Sera ya Faragha

​​

The Albinism Foundation of Zambia (AFZ), a registered non-governmental organization under the Non-Governmental Organisations Act No. 16 of 2009, dedicated to supporting individuals with albinism through advocacy, education, and community programs, is committed to protecting the privacy and confidentiality of personal data. This Privacy Policy outlines how AFZ collects, uses, discloses, and safeguards personal information in compliance with the Zambia Data Protection Act No. 3 of 2021 (DPA), the Cyber Security and Cyber Crimes Act of 2025, and aligns with international standards such as the General Data Protection Regulation (GDPR) principles for lawful, fair, and transparent processing. By accessing or using our website (afz-zambia.org) or engaging with our services, you consent to the practices described herein. If you do not agree, please do not provide personal data or use our services.

​

1. Information We Collect

​

AFZ collects personal data necessary to fulfill our mission, adhering to data minimization principles under the DPA (Section 11). This may include:

1. Personal Identifiers: Name, email address, phone number, and postal address (e.g., from contact forms, event registrations, or donation inquiries).

2. Sensitive Data: Health-related information about albinism (collected only with explicit consent for support services, in line with DPA special category data rules under Section 26).

3. Donation and Financial Data: Payment details processed via secure third-party providers (we do not store full card information).

4. Usage Data: IP address, browser type, and site interaction logs (anonymized where possible).

5. Cookies and Tracking: We use essential cookies for site functionality and analytics cookies (with opt-out options) to improve user experience.

We do not collect data from children under 18 without verifiable parental consent, as per DPA protections for minors (Section 27).

​

2. How We Use Your Information

​

Personal data is processed only for legitimate purposes, including:

1. Providing support services, newsletters, and educational resources.

2. Fundraising and donor management.

3. Event organization and advocacy campaigns.

4. Internal analytics to enhance our programs.

5. Legal compliance, such as reporting to Zambian authorities.

Processing is based on consent, contractual necessity, or our legitimate interests as a non-profit, with regular data protection impact assessments conducted per DPA requirements (Section 28).

​

3. Sharing and Disclosure

​

AFZ does not sell personal data. We may share it with:

1. Trusted service providers (e.g., email platforms like Mailchimp, payment processors) under strict data processing agreements compliant with DPA Section 35.

2. Partners in albinism advocacy (e.g., international NGOs) for collaborative programs, only with your consent.

3. Legal authorities if required by Zambian law or to protect rights/safety.

International transfers (e.g., to EU-based cloud services) include safeguards like standard contractual clauses to ensure DPA-equivalent protection (Section 48). In the event of a data breach, we will notify affected individuals and the Data Protection Commission within 72 hours, as required by DPA Section 46.

​

4. Data Subject Rights

​

Under the DPA (Sections 19-25) and international best practices, you have the right to:

1. Access, rectify, or erase your data.

2. Restrict processing or object to it (e.g., for marketing).

3. Data portability.

4. Withdraw consent at any time.

To exercise these rights, contact us at afzlusaka@gmail.com. We respond within 30 days, free of charge unless requests are manifestly unfounded or excessive (DPA Section 24).

​

5. Data Security and Retention

​

We implement appropriate technical and organizational measures, including encryption, access controls, regular audits, and compliance with the Cyber Security and Cyber Crimes Act of 2025, to protect against unauthorized access or breaches, as mandated by the DPA (Section 29). Data is retained only as long as necessary (e.g., donor records for at least 6 years per the Income Tax Act, Cap. 323, Section 78, or longer if required for legal purposes) and securely deleted thereafter.

 

6. Cookies and Third-Party Links

​

Our site uses cookies for functionality and analytics. You can manage preferences via browser settings. Third-party links (e.g., to social media) are not covered by this policy—review their privacy statements.

​

7. Changes to This Policy

​

We may update this policy to reflect legal changes or operational needs, such as amendments under the DPA or new regulations. Significant updates will be notified via email or site notice. Continued use constitutes acceptance.

​

8. Contact Us

​

For questions, contact: Data Protection Officer Albinism Foundation of Zambia LOTI HOUSE, Cairo Road, Room G, 4th Floor (opposite Kwacha House) 10101 Lusaka, Zambia Email: afzlusaka@gmail.com Phone: +260 977 977026

This policy is governed by Zambian law. For complaints, refer to the Data Protection Commission or the Zambia Information and Communications Technology Authority (ZICTA).