Trust & SafeguardingOfficial Governance Document

Privacy Policy & Safeguarding

How Stop Cyberbullying Malawi protects user data, respects visitor privacy, and ensures child online safety.

Current scope: informational website; no visitor-submission forms are active.

Section 01

Data collection & minimisation

We aim to collect only the personal information needed to provide a clearly described service. At the time of publication, this website is informational: it does not offer ambassador registration, newsletter signup, contact enquiry, or quiz submission forms. The evidence checklist does not send or save your selections.

If registration or optional forms are introduced, the information requested and the reason for collecting it will be explained before you submit anything. Participation will be voluntary except where information is necessary to provide a service you request.

Section 02

How submitted information may be used

If a form is introduced, information will be used only for the purpose stated beside that form. Depending on the service, this may include coordinating volunteers, arranging workshop logistics, responding to a general enquiry, or delivering educational materials that were requested.

Information will not be repurposed for public accusations, naming or shaming, or unrelated marketing. Any future newsletter would require a clear, optional subscription and a way to unsubscribe.

Section 03

Child safeguarding

Children and young people should not be asked to provide unnecessary personal details. Before any school ambassador registration involving someone under 18 is offered, an appropriate safeguarding process must be in place, including explicit parent or guardian consent and age-appropriate participation.

We will not publish a minor’s name, photograph, school, location, or other identifying details without verified written consent from a parent or guardian and the young person’s informed agreement where appropriate. A child’s safety and best interests take priority over publicity.

Section 04

Security & storage

The project includes a Supabase PostgreSQL schema with Row Level Security (RLS) policies. This website is not currently connected to an active Supabase data-collection flow, so the schema should not be understood as evidence that submitted visitor data is presently being stored there.

Before any collection service launches, it must be deployed over HTTPS (which encrypts data in transit), use appropriately configured RLS and least-privilege administrator access, and be tested for its intended security controls. No system or transmission method can be promised to be completely secure.

Section 05

Your choices & data rights

If a future form collects personal information, its notice should explain how to request access, correction, or deletion, and any limits that may apply. Requests should be handled through a verified campaign privacy contact, with reasonable steps to confirm the requester’s identity before making changes.

A dedicated privacy coordinator contact channel has not yet been published. Until one is provided, this website cannot accept privacy requests or incident reports. Please do not put sensitive information in public comments or social posts; use the relevant service’s official privacy channel where available.