Effective Date: 1 August 2025
Company Name: Lower Zambezi Tourism Association (“Company”, “we”, “us”, or “our”)
Website: https://lowerzam.com/
1. Introduction
Lower Zambezi Tourism Association is committed to protecting your personal information and ensuring your privacy is respected and protected in compliance with:
- The Protection of Personal Information Act (POPIA) of South Africa
- The General Data Protection Regulation (GDPR) is applicable to EU/EEA residents
- Applicable U.S. data privacy regulations, where relevant
This Privacy Policy explains how we collect, use, store, disclose, and protect your personal data when you interact with our website or services.
2. Information We Collect
We may collect and process the following categories of personal data:
2.1. Information You Provide Voluntarily
- Full name
- Email address
- Contact number
- Company name (if applicable)
- Billing or payment details (if purchasing tickets or services)
- Event-related preferences
- Reviews, messages, or form submissions
2.2. Information Collected Automatically
- IP address
- Browser type and version
- Device information
- Pages visited and time spent
- Location data (via browser or IP, with your consent)
- Cookies and tracking technologies (see section 7)
3. Purpose of Collection
We collect personal data for the following purposes:
- To provide and improve our events and services
- To process bookings and transactions
- To respond to inquiries or customer support requests
- To send marketing or promotional
- communications (only with consent)
- To comply with legal or regulatory requirements
- For analytics and website optimization
4. Lawful Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA), we rely on the following legal bases:
- Your consent (e.g. marketing)
- Performance of a contract (e.g. event bookings)
- Legal obligations (e.g. tax compliance)
- Our legitimate interests (e.g. improving user experience)
5. Data Sharing and Disclosure
We do not sell your personal data.
We may share your data with:
- Trusted third-party service providers (e.g. payment processors, email platforms, analytics tools)
- Law enforcement or government bodies, when legally required
- Event partners or subcontractors involved in delivering specific services (e.g. event venues or vendors)
- All third-party service providers are contractually required to safeguard your data and act only on our instructions.
6. International Data Transfers
As a South African-based company, your data may be transferred to and stored in countries outside your own, including South Africa or the EU. When doing so, we ensure appropriate safeguards are in place, following:
- POPIA (South Africa)
- GDPR (Europe – e.g. Standard Contractual Clauses, adequacy decisions)
7. Cookies and Tracking
We use cookies and similar technologies to enhance user experience and analyze traffic.
7.1 Types of Cookies:
- Necessary Cookies – Essential for website functionality
- Performance Cookies – Track usage for analytics
- Marketing Cookies – Used for targeted advertising (only with consent)
- You may adjust your cookie preferences in your browser settings or via our cookie consent banner.
8. Your Rights
Under POPIA and GDPR, you have the right to:
- Access personal data we hold about you
- Request correction or deletion of inaccurate or unnecessary data
- Object to or restrict the processing of your data
- Withdraw consent at any time
- Lodge a complaint with the Information Regulator of South Africa or your relevant supervisory authority in the EU
To exercise your rights, please contact us.
9. Data Retention
We retain personal information only for as long as necessary to fulfil the purposes outlined above or as required by law (e.g. tax, legal compliance).
10. Data Security
We implement appropriate technical and organisational security measures to protect your data from unauthorised access, alteration, disclosure, or destruction.
These include:
- SSL encryption
- Access control policies
- Firewalls and secure storage
- Staff training on data protection
11. Children's Privacy
This website is not intended for individuals under the age of 18. We do not knowingly collect data from children without parental or guardian consent.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page and indicated with a revised effective date. Continued use of the website indicates acceptance of these changes.
13. Contact Information
For questions or concerns regarding this Privacy Policy or how your data is handled, please contact us.
