Privacy Policy

ZamBuy ("ZamBuy", "we", "us", "our") is a Zambian online marketplace operated by Edutech Computers Ltd, a company registered in the Republic of Zambia. We act as the data controller for the personal information described in this policy.

Contact: hello@zambuy.co.zm

We process personal data in line with the Data Protection Act No. 3 of 2021, the Electronic Communications and Transactions Act No. 4 of 2021, the Cyber Security and Cyber Crimes Act No. 2 of 2021 of the Republic of Zambia, and any guidance issued by the Data Protection Commissioner.

• Account data: full name, email, phone number, password (hashed), province and town.
• Seller / expert data: business name, NRC or TPIN where provided, PACRA registration, services offered, service areas and verification documents.
• Listing data: product details, prices, photographs and stock information.
• Request data: service requests and quote requests you post, including budget, location and contact preferences.
• Transaction data: orders, escrow status, payouts and wallet activity (we do not store full mobile money or card numbers — payments are processed by licensed providers).
• Communications: messages exchanged between buyers, sellers and our support team.
• Device data: IP address, browser type, pages visited, and cookies used to keep you signed in and to improve the service.

• Performance of a contract — to create your account, host your listings, process orders and route service requests.
• Legitimate interest — to prevent fraud, secure the platform and improve our service.
• Legal obligation — to comply with Zambian tax, consumer protection and anti-money-laundering law.
• Consent — for optional marketing emails and any sensitive information you choose to share.

When you post a service request, your contact details are released to a maximum of five (5) responding experts on a first-come, first-served basis. This "first-5 auction" is designed to limit the number of calls and emails you receive. If you re-post a request, the previous five experts are excluded automatically.

We only share personal data with:

• Other ZamBuy users where necessary to fulfil an order or respond to a request (e.g. seller sees buyer delivery address after payment).
• Licensed payment processors and mobile money operators in Zambia for escrow and payouts.
• Cloud hosting and infrastructure providers contracted to process data on our behalf under strict confidentiality.
• Law enforcement and regulators where required by Zambian law or a valid court order.

We do not sell your personal data.

Some of our hosting and email infrastructure may store data outside Zambia. Where this happens we ensure the transfer complies with Section 70 of the Data Protection Act, 2021 and that the destination country provides an adequate level of protection or is governed by appropriate contractual safeguards.

We keep personal data only as long as necessary for the purpose collected:

• Account data: while your account is active, plus 12 months after closure.
• Transaction and tax records: 10 years, as required by the Income Tax Act and VAT Act.
• Closed service requests: 24 months for dispute resolution.
• Marketing data: until you withdraw consent.

• Right to be informed and to access your personal data.
• Right to rectify inaccurate or incomplete data.
• Right to erasure ("right to be forgotten") where applicable.
• Right to restrict or object to processing.
• Right to data portability.
• Right to withdraw consent at any time.
• Right to lodge a complaint with the Data Protection Commissioner of Zambia.

To exercise any of these rights, email hello@zambuy.co.zm. We will respond within 30 days.

We use industry-standard safeguards: encryption in transit (HTTPS), encrypted database storage, hashed passwords, role-based access controls and audit logs on sensitive actions. No internet service can be guaranteed 100% secure, so we also expect you to keep your password confidential.

We use strictly necessary cookies to keep you signed in and to remember your cart. We use limited analytics cookies to understand how the site is used. You can disable cookies in your browser, but parts of the service may not work.

ZamBuy is not intended for persons under 18. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

We may update this policy from time to time. Material changes will be announced on the site and, where possible, by email at least 14 days before they take effect.

You also have the right to contact the Data Protection Commissioner of the Republic of Zambia if you believe your rights have been infringed.