TAFIKA COURIER LIMITED
Privacy Policy
This policy applies to express delivery, errand, payment, address book, support, and related features in the Tafika User App.
Effective date: 20 July 2026
Who we are and scope
Tafika and its authorised stations, staff, and service partners provide local express delivery and errand services. This policy explains how personal data is collected, used, shared, retained, and protected and applies to senders, recipients, errand contacts, and other users of the services.
Data we collect
We may process account and verification data; sender, recipient, and errand contact names, phone numbers, addresses, landmarks, and coordinates; order numbers, item descriptions, quantities, weights, notes, stations, routes, and status; delivery fees, payment methods, payment proofs, and transaction records; device, network, login, activity, crash, and security data; and content submitted to support, complaints, or feedback.
Contact and third-party data
When you provide sender, recipient, or other contact data, you must ensure it is accurate and that you are authorised to provide it to Tafika for fulfilment of the order. We use this data only as necessary for contact, pickup, transport, delivery, payment collection, support, and dispute handling.
Location, camera, photos, and notifications
With your permission, location may be used to confirm addresses, recommend stations, arrange pickup or delivery, and provide navigation. Camera or photo access may be used for pickup photos, item photos, delivery photos, and payment proof. Notifications may be used for order and service updates. Refusing an optional permission will not affect unrelated features, but the relevant feature may be unavailable.
How we use data
We use personal data to create and fulfil orders, match stations and staff, calculate and confirm charges, process prepayment or cash on delivery, display tracking, verify pickup and delivery, handle exceptions, returns, complaints, account and transaction security, diagnose faults, comply with law, and improve service using de-identified information.
Sharing and service providers
To fulfil an order, necessary data may be shown to the relevant sender, recipient, courier, errand worker, and operating station. Cloud storage, maps, SMS, notification, payment, and technical providers may process necessary data under contractual and access controls. We do not sell personal data or disclose complete order records to unrelated parties unless authorised or required by law.
Cross-border processing
Some technical providers or servers may be located outside Malawi. Cross-border processing is limited to what is necessary for the service and is subject to contractual, security, and access safeguards required by applicable law. Where separate notice or consent is required, it will be obtained before processing.
Retention and security
Data is retained only as long as needed for order fulfilment, support, reconciliation, security audits, disputes, and legal retention obligations, after which it is deleted or anonymised. We use authentication, access separation, transmission protection, audit logs, backups, and staff confidentiality measures, although no network system can guarantee absolute security.
Your rights
You may view and update account, language, and saved address data in the app and may use the complaint or support channel to request access, correction, deletion, restriction, withdrawal of consent, or account closure. Some order, payment, and audit records may not be deleted immediately where needed for fulfilment, disputes, or legal obligations.
Children, updates, and contact
Children should use the service with a parent or guardian and must not independently send restricted items or enter transactions requiring adult status. Material policy changes will be notified in the app or by another reasonable method. For privacy questions, contact tafikacourier@gmail.com or use Tafika's in-app complaint and feedback channel.