TRUST

DPA 2024 statement

Effective 24 August 2026 · MediaClip, Gaborone, Botswana

MediaClip's service is designed and operated to support compliance with Botswana's Data Protection Act 2024 (Act 18 of 2024). This statement describes how our processing aligns with the Act's core requirements and what enterprise clients can expect from us as a data processor.

How we handle the Act's data-protection principles

Lawful, fair and transparent processing

We collect personal data only for defined purposes disclosed in our Privacy Policy, in our contracts with clients, and on the forms we present to visitors.

Purpose limitation

Demo request information is used to respond to enquiries and manage sales follow-up. Client account data is used to deliver the service the client has subscribed to. It is not repurposed for unrelated activities.

Data minimisation

Our forms and account records collect only what we need. We do not require personal information beyond what is necessary to respond to a request or operate the service.

Accuracy

Data subjects and enterprise clients may request correction of inaccurate personal data at any time by emailing dumela@mediaclip.net.

Storage limitation

Retention periods are set out in our Privacy Policy and in each client's service agreement. Data no longer required is deleted or anonymised.

Integrity and confidentiality

Technical and organisational safeguards protect data against unauthorised access, alteration or loss. See our Security page for detail.

Accountability

MediaClip maintains internal records of processing activities and reviews controls periodically. Enterprise clients receive a written Data Processing Agreement setting out the parties' responsibilities.

Data subject rights

Under DPA 2024 you may request:

Access to personal information we hold about you.
Correction of inaccurate or incomplete data.
Deletion of your data where the Act permits.
Objection to certain uses of your data.

Send requests to dumela@mediaclip.net. We aim to respond within the timeframe required by law and will confirm identity before disclosing personal information.

Data Processing Agreement

Enterprise engagements are covered by a Data Processing Agreement setting out:

The categories of personal data and data subjects.
The nature and purpose of processing.
Retention periods and deletion at end of service.
Sub-processors and the process for changes.
Security measures and personal-data breach notification.
Assistance with data subject requests and regulatory obligations.

Data residency

Client data — the coverage MediaClip monitors on behalf of a client, together with account and configuration data — is processed in cloud regions selected for reliability, latency to Botswana, and legal compatibility with Botswana's Data Protection Act 2024.

Primary processing regions — African and European cloud regions operated by established providers. Region selection is confirmed in each client's Data Processing Agreement.
Backups — encrypted, retained per the retention schedule in each client's service agreement, and stored in regions consistent with the primary-processing selection.
Client-specific requirements — where a client (typically a regulated financial institution or a public-sector body) requires processing to be confined to specific regions, MediaClip can accommodate that in the DPA, subject to feature availability at the requested region.

International transfers

Where cross-border processing is involved — for example, when a client's data is analysed by a cloud service operating in a region outside Botswana — MediaClip relies on the safeguards required by DPA 2024, on our client-agreement commitments, and on the published data-processing addenda of our sub-processors. No client data is transferred to a jurisdiction lacking a comparable data-protection regime without the client's written instruction.

Regulator registration

MediaClip's registration status with Botswana's Data Protection Commissioner is provided to enterprise clients in the Data Processing Agreement pack. Regulated clients (banks, insurers, pension funds, telecommunications operators) that require confirmation before contract signature can request it in advance from dumela@mediaclip.net.

Personal-data breach notification

Where a personal-data breach occurs, MediaClip notifies affected clients — and, where required by law, the Botswana Data Protection Commissioner — within 72 hours of becoming aware of the breach. Where a full assessment cannot be completed within that window, an initial notification is issued and updated as the investigation progresses. See the Security page for the full incident-response process.

Contact

For DPA 2024 questions, DPA templates, or a copy of the enterprise Data Processing Agreement:

MediaClip
Gaborone, Botswana
dumela@mediaclip.net