Privacy
Privacy policy
JAAF Logistics Limited ("JAAF", "we", "us") respects your privacy and is committed to protecting your personal data in accordance with the Data Protection Act No. 3 of 2021 of the Republic of Zambia. This policy explains what personal data we collect, why, who processes it, where it goes, and the rights you have over it.
Last updated: [CONFIRM date of publication]
1. Who we are (the data controller)
JAAF Logistics Limited is the data controller responsible for your personal data. Registered office: Kabinga Avenue, Ndola, Copperbelt Province, Zambia. Email: info@jaaflogistics.com. Telephone: +260 966 426126 · +260 966 518853 · +260 97 5042868. Contact point for privacy questions: [CONFIRM — name/role of the person who handles data requests]. [CONFIRM: whether JAAF is registered with, or required to register with, the Office of the Data Protection Commissioner — the practitioner should confirm.]
2. What personal data we collect
We collect only what we need to respond to you and provide freight services: when you contact us or request a quote — your name, company, email address, telephone number, and the details of your enquiry or shipment; when we provide services — contact and consignment details necessary to carry, clear and track cargo; when you visit our website — basic technical data (such as IP address and pages viewed) collected by our web host for security and to keep the site running. Enquiries submitted through our quote form are stored in our own database and delivered to us by email; we do not use a third-party online form service. We minimise what we store to the fields listed above.
3. Why we process it, and the basis for doing so
We process your personal data to respond to enquiries, prepare quotations, provide and administer freight and customs services, and meet legal and regulatory obligations that apply to cross-border transport. Under the Act, we rely on your consent for enquiry and marketing contact, and on the necessity of processing to perform a contract with you and to comply with our legal obligations for service delivery.
4. Consent, and your right to withdraw it
Where we rely on your consent, we ask for it before we process your personal data. You have the right to withdraw your consent at any time — we are telling you this before you consent, as the Act requires. Withdrawing consent is as easy as giving it: email info@jaaflogistics.com and we will stop the processing that relied on it. Withdrawal does not affect processing already carried out while your consent was valid, or processing we are required to continue for legal reasons. We keep a record of the consent you give so we can demonstrate, if asked, that it was given.
Key disclosure — cross-border transfer
5. Where your data goes — processors and transfers outside Zambia
We keep the number of parties who touch your data to a minimum. Our email is hosted by GoDaddy, whose mail servers are located in the United States. This means that when you email us, or when a website enquiry is delivered to our mailbox, your message and the personal data in it are transferred to and stored on servers outside Zambia. We state this plainly because the Act restricts transfers of personal data outside Zambia, and we will not claim your data stays in-country when part of it does not. We rely on your consent to this transfer, given when you choose to contact us, and we limit the data involved to what is necessary. We do not sell your personal data, and we do not share it with third parties for their own marketing. [CONFIRM with practitioner: the correct lawful basis and any safeguards required under the Act for this transfer.]
6. How long we keep it
We keep your personal data only as long as necessary for the purpose it was collected, or as required by law. Enquiry data — whether emailed to us or submitted through the quote form — is deleted after 12 months where no contract results. Service records are kept for the period required by tax and transport regulation.
7. Your rights under the Act
Subject to the conditions in the Data Protection Act, you have the right to: be informed about how your data is used (this policy); access the personal data we hold about you; have inaccurate data corrected; have your data erased where there is no lawful reason to keep it; object to or restrict certain processing; withdraw consent at any time (see section 4); and lodge a complaint with the Office of the Data Protection Commissioner of Zambia. To exercise any of these, email info@jaaflogistics.com. We will respond within the time the Act allows.
8. How we protect your data
We apply reasonable technical and organisational measures to protect personal data against loss, misuse and unauthorised access. No transmission over the internet is completely secure, but we take steps to reduce the risk.
9. Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed.
10. Contact
Questions about this policy or your data: info@jaaflogistics.com, or write to us at the address in section 1.