Privacy Policy

Effective date: June 17, 2026.

DzalekaPay processes payments for merchants and customers in and around Dzaleka Refugee Camp, Malawi. Because many users are refugees and asylum seekers, identity information is treated with particular care. This policy explains what personal data we collect, why we process it, who we share it with, and your rights under Malawi's Data Protection Act, No. 3 of 2024.

DzalekaPay is the data controller for personal data collected through pay.dzaleka.com, the merchant dashboard, and related payment flows, except where we act only as a processor on behalf of a merchant.

Merchant accounts may include business name, camp location, contact phone, KYC documents, and transaction records. Payers may provide a mobile-money number, name, and email. Card numbers are entered only on PayChangu hosted checkout.

Privacy questions: info@mail.dzaleka.com. Malawi's Data Protection Authority is MACRA (https://www.dpa.mw/). Read the full HTML policy at https://pay.dzaleka.com/privacy.