Privacy Policy
IP Consulting
Effective Date: 15/10/2025
Last Updated: TBD
1. Introduction
IP Consulting (“we”, “our”, or “us”) is committed to protecting your privacy and personal data in accordance with the Zambia Data Protection Act No. 3 of 2021. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website.
2. Scope of This Policy
This policy applies to all personal data collected through our website, including:
-
Event registration forms
-
Contact forms
-
Newsletter subscriptions
-
Cookies and analytics tools
It applies to all users, regardless of location, but is specifically designed to comply with Zambian law.
3. Definitions
-
Personal Data: Any information that identifies or can be used to identify an individual.
-
Sensitive Personal Data: Includes race, ethnic origin, health data, biometric data, religious beliefs, etc.
-
Data Subject: The individual whose personal data is being processed.
-
Data Controller: IP Consulting, which determines the purpose and means of processing personal data.
-
Data Processor: Any third party that processes data on behalf of IP Consulting.
4. Legal Basis for Processing
We process personal data based on:
-
Consent: You have explicitly agreed to the processing.
-
Contractual Necessity: To fulfill a service or agreement.
-
Legal Obligation: Compliance with applicable laws.
-
Legitimate Interest: For business operations, provided your rights are not overridden.
5. Types of Data Collected
We may collect:
-
Identity Data: Name, email, phone number.
-
Technical Data: IP address, browser type, device information.
-
Usage Data: Pages visited, time spent, interactions.
-
Event Data: Information submitted during registration.
-
Communication Data: Messages sent via forms or email.
6. Collection Methods
Data is collected through:
-
Direct input via forms
-
Cookies and tracking technologies
-
Third-party integrations (e.g., Wix, Google Analytics)
7. Purpose of Data Collection
We use your data to:
-
Register and manage event participation
-
Respond to inquiries
-
Improve website functionality
-
Send updates and promotional content (with consent)
-
Comply with legal obligations
8. Data Sharing and Disclosure
We do not sell your data. We may share it with:
-
Wix.com (hosting provider)
-
Third-party service providers (e.g., email platforms)
-
Legal authorities if required by law
All third parties are bound by confidentiality and data protection agreements.
9. International Data Transfers
If data is transferred outside Zambia, we ensure:
-
Adequate protection measures
-
Data processing agreements
-
Compliance with Section 12 of the Data Protection Act
10. Data Subject Rights
Under Zambian law, you have the right to:
-
Access your personal data
-
Rectify inaccurate data
-
Erase data (“Right to be Forgotten”)
-
Object to processing
-
Restrict processing
-
Data Portability
-
Withdraw Consent
-
Avoid Automated Decisions
To exercise these rights, contact:
Email: [Insert Email]
Phone: [Insert Phone Number]
11. Data Retention
We retain personal data only as long as necessary for:
-
Legal compliance
-
Business operations
-
Event management
Data is securely deleted or anonymized when no longer needed.
12. Data Security
We implement:
-
SSL encryption
-
Secure servers
-
Access controls
-
Regular security audits
Wix also provides built-in security features to protect your data.
13. Cookies and Tracking
Our site uses cookies to:
-
Enhance user experience
-
Analyze traffic
-
Remember preferences
You can manage cookie settings via your browser or our cookie banner.
14. Children’s Data
We do not knowingly collect data from individuals under 18. If such data is discovered, it will be deleted immediately.
15. Data Breach Notification
In case of a breach, we will:
-
Notify affected individuals
-
Report to the Data Protection Commissioner
-
Take corrective action
16. Registration and Licensing
IP Consulting is registered as a Data Controller under the Data Protection Act and complies with all licensing requirements.
17. Accountability and Governance
We maintain:
-
Records of processing activities
-
Data Protection Impact Assessments (DPIAs)
-
Appointment of a Data Protection Officer (if required)
-
Internal training and awareness programs
18. Third-Party Links
Our website may contain links to external sites. We are not responsible for their privacy practices.
19. Changes to This Policy
We may update this policy periodically. Updates will be posted on this page with a revised effective date.
