Privacy Policy
Last updated: 27 May 2026. This policy explains what data Tawili Africa collects, why, and the rights you have over it.
Who we are
Tawili Africa is a Zambian digital agency registered in Lusaka. Our registered office is at Lusaka, Zambia. You can reach our data controller at tawiliafrica@gmail.com.
What we collect
We collect only the data we need to run our business and serve clients:
- Contact information you provide via forms, email, WhatsApp or sales calls: name, email, phone, company, and whatever you choose to share about your business.
- Analytics signals from this website: anonymised IP, browser, device type, pages viewed, referrer. We use Google Analytics 4 with IP anonymisation enabled.
- Service data for active clients: project files, brand assets, ad-account access tokens, CRM contacts you upload. This is processed under a signed engagement agreement.
- Cookies: essential session cookies plus optional analytics cookies. See our Cookies Policy for the full list.
Why we process it
- To respond to your enquiry and quote work.
- To deliver the services you’ve hired us for.
- To improve this website and our services through aggregated, anonymous analytics.
- To meet our legal obligations (tax, accounting, ZRA filings).
- To send service updates or, with your opt-in, marketing content. You can unsubscribe anytime.
Legal basis
Under the Zambia Data Protection Act (2019) and, where applicable, the GDPR, we rely on:
- Consent: for marketing emails, optional cookies, and form submissions.
- Contract: for client-service delivery.
- Legitimate interest: for security, fraud prevention, and improving our services.
- Legal obligation: for tax and regulatory record-keeping.
How we share data
We never sell your data. We share it only with these categories of processors:
- Infrastructure: cPanel hosting, Cloudflare, Google Workspace.
- Marketing platforms: Meta, Google Ads, TikTok Ads, LinkedIn, only when you’ve granted us access to your own accounts.
- Payment processors: bank, MTN MoMo, Stripe (international card payments).
- Professional advisors: accountants and legal counsel, under confidentiality.
For international transfers (e.g. cloud storage in the EU/US) we rely on Standard Contractual Clauses and the processor’s certifications.
How long we keep it
- Active client data: for the life of the engagement plus seven years (tax retention).
- Sales enquiries that didn’t convert: 24 months, then deleted.
- Analytics: 14 months at Google Analytics, anonymised.
- Marketing list subscribers: until you unsubscribe.
Your rights
You can ask us, anytime, to:
- Confirm what data we hold about you.
- Correct anything inaccurate.
- Delete your data (subject to legal retention obligations).
- Export your data in a portable format.
- Object to processing for marketing purposes.
- Withdraw consent for any optional processing.
Send any request to tawiliafrica@gmail.com. We’ll respond within 30 days. If we can’t resolve a concern you have the right to lodge a complaint with the Office of the Data Protection Commissioner in Zambia.
Security
We protect your data through HTTPS-only transport, encrypted storage, role-based access on internal systems, two-factor authentication on all admin accounts, regular backups, and annual security reviews. No system is ever perfectly secure, so if a breach affecting your data does occur we will notify you within 72 hours.
Children
This website is not directed to children under 18 and we do not knowingly collect their data.
Changes to this policy
We’ll post any material changes here and bump the “Last updated” date above. For substantial changes we’ll also email any subscriber list.
Contact
Questions about privacy? Email tawiliafrica@gmail.com or write to: Tawili Africa, Lusaka, Zambia.
