🎉 Free delivery on orders above MWK 5,000. Genuine products, warranty included!
Legal

Privacy
Policy

Your privacy matters to us. This policy explains what personal information we collect, why we collect it, how we use it, and the rights you have over your data.

Last Updated

This policy was last reviewed and updated on January 1, 2025.

Read Policy

Your Rights

You have full rights to access, correct, or delete your personal data at any time.

Your Rights

Data Security

We use encryption and secure processing to protect your information.

Learn More

Questions?

Contact our team if you have any questions about how we handle your data.

Contact Us

This Privacy Policy describes how Cool Enterprises ("we", "us", "our") collects, uses, stores, and protects your personal information when you use our website or purchase from us. We are committed to handling your data responsibly and in accordance with applicable Malawian laws.

1

Introduction

Cool Enterprises is a technology retail business operating in Malawi. We operate the website at coolenterprises.com and associated services. As the data controller, we are responsible for how your personal information is collected, processed, and stored.

This Privacy Policy applies to all personal information we collect through our website, in-store interactions, customer support communications, newsletter subscriptions, and any other interactions you have with us. By using our website or services, you consent to the data practices described in this policy.

If you are under the age of 18, please review this policy with a parent or guardian before providing us with any personal information. We do not knowingly collect data from children under 13 without verifiable parental consent.

2

Information We Collect

We collect different categories of personal information depending on how you interact with us. The table below summarises the main types of data we collect.

Category Examples Purpose
Identity Data First name, last name, username Account creation, order processing
Contact Data Email address, phone number, postal address Order delivery, customer support
Transaction Data Order history, purchase amounts, payment method used Fulfilment, refunds, fraud prevention
Technical Data IP address, browser type, device type, pages visited Security, analytics, site improvement
Profile Data Account preferences, wishlist, product reviews Personalisation, service improvement
Marketing Data Email subscription status, communication preferences Newsletters, promotional communications
Communication Data Contact form messages, support enquiries, WhatsApp chats Customer support, record keeping

We do not collect or store full payment card details. All card transactions are processed securely by PayChangu and subject to their privacy policy. We only receive a confirmation of payment status and a transaction reference number.

3

How We Collect Your Data

Information You Provide Directly

  • Registering for an account on our website
  • Placing an order and providing delivery and billing details
  • Submitting a contact form or support enquiry
  • Subscribing to our newsletter
  • Writing a product review or leaving feedback
  • Interacting with us via WhatsApp, phone, or in-store

Information Collected Automatically

When you visit our website, we automatically collect certain technical information through cookies and similar technologies, including your IP address, browser and device type, referring URLs, pages visited, and the date and time of your visit. This data is used for security, analytics, and improving our website experience.

Information from Third Parties

  • Payment processors (PayChangu, Airtel Money, TNM Mpamba): transaction status and reference numbers
  • Delivery partners: delivery confirmation and recipient details
  • Social media platforms: if you interact with our pages or click through to our site
4

How We Use Your Data

We use your personal information only for the purposes for which it was collected, and only where we have a lawful basis to do so. The primary purposes are:

Order Fulfilment & Account Management

  • Processing and confirming your orders
  • Arranging delivery of products to your address
  • Managing your customer account and order history
  • Sending order confirmation, dispatch notifications, and receipts
  • Processing returns, refunds, and warranty claims

Customer Support

  • Responding to your enquiries, complaints, and support requests
  • Following up on orders or delivery issues
  • Verifying your identity when required for security purposes

Marketing & Communications

With your consent, we may send you promotional emails, newsletters, and special offer notifications. You can opt out at any time by clicking the unsubscribe link in any email, or by contacting us directly. Withdrawing consent will not affect the lawfulness of any processing already carried out.

Legal & Security Obligations

  • Detecting and preventing fraud, abuse, or unauthorised activity
  • Complying with legal obligations including tax and financial regulations
  • Enforcing our Terms and Conditions
  • Maintaining records as required by Malawian law

We will never sell your personal data to third parties for their own marketing purposes. Your data is not a product.

5

Sharing Your Data

We share your personal data only when necessary and only with parties who are required to keep it secure and confidential. We do not sell, trade, or rent your personal information to third parties.

We May Share Data With

  • Payment processors: to securely process your payment (PayChangu, Airtel Money, TNM Mpamba)
  • Delivery partners: your name, phone number, and delivery address to arrange delivery
  • IT and hosting providers: companies that host our website and systems, bound by data processing agreements
  • Legal and regulatory authorities: where required by law, court order, or to protect against fraud or criminal activity
  • Professional advisers: lawyers and accountants, strictly on a need-to-know basis and subject to confidentiality obligations

Business Transfers

In the event that Cool Enterprises undergoes a business restructure, merger, or sale, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you in advance of any such transfer and your data will continue to be handled in accordance with this Privacy Policy.

We will never share your personal data with advertisers, data brokers, or any third party for their own commercial use without your explicit consent.

6

Cookies & Tracking Technologies

Our website uses cookies and similar tracking technologies to improve your browsing experience, remember your preferences, and understand how visitors use our site.

Types of Cookies We Use

Cookie Type Purpose Duration
Essential Required for the website to function — login session, shopping cart, security tokens Session / up to 30 days
Functional Remember your preferences such as language and region settings Up to 1 year
Analytics Understand how visitors use the site to improve performance and content Up to 2 years
Marketing Track visits from social media or email campaigns (only with consent) Up to 90 days

Managing Cookies

You can control or disable cookies through your browser settings at any time. Please note that disabling essential cookies may affect the functionality of the website, including your ability to add items to your cart or complete a purchase. Most browsers allow you to view, manage, block, and delete cookies via the browser settings menu.

7

Data Security

We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, alteration, disclosure, or destruction.

Security Measures We Employ

  • HTTPS encryption for all data transmitted between your browser and our servers
  • Secure password hashing — we never store plain-text passwords
  • Payment data is handled exclusively by certified payment processors and never stored on our servers
  • IP address logging for login attempts and order submissions to detect and prevent fraud
  • Account lockout after repeated failed login attempts
  • Regular backups and access controls to protect stored data
  • Restricted staff access — only authorised personnel can access customer data on a need-to-know basis

No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee its absolute security. We will notify you promptly in the event of a data breach that is likely to affect your rights.

8

Your Rights

You have a number of rights in relation to the personal data we hold about you. You can exercise any of these rights by contacting us at sales@coolenterprises.com. We will respond within 30 days.

Right of Access

Request a copy of all personal data we hold about you.

Right to Rectification

Request correction of inaccurate or incomplete data.

Right to Erasure

Request deletion of your personal data ("right to be forgotten").

Right to Object

Object to processing for direct marketing or other purposes.

Right to Portability

Receive your data in a structured, machine-readable format.

Right to Restrict

Request that we limit how we process your data in certain circumstances.

Withdraw Consent

Withdraw marketing consent at any time without penalty.

Lodge a Complaint

Complain to us or a relevant supervisory authority if dissatisfied.

To exercise any of these rights, please email us at sales@coolenterprises.com with the subject line "Data Rights Request" and include your full name, email address on file, and a description of your request. We may need to verify your identity before processing the request.

9

Data Retention

We retain your personal data only for as long as is necessary for the purposes set out in this Privacy Policy, or as required by law. The following retention periods generally apply:

Data Type Retention Period Reason
Customer account data For the life of the account + 3 years after closure Legal compliance, dispute resolution
Order and transaction records 7 years Tax and financial regulations (Malawi Revenue Authority)
Marketing consent records Until consent is withdrawn + 1 year Proof of consent, compliance
Contact form submissions 2 years Customer support records
Technical logs (IP, access) 90 days Security monitoring
Newsletter subscriptions Until unsubscribed + 90 days Delivery, compliance

When personal data is no longer required, it is securely deleted or anonymised. Where anonymisation is used, the resulting data cannot be used to identify you and may be retained indefinitely for statistical purposes.

10

Children's Privacy

Our website and services are not directed at children under the age of 13. We do not knowingly collect personal data from children under 13 years of age. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately at sales@coolenterprises.com and we will take steps to delete that information.

Users between the ages of 13 and 17 may use our website only with the involvement and consent of a parent or guardian. By placing an order or creating an account, you represent that you are at least 18 years of age or have obtained parental consent.

11

Third-Party Links

Our website may contain links to third-party websites, including manufacturer product pages, social media platforms, and payment gateways. These sites operate independently of us and have their own privacy policies.

We have no control over the content, privacy practices, or security measures of these third-party websites. We recommend that you review the privacy policy of any site you visit via a link from our website. Clicking a third-party link does not imply our endorsement of that site or its privacy practices.

  • PayChangu: handles card payments — see their privacy policy at paychangu.com
  • Facebook / Instagram: if you interact with our social media pages
  • Google Maps: used to display our store location — subject to Google's privacy policy
  • OpenStreetMap: used for our map embed — subject to their terms
12

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make changes, we will update the "Last Updated" date at the top of this page.

For significant changes that affect your rights, we will notify registered customers by email before the changes take effect. Your continued use of our website after the changes are posted constitutes your acceptance of the revised policy.

We encourage you to review this Privacy Policy periodically. You can always find the most current version at coolenterprises.com/privacy-policy.

13

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way we handle your personal data, please contact our team:

We aim to respond to all data-related enquiries within 5 business days. For formal data rights requests, please allow up to 30 days as required by applicable law.

Newsletter

Stay Ahead of
Every Deal

Get the latest offers, new arrivals, and tech news delivered straight to your inbox. No spam, ever.