Privacy Policy

We collect information you provide when creating an account, making a booking, registering a property, or contacting us. This may include your name, email address, phone number, password, property or business details, and booking-related information.

Payment card details are processed securely by our payment providers and are not stored in full by Tafika. We also collect technical and usage data such as device information, IP address, log data, and how you interact with the Platform, which helps us monitor performance and improve our services.

We use your information to:

• create and manage user and supplier accounts;
• process bookings and enable communication between Guests and Suppliers;
• send booking confirmations and notifications via email, SMS, WhatsApp or other channels;
• provide and improve our digital booking, analytics dashboard, invoicing, and subscription features;
• respond to your enquiries and provide customer support; and
• comply with legal, regulatory and accounting obligations.

We do not sell your personal data to third parties.

To deliver our services, we share certain information with:

• Suppliers, so they can manage bookings and provide accommodation services to Guests;
• service providers who support our operations (such as hosting, messaging, payment processing and analytics); and
• authorities or other third parties where required by law, to protect our rights, or to prevent fraud or abuse.

These third parties are required to handle your data securely and only for the purposes for which it was shared.

We retain booking, account and invoicing data for as long as necessary to provide our services, meet legal and regulatory requirements, resolve disputes, and enforce our agreements. When data is no longer needed, we take reasonable steps to delete or anonymise it.

We use industry-standard technical and organisational measures to protect your information from unauthorised access, loss or misuse. However, no system can be completely secure, and you are responsible for keeping your password and account details confidential.

Depending on applicable law, you may have rights to access, correct, update, or delete your personal data, or to object to or restrict certain types of processing. You can exercise some of these rights directly through your Tafika account, or by contacting us using the details below.

Tafika operates from the Republic of Malawi and may use service providers or process data in other countries. Where we transfer your data across borders, we take steps to ensure it is protected in line with this Privacy Policy and applicable law.

We process your data where it is necessary to perform our contract with you (for example, to manage bookings and subscriptions), to comply with legal obligations, to pursue our legitimate interests in operating and improving the Platform, and, where required, on the basis of your consent (for example, for certain types of marketing).

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, provide additional notice on the Platform.

For privacy-related questions or requests about your data, contact us at privacy@tafikabooking.com.