Privacy Statement

Transparency International Zambia (TI-Z) – Privacy Statement

Effective date: [1 January 2026]
Applies to: TI-Z websites, online platforms, mobile/online forms, email/SMS/phone communications, events, and programmes (including reporting and advisory services such as ALAC, where applicable).

1) Who we are

Transparency International Zambia (TI-Z) (“we”, “us”, “our”) is the data controller for personal data we collect and use through our services and platforms.

We process personal data in line with the Data Protection Act, No. 3 of 2021 (Zambia) and guidance from the Data Protection Commission. (Parliament of Zambia)

2) What personal data we collect

Depending on how you interact with TI-Z, we may collect:

A. Information you provide

• Identity & contact details: name, email, phone number, organisation, job title, address (if relevant).
• Engagement information: messages you send, requests for support, feedback, survey responses.
• Programme/service information: information relevant to your participation in TI-Z programmes, trainings, events, or publications.

B. Reports and case-related information (where applicable)
If you submit a corruption report/complaint or request advice, we may collect:

• Details of the report/complaint, supporting documents, and related correspondence.
• Information about individuals mentioned in the report.
• Sensitive personal data where it is included in the report (for example, allegations, legal issues, identifiers, or other sensitive details).

C. Technical information

• IP address, device/browser type, pages visited, timestamps, and similar analytics and security logs (often via cookies/analytics tools).

3) Why we use your data (purposes)

We use personal data to:

• Provide and improve TI-Z services, programmes, and communications.
• Respond to enquiries, manage requests, and provide support.
• Receive and manage reports/complaints, and conduct assessments or referrals where appropriate.
• Organise events, trainings, and outreach activities.
• Conduct research, policy work, advocacy, monitoring, learning, and reporting (including aggregated statistics).
• Maintain platform security, prevent misuse, and detect fraud/cyber threats.
• Meet legal, regulatory, audit, and governance obligations.

4) Legal basis for processing

We process your personal data only where we have a lawful basis, which may include:

• Consent (e.g., subscriptions, optional surveys, certain communications).
• Legitimate interests (e.g., delivering our services, improving platforms, preventing abuse, promoting transparency and integrity), provided your rights do not override those interests.
• Legal obligations (e.g., compliance and record-keeping requirements).
• Public interest / vital interests where applicable (e.g., serious risks or urgent safeguarding situations).

Zambia’s Data Protection Act sets the framework for lawful processing and related obligations for controllers/processors. (Parliament of Zambia)

5) How we protect confidentiality (especially for reports/complaints)

We understand that many interactions with TI-Z can be sensitive. We take reasonable steps to:

• Limit access to personal data to authorised staff/consultants on a need-to-know basis.
• Use secure storage and access controls (e.g., passwords, role-based permissions).
• Apply confidentiality practices when handling reports and supporting documents.
• Minimise collection and sharing of identifying details where possible.

6) When we share your data

We do not sell personal data.

We may share personal data only when necessary, including with:

• Service providers who help us run our operations (e.g., hosting, email, analytics, security, event tools) under appropriate safeguards.
• Partners and funders only in aggregated or anonymised form where possible; if identifiable data is required, we will do so only where lawful and necessary.
• Authorities or relevant bodies where we are legally required to do so, or where referral is requested/appropriate and lawful.
• Professional advisers (e.g., auditors, legal advisers) under confidentiality obligations.

7) International transfers

If we use service providers or partners outside Zambia, your data may be transferred and processed in other countries. Where this happens, we apply appropriate safeguards consistent with applicable law and good practice.

8) Data retention

We keep personal data only as long as necessary for the purposes described above, including:

• Legal and audit requirements,
• Programme reporting and accountability,
• Security and incident logs,
• Case management needs (where applicable).

Retention periods may vary depending on the type of data and service. We also securely delete or anonymise data when it is no longer needed.

9) Your rights

Subject to applicable law, you may have rights to:

• Request access to your personal data,
• Request correction of inaccurate data,
• Request deletion or restriction of processing (where applicable),
• Object to certain processing,
• Withdraw consent (where processing is based on consent).

The Data Protection Commission outlines data subject rights and related compliance expectations. (dataprotection.gov.zm)

10) Cookies and analytics

Our websites may use cookies or similar technologies to:

• Enable core site functionality,
• Measure traffic and usage patterns,
• Improve content and performance,
• Support security monitoring.

You can control cookies through your browser settings. Some features may not work properly if cookies are disabled.

11) Third-party links

Our platforms may link to third-party websites (e.g., partner sites, social media). We are not responsible for their privacy practices—please review their privacy statements.

12) Children’s privacy

Our services are generally intended for a general audience. If we become aware we have collected personal data from a child without appropriate consent where required, we will take steps to delete it or address it appropriately.

13) Changes to this statement

We may update this Privacy Statement from time to time. The “Effective date” at the top will show when it was last updated.

14) Contact us

For privacy questions, requests, or complaints, contact:
Data Protection / Privacy Contact – Transparency International Zambia (TI-Z)
Email: [info@tizambia.org.zm]
Phone:  [+260 973 683 431]
Address: Plot number 128 Mwambula Road, Jesmondine, Lusaka, Zambia

---

If you tell me where this will be used (main TI-Z website, ALAC platform, elections portal, etc.), I can tailor: (1) the exact data categories, (2) cookie wording, and (3) a short consent notice for forms (e.g., “By submitting this report…”).