Who We Are

Mulonga Empowerment Organization (“we”, “us” or “our”) respects the privacy of individuals who visit our website, communicate with us or make donations through our online donation facility.

For purposes of applicable data-protection law, the organization may act as a Data Controller where it determines the purposes and means of processing personal information.

2.  Information We Collect

• Name and surname.
• Email address and telephone number.
• Address or other contact information where voluntarily provided.
• Donation amount, date and transaction/reference number.
• Information provided when contacting us or submitting a website form.
• Information necessary to investigate a payment dispute, refund request or suspected fraudulent transaction.
• Technical information such as IP address, browser type, device information and website usage information wherecollected by the website or service providers.

3.  How We Collect Information

• When you visit or use our website.
• When you make an online donation.
• When you contact us by email, telephone or website contact form.
• When you communicate with us through official social-media channels.
• Through technical information collected automatically by the website or service providers.

4.  How We Use Personal Information

• Process and confirm donations.
• Provide donation acknowledgements or receipts where applicable.
• Respond to enquiries and requests.
• Maintain accurate financial and organizational records.
• Reconcile and verify payments.
• Process legitimate refund or payment-dispute requests.
• Prevent, detect and investigate fraud or unauthorized transactions.
• Improve website security, functionality and performance.
• Meet accounting, audit, legal, regulatory and reporting requirements.
• Communicate information about organizational activities where permitted.

5.  Lawful Basis for Processing

Where required by applicable law, personal information may be processed on lawful grounds including consent, contractual necessity, legal obligation, legitimate interests, public interest or another lawful basis applicable to the processing.

Where processing is based on consent, consent may be withdrawn subject to legal or other legitimate reasons for retaining or processing the information.

6.  Online Donations and Payment Information

When a donation is made through the website, payment may be processed through FNB Zambia or another payment service provider approved by the organization. Payment information may be transmitted directly to the relevant provider through its secure payment infrastructure.

The organization does not intend to store full debit or credit card numbers, card security codes (CVV/CVC), PINs or other sensitive card authentication information on its website.

Transaction-related information such as donor name, donation amount, date and transaction/reference number may be retained where necessary for accounting, reconciliation, audit, customer support, fraud prevention or legal purposes.

7.  Sharing of Personal Information

• Banks and payment service providers for processing and verifying donations.
• Website hosting and technical service providers.
• Email or communications providers where necessary.
• Accountants, auditors or professional advisers where reasonably necessary.
• Government authorities or law-enforcement agencies where disclosure is required or authorized by law.
• Other service providers acting on the organization’s behalf where appropriate safeguards are in place.

8.  International or Cross-Border Processing

Some hosting, email, payment or technology providers may process or store information outside Zambia. Where personal information is transferred or stored outside Zambia, the organization will take reasonable steps to ensure that the processing complies with applicable Zambian data-protection requirements and any required safeguards.

9.  Donor Privacy and Anonymous Donations

We do not knowingly publish a donor’s name, photograph, donation amount or other identifying information for public acknowledgement without appropriate permission. A donor may request that a donation be treated as anonymous for public recognition purposes. Anonymous donations may still be recorded internally for financial, accounting, audit, legal or regulatory purposes.

10.  Data Security

We take reasonable technical and organizational measures to protect personal information against unauthorized access, loss, destruction, disclosure, alteration or misuse. Measures may include secure website technologies, access controls, restricted administrative access, software updates, backups and secure payment processing.

No internet-based system can be guaranteed to be completely secure.

11.  Personal Data Security Breaches

If a security incident affects personal information, the organization will take reasonable steps to investigate, contain and mitigate the incident. Where notification is required under applicable law, the organization will notify the relevant authorities and affected individuals within the required timeframes.

12.  Data Retention

Personal information will be retained only for as long as reasonably necessary for the purpose for which it was collected, unless a longer period is required or permitted by law. Donation and financial records may need to be retained for accounting, audit, regulatory or legal purposes. When information is no longer required, reasonable steps will be taken to securely delete, destroy or anonymize it where appropriate.

13.  Your Privacy Rights

• Request access to personal information held about you.
• Request correction of inaccurate or incomplete information.
• Request erasure where there is no lawful reason for retention.
• Ask why your personal information is being processed.
• Object to or restrict certain processing where applicable.
• Prevent processing for direct marketing where applicable.
• Withdraw consent where processing is based on consent.
• Make a complaint concerning the handling of your personal information.

14.  Cookies

The website may use cookies and similar technologies for website functionality, security, preferences and usage analysis. Users may control cookies through browser settings, although disabling certain cookies may affect functionality.

15.  Third-Party Websites

The website may contain links to third-party websites, including social-media platforms, payment providers and partner organizations. The organization is not responsible for the privacy practices or security of third-party websites.

16.  Children’s Privacy

The website is not intended to knowingly collect personal information from children without appropriate consent or another lawful basis. Where the organization becomes aware that personal information has been collected in circumstances where collection is not permitted, reasonable steps will be taken to address the situation in accordance with applicable law.

17.  Data Protection Officer

Where required under applicable law, the organization will designate a Data Protection Officer (DPO) to oversee data-protection compliance.

18.  Data Protection Commission

Individuals may contact Mulonga Empowerment Organization first regarding privacy concerns. Where a matter cannot be satisfactorily resolved, individuals may contact the Data Protection Commission of Zambia in accordance with applicable law.

19.  Changes to This Privacy Policy

This Privacy Policy may be updated to reflect changes to the website, payment services, data-processing activities, applicable law or privacy practices. The latest version will be published on the website with the relevant effective date.