Pre-launch privacy standard
Trust is part of the infrastructure.
This draft governance standard covers the PDM Namibia website’s membership, civic-participation, contact and support-interest journeys. It explains the controls already built and identifies the decisions PDM must approve before live public-data collection. It is not a claim that Namibia currently has a comprehensive data-protection statute in force.
Cloudflare Access plus an approved-account allowlist protects the staff console
Turnstile protects public intake from automated abuse
Every successful submission receives a private reference
Information the platform receives
The membership journey can receive identity and contact details, region and constituency, participation interests, skills, availability and optional motivation. Public-participation and contact forms receive messages and routing details. A donation-interest form can receive donor category, proposed amount or in-kind support, purpose and contact details, but never card, CVV or online-banking credentials.
Why PDM uses it
Information is used only to assess membership, moderate and assign public ideas, respond to enquiries, conduct donation compliance review, maintain an audit trail and improve constituent service. It is not collected for unrelated advertising, commercial profiling or sale.
Political affiliation deserves stronger care
A membership application can reveal political affiliation. The platform keeps membership data out of public pages and general analytics, restricts the staff console to approved accounts and separates consent to receive campaign or event communications from the application itself. Role- and region-scoped access remains a launch requirement.
Publication is always a separate decision
Ideas and contact messages are private by default. A public idea can be published only when the contributor separately permits it and a human moderator approves and removes private details. Nothing is auto-published from an intake form.
Access, correction and withdrawal
A person may quote their private reference when asking PDM to review, correct or delete information, or to withdraw optional communications consent. PDM must verify the requester and assess each request against applicable legal and operational retention duties. The reference helps locate a record; it does not prove identity.
Political donations require compliance review
A support interest is nonbinding and is not an accepted payment or a compliance clearance. Before acceptance, PDM’s approved finance process must verify the source and statutory donor category, aggregate accepted cash and in-kind support for the relevant financial year, assess value and conditions, and complete any required reporting or disclosure. The platform does not store card or bank credentials.
Retention and final approval
PDM must approve a formal retention schedule, membership and donation rules, responsible privacy contact and processor disclosures before production intake is enabled. Until those controls and the secure database are provisioned, the platform is designed to fail closed rather than pretend a submission succeeded.
Privacy and data requests
Open contact deskRequest instructions first.
Until PDM appoints a responsible privacy contact and a restricted workflow, choose “General enquiry,” quote your reference and ask for instructions. Do not send identity documents through the general form. The current inbox is protected, but it is not yet role-restricted as a dedicated privacy desk.