Privacy Policy

1. Introduction

Duly ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our student device protection services in Zambia.

We comply with the Zambian Data Protection Act and other applicable data protection laws. By using our services, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Personal Information

We may collect the following personal information:

• Full name and contact details
• Student identification number and institution
• Email address and phone number
• Payment information (processed securely through our partners)
• Academic institution verification details

2.2 Device Information

To provide our protection services, we collect:

• Device make, model, and specifications
• Serial numbers and IMEI numbers
• Purchase date and proof of purchase
• Device condition and valuation

2.3 Usage Information

We automatically collect information about your interaction with our services:

• IP address and browser type
• Pages visited and features used
• Device claims and repair history
• Service usage patterns

3. How We Use Your Information

We use your information for the following purposes:

• To provide and maintain our device protection services
• To process claims and coordinate repairs
• To verify student eligibility and academic status
• To communicate about your account and services
• To improve our services and user experience
• To prevent fraud and ensure service security
• To comply with Zambian legal obligations

4. Data Sharing and Disclosure

4.1 Service Providers

We may share your information with:

• Authorized repair partners in Zambia
• Payment processing partners
• Cloud storage and hosting providers
• Customer support services

4.2 Legal Requirements

We may disclose your information if required by Zambian law or in response to:

• Court orders or legal processes
• Government requests from Zambian authorities
• Fraud investigation or prevention

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity, subject to the same privacy protections.

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of sensitive data
• Secure server infrastructure located in Zambia
• Regular security assessments and updates
• Access controls and authentication procedures
• Staff training on data protection

6. Data Retention

We retain your personal information only for as long as necessary to:

• Fulfill the purposes outlined in this policy
• Comply with Zambian legal requirements
• Resolve disputes and enforce our agreements
• Maintain accurate business records

Typically, we retain student records for 5 years after account closure, unless longer retention is required by law.

7. Your Rights Under Zambian Law

As a data subject in Zambia, you have the right to:

• Access: Request copies of your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Objection: Object to certain processing activities
• Restriction: Request restriction of processing
• Portability: Request transfer of your data to another service

To exercise these rights, please contact us using the information provided below.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

• Remember your preferences and login status
• Analyze service usage and improve performance
• Provide personalized content and features
• Ensure service security and prevent fraud

You can control cookie settings through your browser preferences.

9. Third-Party Links

Our service may contain links to third-party websites, including:

• Educational institution websites
• Payment gateway providers
• Repair partner websites

We are not responsible for the privacy practices of these third-party sites. We encourage you to review their privacy policies.

10. Children's Privacy

Our services are intended for students who are at least 18 years old or have parental consent. We do not knowingly collect personal information from children under 18 without verifiable parental consent.

If we become aware that we have collected personal information from a child under 18 without proper consent, we will take steps to delete that information.

11. International Data Transfers

As a Zambian-based company, we primarily store and process data within Zambia. However, some service providers may be located outside Zambia. In such cases, we ensure appropriate safeguards are in place to protect your information in accordance with Zambian data protection laws.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Sending an email notification
• Updating the "Last updated" date

Continued use of our services after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact our Data Protection Officer:

• Email: privacyduly@legitafri.com
• Phone: +260 770 683 958
• Hours: Monday-Friday, 8:00 AM - 5:00 PM CAT

You also have the right to lodge a complaint with the Zambian Data Protection Authority if you believe your rights have been violated.