Privacy Policy

1Overview

Nyasa Cloud ("we", "us", "our") respects your privacy. This policy applies to personal information collected through our website (nyasacloud.mw), our client portal (host.nyasacloud.mw), and when you purchase or use our hosting, domain, email, VPS, reseller or licensing services.

By using our website or services, you consent to the collection and use of information as described in this policy.

2Information We Collect

We collect the following categories of information:

• Account information: name, email address, phone number, physical address, and company details you provide when registering for an account or placing an order.
• Billing information: payment method details (e.g. Airtel Money, TNM Mpamba, bank transfer or card information), processed via our payment providers and WHMCS billing platform.
• Domain registration information: WHOIS/registrant details required by domain registries when you register or transfer a domain.
• Technical information: IP address, browser type, device information, and pages visited, collected automatically via cookies and server logs.
• Support communications: messages, tickets, and call records when you contact our support team.
• Hosted content: files, databases, emails and other data you store on our servers ("Customer Content"), which remains yours and is accessed by us only as necessary to provide support or comply with the law.

3How We Use Your Information

We use the information we collect to:

• Provide, operate and maintain your hosting, domain and email services;
• Process payments, issue invoices, and manage billing and renewals;
• Respond to support requests and provide customer service in Chichewa or English;
• Send important service notices, such as renewal reminders, maintenance notices, and security alerts;
• Send marketing communications about new features, offers and hosting tips — only if you have opted in, and you can unsubscribe at any time;
• Detect, investigate and prevent fraud, abuse, and security incidents;
• Comply with legal obligations, including domain registry and tax requirements.

4Cookies & Tracking

Our website and client portal use cookies and similar technologies to:

• Keep you logged in to your account securely;
• Remember preferences such as billing cycle (monthly/annual) and selected service tabs;
• Understand how visitors use our website, so we can improve it.

You can control cookies through your browser settings. Disabling cookies may affect your ability to log in to the client portal or use certain features of the website.

5Sharing & Third Parties

We do not sell your personal information. We may share information with:

• Domain registries and registrars (e.g. for .mw, .co.mw and global domains), as required to register, transfer or manage your domain;
• Payment processors and mobile money providers (Airtel Money, TNM Mpamba, card processors, banks) to process transactions;
• Infrastructure and security providers that power our hosting platform (such as our upstream data center and security software providers), under contractual confidentiality obligations;
• Law enforcement or regulators, where required by Malawian law or a valid legal process.

Any third party we share data with is required to protect it to a standard consistent with this policy.

6Payment Information

Payment card and mobile money details are processed through our billing platform (WHMCS) and payment providers. We do not store full card numbers on our own servers. Mobile money transactions (Airtel Money, TNM Mpamba) are processed directly with the relevant mobile network operator.

7Data Retention

We retain account and billing information for as long as your account is active, and for a reasonable period afterwards to comply with tax, accounting and legal obligations (typically up to 7 years for financial records, in line with Malawian tax requirements).

Hosted Customer Content is retained for a grace period after service cancellation or non-payment, after which it may be permanently deleted. We recommend keeping your own backups at all times — see our Terms of Service for details.

8Data Security

We use industry-standard security measures to protect your information, including:

• Free SSL/TLS encryption for data in transit on hosted websites and the client portal;
• Imunify360 malware scanning and intrusion protection on hosting infrastructure;
• Access controls limiting staff access to customer data to what is necessary for support;
• Regular automated backups of hosting accounts.

No system is completely secure. If we become aware of a data breach affecting your personal information, we will notify affected customers and relevant authorities as required by law.

9Your Rights

Depending on your location, you may have rights to:

• Access the personal information we hold about you;
• Request correction of inaccurate information;
• Request deletion of your information, subject to our legal retention obligations;
• Object to or restrict certain processing, including marketing communications;
• Request a copy of your data in a portable format.

To exercise any of these rights, contact us at hello@nyasacloud.mw. We will respond within a reasonable timeframe.

10Children's Privacy

Our Services are not directed at children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

11International Data Transfers

Because our hosting infrastructure includes data centers outside Malawi (including the United States, Germany and Singapore), your hosted content and certain account data may be processed in those countries. We take steps to ensure such transfers are protected to a standard consistent with this policy, including contractual safeguards with our infrastructure providers.

12Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a revised "Last updated" date, and notify active customers by email of material changes.

13Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us: