Privacy Policy & Data Protection Notice

1. Purpose and Data Controller

This public service platform is operated by the Office of the Member of Parliament for Mzimba South Luwerezi Constituency (Hon. Fischer Nkhwazi). The office acts as the Data Controller for information submitted through this website. The processing of personal data is carried out strictly to facilitate public civic engagement, constituency development monitoring, sports administration, and community issue resolution.

2. Information Collected

We collect only information reasonably necessary for public governance workflows:

• Community Issue Reports: Issue categories, geographic locations (ward, village, facility landmark), photographic evidence, issue descriptions, and optional contact credentials (name, phone number, email). Reports may be submitted anonymously without providing any identity credentials.
• Resident User Accounts: Full name, verified email address, telephone contact (optional), and securely hashed passwords.
• Sports Administration Data: Player full names, registered teams, match appearances, goals, and disciplinary records submitted by club officials and licensed referees.
• Technical Session Metadata: Language selection preferences stored in local browser storage, and essential session identifiers. We do not engage in commercial cross-site profiling or third-party advertising tracking.

3. Confidential Safeguarding & Abuse Reports

Safeguarding reports submitted through our confidential welfare pathway (safeguarding.html) are processed with strict data minimization. Safeguarding information is segregated from standard community infrastructure records. It is never accessible through the public tracking tool and is restricted strictly to authorized child protection officers and statutory authorities (District Social Welfare Office and Malawi Police Victim Support Unit).

4. Public Transparency Standard

Under the Access to Information Act, constituency development project registers, approved CDF budgets, contractor timelines, and independent verification logs are published as public records. However, personal complainant identities, phone numbers, and resident account credentials are protected and never disclosed in public oversight registers.

5. Data Storage, Security, and Encryption

All database communications utilize Transport Layer Security (TLS/HTTPS). User authentication records enforce Row Level Security (RLS) within PostgreSQL, ensuring that registered residents cannot inspect another resident's private case submissions. Administrative operations require multi-factor authentication (TOTP) and immutable audit logging.

6. Retention and Deletion Schedule

Case management records are retained for a minimum period of five (5) years following case resolution to support statutory audit trails of CDF expenditures and council maintenance logs. Records are not held indefinitely without civic justification. Residents may request the closure of their resident account or rectification of personal records at any time.

7. Resident Rights

Under Malawi data protection legislation, you hold the following rights:

• The right to request confirmation of what personal data is held about you.
• The right to request rectification of inaccurate records.
• The right to withdraw optional consent for communications.
• The right to submit reports anonymously without fear of reprisal.

8. Contact the Privacy Desk

For inquiries concerning data protection or to exercise statutory privacy rights: