PRIVACY POLICY

1. Who we are

This website, mi-way.org, is operated by Malu Investment CC, a Namibian Close Corporation trading as MI-WAY. We are based in Oshakati, Northern Namibia, and provide taxi transport across Oshakati, Ongwediva and Ondangwa.

For privacy questions, contact us at info@mi-way.org or on WhatsApp at +264 81 211 1920.

2. What we collect

• Contact form data: your name, email, subject and message when you use the form on /contact.
• Chat data: messages you send to our AI assistant Mia via the chat widget on any page. We log these messages to improve the assistant.
• Operational data: server access logs (IP address, user agent, URL) for security and abuse prevention. We retain these for 30 days.

We do not use third-party analytics (no Google Analytics, no Meta Pixel, no Hotjar). We do not set tracking cookies.

3. How we use it

• To reply to your enquiries.
• To operate, secure and improve the website.
• To improve the Mia assistant via anonymised chat logs.

We do not sell your data. We do not send marketing email unless you ask for it.

4. Third parties we use

To run this site we share narrow slices of data with the following processors:

• Vercel - hosting and CDN (privacy).
• Cloudflare - DNS and CDN (privacy).
• Resend - transactional email delivery for the contact form (privacy).
• OpenRouter - large language model API used by the Mia chat widget (privacy).
• Meta Platforms (WhatsApp) - if you choose to contact us via WhatsApp, your messages are processed by Meta on their servers (privacy).
• Google Fonts - we serve font files from fonts.gstatic.com(privacy).

5. Cookies

We do not set any non-essential cookies. The site uses only session cookies required for the chat widget to function (it remembers the conversation within your session). No persistent tracking cookies. No third-party advertising cookies.

6. Your rights

Under the Namibia Data Protection framework and applicable international law, you have the right to:

• Ask what personal information we hold about you.
• Request correction or deletion of your data.
• Withdraw consent to processing at any time.
• Lodge a complaint with a regulator.

To exercise any of these rights, email info@mi-way.org. We will respond within 14 days.

7. Data retention

• Contact form messages: 12 months, then deleted.
• Chat logs with Mia: 90 days, then deleted.
• Server access logs: 30 days, then deleted.

8. Security

We use HTTPS with HSTS preload, strict Content-Security-Policy, X-Frame-Options DENY, and rate limiting on all interactive endpoints. Contact form data is delivered via Resend over TLS to a verified operator inbox.

9. Changes to this policy

We will update this page and the “Last updated” date when anything material changes. Material changes will be summarised at the top of this page for at least 30 days.