Privacy Policy

Last Updated: January 1, 2026

1. Introduction

BuyNow Malawi ("we", "our", or "us") operates the buynowmw.com website (the "Platform"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Platform, including all functionality and services offered on our Platform. Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our Platform. By accessing and using BuyNow Malawi, you acknowledge that you have read, understood, and agree to be bound by all the provisions of this Privacy Policy.

2. Information We Collect

We collect information in the following ways:

2.1 Information You Provide Directly

• Account Registration: Username, email address, phone number, password, name, delivery address, and payment details.
• Purchase Information: Product selections, order history, payment method, shipping and billing addresses, and transaction details.
• Communication: Messages, reviews, ratings, comments, and feedback you submit to us.
• Customer Support: When you contact us, we collect the content of your communication and any supporting documentation.

2.2 Information Collected Automatically

• Usage Data: Pages viewed, products searched for, time spent on the Platform, clicks, and browsing patterns.
• Device Information: IP address, browser type, operating system, device type, and unique device identifiers.
• Location Data: General location based on IP address (country/city level, not precise).
• Log Files: Server logs containing access times, pages viewed, referrer URLs, and error messages.

2.3 Cookies and Tracking Technologies

What are cookies? Cookies are small files placed on your device that store information about your browsing activity and preferences.

Cookies we use:

• Session Cookies: Temporary cookies that help us maintain your login session and shopping cart during your visit.
• Preference Cookies:
  • buynow_cookie_preferences - Stores your cookie consent choices (365 days)
  • buynow_cookies_accepted - Tracks if you accepted our cookie policy (365 days)
  • interested_categories - Records product categories you view for personalization (365 days)
• Behavioral Tracking Cookies:
  • viewed_products - Stores product IDs you've clicked on to show similar items (365 days)
  • user_searches - Maintains your search history for personalized recommendations (365 days, max 20 searches)
• Analytics Cookies: Help us understand user behavior and improve our Platform (set per your preference).

Cookie Management: You can control cookies through our cookie consent banner when you first visit. You can also manage cookies in your browser settings. Disabling cookies may limit some Platform functionality.

3. Legal Basis for Data Processing

We process your personal data based on the following legal grounds:

• Contract: To fulfill our agreement with you (account creation, purchases, delivery).
• Legitimate Interest: To improve our services, prevent fraud, and personalize your shopping experience.
• Consent: When you opt-in to preference cookies, marketing communications, and analytics.
• Legal Obligation: To comply with applicable laws and regulations.

4. How We Use Your Information

We use collected data for the following purposes:

• To create and manage your account
• To process, fulfill, and deliver your orders
• To send transactional emails (order confirmations, shipping updates, receipts)
• Personalization: To show product recommendations based on your browsing history and interests
• To improve our Platform, features, and user experience
• To conduct analytics and understand user behavior patterns
• To detect and prevent fraud, abuse, and security incidents
• To provide customer support and respond to inquiries
• To comply with legal obligations and law enforcement requests
• Marketing (only with consent): To send promotional emails, special offers, and product recommendations

5. Personalization & User Interest Tracking

BuyNow Malawi uses cookies to provide a personalized shopping experience. When you accept preference cookies, we track:

• Product categories you view
• Individual products you click on
• Search terms you enter

This information helps us display relevant products and recommendations tailored to your interests. You control this feature through our cookie consent system - preference cookies are only active if you explicitly accept them.

6. Data Sharing and Disclosure

We do NOT sell your personal data. However, we may share data with:

• Service Providers: Payment processors, email service providers, hosting providers, and analytics services that assist in our operations.
• Legal Requirements: Law enforcement, government agencies, or courts when required by law.
• Business Transfers: If we merge, acquire, or sell assets, your data may be transferred as part of that transaction.

7. Security of Your Data

We implement industry-standard security measures to protect your personal data, including:

• SSL/TLS encryption for data in transit
• Secure password storage with hashing algorithms
• Access controls and authentication protocols
• Regular security audits and updates
• Restricted employee access to sensitive data

Important: No method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

8. Data Retention

We retain your personal data for different periods depending on the type:

• Account Data: Retained for the duration of your account. If you delete your account, data is retained for 90 days for recovery purposes, then deleted.
• Preference Cookies: 365 days from the date set, or until you clear browser cookies.
• Behavioral Tracking Cookies: 365 days from the date set, or until you clear browser cookies.
• Order/Transaction Data: Retained for 7 years to comply with financial regulations and tax requirements.
• Support Communications: Retained for 3 years after the last interaction for reference and dispute resolution.
• Analytics Data: Aggregated data retained indefinitely; individual user data deleted after 26 months.

9. Your Privacy Rights

You have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Correction: Request that we correct inaccurate or incomplete information.
• Right to Deletion: Request deletion of your personal data (subject to legal obligations).
• Right to Restrict Processing: Request that we limit how we use your data.
• Right to Portability: Request your data in a portable format.
• Right to Withdraw Consent: Withdraw consent for cookies and marketing communications at any time.
• Right to Opt-Out of Marketing: Unsubscribe from promotional communications via the link in any email.

To exercise these rights, contact us using the information in Section 12.

10. Third-Party Services & External Links

Our Platform may contain links to third-party websites and services that are not operated by us. This Privacy Policy applies only to BuyNow Malawi. We are not responsible for the privacy practices of external sites. We recommend reviewing the privacy policies of any third-party services before providing your information.

Third-party services we use:

• Payment processors (for secure payment handling)
• Email service providers (for transactional emails)
• Web hosting providers (for Platform infrastructure)
• Analytics services (to understand user behavior)

11. International Data Transfers

Your personal data is primarily stored and processed in Malawi. If we transfer data internationally, we implement appropriate safeguards to protect your information in compliance with applicable data protection laws.

12. Children's Privacy

BuyNow Malawi is not intended for individuals under 13 years of age. We do not knowingly collect personal data from children under 13. If we become aware that we have collected data from a child under 13, we will promptly delete such information. If you believe we have collected data from a child under 13, please contact us immediately.

13. Contact Us

If you have questions about this Privacy Policy, wish to exercise your rights, or have privacy concerns, please contact us:

• Email: support@buynowmw.com
• Phone: +265 983 494 108
• Mailing Address: BuyNow, Lilongwe 03, Malawi
• Privacy Officer: We will respond to privacy requests within 30 days

14. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by updating the "Last Updated" date and sending you an email notification. Your continued use of our Platform after such modifications constitutes your acceptance of the updated Privacy Policy. We encourage you to review this policy regularly to stay informed about how we protect your information.

15. Compliance & Legal Basis

BuyNow Malawi is committed to protecting your privacy in compliance with:

• Data Protection Principles
• Consumer Protection Standards
• E-commerce Regulations
• International Privacy Standards (GDPR principles)