Terms & Conditions

1. Introduction

These Terms and Conditions govern the use of the Data Protection Gap Analysis Tool ("the Tool") provided by Kawawa Limited ("we", "our", or "us").

By creating an account and using this Tool, you agree to comply with these Terms and Conditions and acknowledge the associated Privacy Notice.

If you do not agree with these terms, you should not create an account or use the Tool.

2. Purpose of the Tool

The Tool is designed to assist organisations in performing a structured self-assessment of their data protection compliance maturity based on applicable legal and regulatory requirements, including principles aligned with the Malawi Data Protection Act.

The results generated by the Tool are:

• Informational and advisory in nature
• Not constitute legal advice
• Not a formal compliance certification

Organisations remain responsible for ensuring their own compliance with applicable laws and regulations.

3. User Accounts

To access the Tool, users must create an account by providing certain information such as name, email address, organisation name, and password.

Users agree to:

• Provide accurate information
• Maintain the confidentiality of their login credentials
• Be responsible for activities conducted under their account

We reserve the right to suspend or terminate accounts that misuse the Tool or violate these Terms.

4. Acceptable Use

Users agree not to:

• Misuse the Tool for unlawful purposes
• Attempt to reverse engineer, copy, or reproduce the Tool without authorisation
• Input malicious data or attempt to compromise system security
• Use the Tool to misrepresent compliance status to regulators or third parties

5. Intellectual Property

All intellectual property rights in the Tool, including its methodology, are owned by Kawawa Limited. Use of the Tool grants you a limited, non-exclusive, non-transferable licence to access and use the Tool for your organisation's internal compliance purposes only.

6. Limitation of Liability

The Tool is provided "as is" without warranties of any kind. We shall not be liable for:

• Decisions made based on assessment results
• Loss arising from reliance on the Tool
• Any indirect or consequential damages resulting from its use

7. Privacy Notice

7.1 Personal Data We Collect

When users register and use the Tool, we may collect:

• Name
• Email address
• Organisation name
• Assessment responses
• System usage information

7.2 Purpose of Processing

Personal data collected is used for the following purposes:

• Creating and managing user accounts
• Enabling users to perform assessments
• Improving the functionality of the Tool
• Providing user support
• Generating compliance assessment reports

7.3 Confidentiality of Assessment Data

Assessment data submitted through the Tool is treated as confidential organisational information. We do not disclose assessment data to third parties except:

• Where required by law
• With the explicit consent of the user
• For technical hosting or support services under strict confidentiality obligations

7.4 Data Security

Appropriate technical and organisational measures are implemented to protect personal data against unauthorised access, loss or destruction, and alteration or disclosure.

7.5 Data Retention

User account data and assessment results are retained only for as long as necessary to provide the service or comply with legal obligations. Users may request deletion of their account and associated personal data.

7.6 User Rights

Users have been provided with methods to exercise the following rights:

• Access to their personal data
• Correction of inaccurate data
• Deletion of personal data where applicable
• Information about how their data is processed

To exercise these rights, contact us at dpa.kawawamw@gmail.com.

8. Updates to These Terms

We may update these Terms and Conditions from time to time. Continued use of the Tool after updates constitutes acceptance of the revised terms.

9. Governing Law

These Terms and Conditions shall be governed by the laws of Malawi, including principles under the Malawi Data Protection Act where applicable.

10. Contact Information

For questions regarding these Terms or the Privacy Notice, please contact:

Kawawa Limited — Data Protection Consultant

dpa.kawawamw@gmail.com