, Update your preferences in your account settings, or Email us at community@zotheka.com.
We do not sell, trade, or rent your personal information. We may share data with Service Providers, Organization Administrators, Legal Requirements, and Business Transfers.
We implement comprehensive security measures to protect your data with Encryption, Access Controls, Authentication, and Auditing.
All data in transit uses TLS/SSL encryption. Sensitive data at rest is encrypted using AES-256 encryption.
Role-based access control (RBAC) ensures only authorized personnel can access specific data.
Multi-factor authentication (2FA) and strong password requirements protect account access.
Comprehensive audit logs track all data access and changes for accountability.
We retain your information for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Organization data is retained for the duration of your subscription and typically deleted within 30 days after account termination.
Depending on your location, you may have the following rights: Right to Access, Right to Rectification, Right to Erasure, Right to Portability, Right to Object, and Right to Withdraw Consent.
Our Service may include links to third-party websites and services. We are not responsible for their privacy practices. Third-party integrations may collect and process your data according to their own privacy policies.
Mlatho 360 is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will delete such information and terminate the child's account.
Mlatho 360 fully complies with Malawi's Data Protection Act 2024. Our commitment includes: Data Subject Rights, Lawful Processing, Data Security, Transparency, and International Transfers.
For more information about Malawi's Data Protection Act 2024, visit MACRA (Malawi Communications Regulatory Authority).
If you have questions about this Privacy Policy or our privacy practices, please contact us:
+265 (0) 1 810 497
Lilongwe 3
P.O. Box 30214
Malawi
If you wish to exercise your data protection rights under Malawi's Data Protection Act 2024, you can submit your request in writing to our Data Protection Officer. Include your name, contact details, and a clear description of your request. We will respond within 30 days as required by law.
We may update this Privacy Policy periodically. Significant changes will be notified via email or on our website. Your continued use of the Service after updates constitutes acceptance of the revised policy.