oneKhusa Privacy Policy

1.1. “Applicable Data Protection Laws” shall mean all legislation, regulations or guidance notes in the Republic of Malawi protecting the fundamental rights and freedoms of individuals in respect of their right to privacy with respect to the Processing of Personal Data. This includes the Electronic Transactions and Cybersecurity Act, 2016 (“ETCA”) and Data Protection Law of 2024.
1.2. "Biometric Information"  shall refer to the face and fingerprints of an individual Customer captured and stored in the Database and used to identify that individual Customer. 
1.3. "Client" shall mean anyone using the KhusaPay platform who to which this Policy relates.
1.4. “Consent” means any freely given specific and informed indication by a Data Subject, of his wishes, by agreement, to his Personal Data being collected, Processed or stored;
1.5. “Customer” means the natural person who is transacting with the Client and who submits Personal Data on the Platform either directly or indirectly for the purposes determined by the Client; 
1.6. “Data” means electronic presentation of information in any form; 
1.7. “Data Controller” means a person who, acting either alone or in common with other persons, determines the purpose for which, and the manner in which, any Personal Data is Processed, or is to be Processed and thus, controls and is responsible for the keeping and using of Personal Data, and the term includes a person who collects, Processes or stores
Personal Data.   For the purpose of this Policy, the Financial Institution is the Data Controller. 
1.8. “Data Processor” means a person who conducts any Processing of Personal Data under the written instruction of the Data Controller without coming under the authority of the Data Controller.  For the purposes of this Policy, Angle Dimension is the Data Processor.
1.9. “Data Subject” means a person from whom Data, relating to that person is collected, Processed or stored by a Data Controller.  For the purpose of this Policy, the Customer is the Data Subject.
1.10. “Electronic Signatures” shall mean data attached to, incorporated in, or logically associated with, other data and which is intended by the user to serve as a signature; as defined in the Electronic Transactions and Cybersecurity Act, 2016.
1.11. “KYC” means know-your-customer and shall refer to the obligations imposed on Institutions to know the identity, circumstances and risks associated with any Customer or potential Customer prior to providing any services to the Customer. e-KYC shall refer to electronic know-your-customer.
1.12. “Personal Data” means any information relating to an individual who__ (a) may be directly identified; or (b) if not directly identified, may be identifiable by reference to an identification number or one or several elements related to his physical, physiological, genetic, psychological, cultural, social, or economic identity.
1.13. “Platform” shall mean KhusaPay, the payment gateway which allows merchants, institutions and government entities to process Personal Data of Customers for the purpose of performing payments obligations.
1.14. “Processing of Data” means any operation or set of operations which is performed upon   Data,   whether   or   not   by   automatic   means,   such   as   collection,   recording, organization, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination,
blocking, erasure or destruction.
1.15. “Record”  means recorded information, in any form, including Data in computer systems, created or received and maintained by a public and private body in the course of official duties and kept as evidence of such activity. 
1.16. "Super  Admin"  shall   mean   the   employee   or   representative   of   the   Institution nominated by the Institution to administer the full operation of the Platform on behalf of the Institution. 
1.17. “Third Party/ies” shall mean any other natural or juristic person that is not You, the User, or Ourselves. 
1.18. “User” shall mean the employees or representatives of the Client who are granted use of the Platform and are appointed by the Super Admin of the Client and have their roles on the Platform assigned to them by the Super Admin.