A roadside platform knows where you are, what you drive, and when you are stranded. This page sets out the safeguards around that data: who can see it, how it is secured, how long it is kept, and how to make us act on your rights.
People use TowME at the worst moment of their day. To send help we need your location, your vehicle, and a way to reach you - the kind of detail that has to be earned and then protected. This statement describes the controls we put around it in practice, in plain terms, so you can hold us to them.
TowME Namibia is responsible for the personal data processed through the TowME Namibia website, mobile application, and related roadside assistance services. We decide what is collected and why, and we remain accountable for it even where a service provider handles it on our behalf.
Namibia's privacy protections flow from the Constitution and general law rather than a single data protection statute. Where there is no local rule to follow, we apply the principles used internationally under GDPR and POPIA, because they are the standard our users are entitled to expect.
Everything below exists because a specific part of the service needs it. If a field is not needed to dispatch help, bill for it, or prove it happened, we do not ask for it.
Technical and organisational measures in place today:
No platform can promise absolute security, and we will not pretend otherwise. What we can commit to is that these controls are in place, that they are reviewed when the platform changes, and that a weakness found is a weakness fixed.
Access is decided by role, not by seniority, and each role sees the narrowest set of data that lets it do its job.
Running the platform means relying on specialist providers. They act on our instructions, for the purpose we engage them for, under terms that require them to keep the data secure and confidential.
TowME runs on managed cloud infrastructure, which means your data may be stored or processed outside Namibia. Where that happens, we use providers that operate to recognised security standards and are bound by contractual confidentiality and security obligations.
Wherever it sits physically, the same access model applies: the data belongs to you, TowME remains accountable for it, and the provider may not use it for its own purposes.
Data is kept while there is a reason to keep it, and no longer. In practice that reason is one of three things: the service is still running, the law requires the record, or a dispute is still open.
When a retention reason falls away, the data is deleted or anonymised so it can no longer be linked back to you.
You can ask us to:
Send the request from the email address on your account, or be ready to verify your identity another way - we will not hand account data to somebody who simply claims to be you. We aim to respond within 30 days, and will tell you if a request needs longer or cannot be met in full, with the reason.
You can ask for your account and its personal data to be deleted at any time. The request form sets out what is removed, what has to be retained, and how long it takes.
TowME accounts are for adults. The platform is not directed at children, and we do not knowingly create accounts for them. If you believe a child's data has reached us, tell us and we will remove it.
Where an incident affects personal data, we will:
If you believe your account has been accessed by somebody else, contact us immediately on the details above and change your password.
As the platform changes, so will this page. Material changes will be reflected here, and continued use of TowME after an update means the updated statement applies to you.
Raise anything about your data with us first - it is the fastest route to a fix. If you are not satisfied with how we have handled it, say so in writing to legal@towmenamibia.com and it will be reviewed again. Nothing on this page limits any right you have to take a complaint to a competent authority or to the courts of Namibia.
