Client Data Processing & Privacy Addendum

CLB Technologies Limited (Code Lab Technologies Limited)

Effective Date: 11th February 2026
Last Updated: 11th February 2026

This Client Data Processing & Privacy Addendum (“Addendum”) forms part of the service agreement, contract, proposal, or engagement between:

  • CLB Technologies Limited, also known as Code Lab Technologies Limited (“CLB Technologies”, “we”, “us”, “our”), and
  • The client organization, company, institution, or individual purchasing services (“Client”, “you”, “your”).

This Addendum explains how CLB Technologies processes, protects, and manages Client Data while delivering professional technology services.

1. Purpose of this Addendum

CLB Technologies provides ICT solutions, including but not limited to:

  • Software development
  • Web hosting and domain management
  • Email hosting and server administration
  • Network installation and support
  • Cybersecurity services
  • ICT consultancy and technical support
  • Cloud infrastructure and system integration
  • Training and digital transformation services

During delivery of these services, CLB may access, store, transmit, or process certain Client Data.

This Addendum ensures that:

  • Client Data is handled responsibly
  • Confidentiality is maintained
  • Security safeguards are applied
  • Legal compliance is supported

2. Definitions

For purposes of this Addendum:

Client Data

Any information provided by or belonging to the Client, including but not limited to:

  • Names, email addresses, phone numbers
  • Staff records, student records, customer data
  • Company documents and internal files
  • Database content
  • Authentication credentials
  • System logs and backups
  • Financial or operational records

Processing

Any operation performed on Client Data, including:

  • Accessing
  • Collecting
  • Storing
  • Hosting
  • Transmitting
  • Modifying
  • Backing up
  • Deleting

Services

The professional ICT, software, hosting, support, products, and technology services provided by CLB Technologies.

3. Roles of the Parties

Client Responsibilities

The Client remains the owner and controller of Client Data.

You are responsible for:

  • Ensuring you have lawful rights to provide data
  • Informing your users or customers of data use
  • Managing your internal compliance obligations

CLB Responsibilities

CLB Technologies acts as a service provider or processor, meaning:

  • We process Client Data only to deliver the agreed services
  • We do not claim ownership over Client Data
  • We do not use Client Data for unrelated purposes

4. Scope of Data Processing

CLB Technologies may process Client Data only for purposes such as:

  • Hosting websites, applications, and databases
  • Maintaining servers and network infrastructure
  • Providing ICT troubleshooting and support
  • Monitoring cybersecurity threats
  • Performing backups and disaster recovery
  • Configuring email services and user accounts
  • Developing or maintaining custom software systems
  • Providing analytics or performance optimization

CLB will not process Client Data outside the scope of service delivery without written authorization.

5. Confidentiality and Non-Disclosure

CLB Technologies agrees that:

  • All Client Data is confidential
  • Client Data will not be shared with unauthorized parties
  • Staff and contractors are bound by confidentiality obligations

We treat all Client information as private business information.

Confidentiality survives termination of the service relationship.

6. Security Measures and Safeguards

CLB Technologies implements reasonable technical and organizational measures, including:

Technical Security

  • SSL/TLS encryption for data transmission
  • Firewall protection and intrusion prevention
  • Secure server configurations
  • Regular patching and software updates
  • Multi-factor authentication, where applicable

Organizational Security

  • Restricted access to Client systems
  • Role-based permissions
  • Staff cybersecurity awareness
  • Secure handling of credentials and backups

Best Practice Commitment

We aim to follow industry best practices aligned with international standards such as ISO/IEC 27001 principles where feasible.

However, no system can guarantee 100% security.

7. Subcontractors and Third-Party Providers

To deliver services, CLB may rely on trusted third-party providers, including:

  • Cloud hosting providers
  • Domain registrars
  • Email infrastructure services
  • Payment processors
  • Security monitoring platforms

Any subcontractors will only receive the minimum necessary data and must maintain appropriate security obligations.

Examples may include:

  • Google Cloud
  • AWS
  • Microsoft Azure
  • Cloudflare
  • cPanel hosting environments

8. Data Location and Cross-Border Processing

Depending on hosting arrangements, Client Data may be stored or processed outside Malawi, including in international data centers.

CLB ensures reasonable safeguards are applied regardless of processing location.

9. Data Retention and Deletion

CLB retains Client Data only for as long as necessary to provide services.

Upon termination or completion of services:

  • Data may be returned to the Client upon request
  • Hosting content may be deleted after agreed timelines
  • Backup retention may apply for disaster recovery purposes

Clients are encouraged to maintain their own independent backups.

10. Client Instructions and Access Requests

CLB will follow lawful written instructions from the Client regarding:

  • Data access
  • Corrections
  • Exports
  • Deletion requests

Where applicable, Clients may request:

  • Copies of stored data
  • Account removal
  • Migration support

Requests should be submitted to:

info@clbtech.mw

11. Incident and Breach Notification

If CLB becomes aware of a significant security breach affecting Client Data, we will:

  • Investigate promptly
  • Notify the Client within a reasonable timeframe
  • Provide relevant details and mitigation steps

CLB is not responsible for breaches caused by:

  • Client negligence
  • Weak passwords
  • Unauthorized third-party access
  • Unmanaged devices or insecure networks

12. Client Responsibilities

The Client agrees to:

  • Use secure passwords and authentication
  • Maintain updated devices and software
  • Restrict internal access to sensitive systems
  • Inform CLB of suspicious activity immediately
  • Ensure lawful collection of data from end-users

Security is a shared responsibility.

13. Limitation of Liability

To the maximum extent permitted by law:

CLB Technologies shall not be liable for:

  • Indirect or consequential damages
  • Loss of profits or business interruption
  • Data loss caused by third-party attacks beyond reasonable control
  • Client-side misconfigurations or misuse

Our liability is limited to the fees paid for the affected services unless otherwise agreed.

14. Compliance and Legal Framework

CLB Technologies strives to comply with applicable privacy and data protection principles, including:

  • Lawful processing
  • Confidentiality
  • Data minimization
  • Security safeguards
  • Accountability

Clients operating under GDPR, HIPAA, or other regulations must notify CLB in advance for specialized compliance support.

15. Changes to this Addendum

CLB may update this Addendum from time to time.

The latest version will always be available here

Continued use of services after updates constitutes acceptance.

16. Contact Information

For privacy, data processing, or confidentiality concerns, contact:

CLB Technologies Limited (Code Lab Technologies Limited)
Website: https://clbtech.mw
Email: info@clbtech.mw
Address: Blantyre, Malawi

Scroll to Top