Privacy Policy
Last updated: 2 October 2026
Data controller: Zambian Cybersecurity Initiative Foundation (ZCSIF), Woodlands Mosi Tunya Road, Corner of Nalikwanda Road, Plot 2, Lusaka, Zambia. Contact: support@safe4all.zm.
This policy explains what personal data BEKA collects, why, who sees it, and your rights under the Data Protection Act, 2021 of Zambia. Because BEKA deals with GBV, much of the data is sensitive. We treat it with extra care.
1. Data we collect
| Category | Examples | When |
|---|---|---|
| Account data | Name, phone number, email, password (stored hashed), role, profile details | Registration and profile setup |
| Verification data | OTP codes, access codes | Login, role assignment |
| Emergency contacts | Names and phone numbers you add | When you set up contacts |
| Alert and case data | Panic button events, case status, timestamps, acknowledgements, escalations | When you raise or handle an alert |
| Location data | Your live or last-known location | During an alert, and only when you grant permission |
| Reports and evidence | Report text, photos, files, messages, WhatsApp intake content | When you submit them |
| Technical data | IP address, device/browser type, logs, session and security data | Automatically |
| Communications | Content and delivery status of SMS, WhatsApp and email we send you | When we message you |
We do not knowingly collect more than we need to run the Service.
2. Why we use it and our legal basis
- To provide emergency and case-handling features (alerts, location sharing, case follow-up). Basis: your consent and the vital interests of the person at risk.
- To verify identity and secure accounts (OTP, password reset, access codes). Basis: performance of the Service and legitimate interest in security.
- To notify emergency contacts and responders. Basis: your consent.
- To prevent abuse, fix faults and improve the Service. Basis: legitimate interest.
- To comply with the law or lawful requests from authorities. Basis: legal obligation.
Where we rely on consent, you can withdraw it at any time. Withdrawing may limit features such as alerts and location sharing.
3. Who we share data with
- Responders and administrators you or the case flow route your alert to, limited to what they need.
- Emergency contacts you nominate, who receive alert messages and, where applicable, location.
- Service providers that process data for us: SMS/WhatsApp messaging, email delivery, hosting/server infrastructure. [LIST CURRENT PROVIDERS]
- Authorities (for example police or courts) when required by law or where necessary to protect life.
We do not sell personal data or use it for advertising.
4. Location
Location is collected only with your device permission and used for alerts and responder dispatch. You can turn it off in your device settings, but alerts may then be less useful.
5. Where data is stored and security
Data is stored on servers we control [HOSTING LOCATION/PROVIDER]. We use measures such as encrypted connections (HTTPS), hashed passwords, access controls by role, and logging. No system is perfectly secure, so we cannot guarantee absolute security. We will notify affected people and the Data Protection Commission of a serious breach as the law requires.
6. International transfers
Some providers (for example messaging or email services) may process data outside Zambia. Where that happens we require appropriate safeguards as the Data Protection Act requires.
7. How long we keep data
- Account data: while your account is active, then deleted within [X] days of a verified deletion request.
- Alert, case and evidence records: [X months/years], or longer where needed for an open case or legal obligation.
- Security and technical logs: [X days].
- OTP and verification codes: deleted shortly after use or expiry.
8. Your rights
You may ask us to: access your data; correct it; delete it; restrict or object to processing; withdraw consent; and receive a copy of your data. To exercise these, email support@safe4all.zm. We may need to verify your identity first, and we may keep data we are legally required to retain. You may also complain to Zambia's Office of the Data Protection Commissioner.
9. Children
[State your position. For example: "BEKA is intended for users 18 and over. If a child is at risk, a responder or guardian may submit a report on their behalf, and we handle such data with additional care."]
10. Cookies and local storage
See our Cookie Policy.
11. Changes
We will post updates here and notify you in the app or by email for material changes.
12. Contact
support@safe4all.zm · Woodlands Mosi Tunya Road, Corner of Nalikwanda Road, Plot 2, Lusaka, Zambia