Privacy Policy

Last updated: 19 October 2026

This policy explains what personal data ZedLingua collects, why, and your rights under the Data Protection Act, 2021 of Zambia. The data controller is Zambian Cybersecurity Initiative Foundation, Woodlands Mosi Tunya Road, Corner of Nalikwanda Road Plot 2, Lusaka, Zambia. Registration with the Office of the Data Protection Commissioner: registration in progress.

1. What we collect

• Contributions: the phrases, translations and language selections you submit through the Contribute form, plus any optional name or contact details you include.
• Searches with no result: when a phrase you search for has no match, we may record the search text (without your identity) to help us decide what to add next.
• Technical data: your IP address, browser type and request details, recorded in standard server logs for security and troubleshooting.
• Admin accounts: for authorised administrators only, a username and a securely hashed password.

We do not require you to create an account to use the translator, and we do not knowingly collect sensitive personal data.

2. How we use it

• To operate, moderate and improve the Service and its dataset.
• To expand language coverage based on what people look for.
• To protect the Service from abuse and keep it secure.
• To respond to messages you send us.

3. Our basis for processing

We process data with your consent (for example, when you submit a contribution), where necessary for our legitimate interest in running and securing the Service, and where required by law.

4. Sharing

We do not sell your personal data. We share it only with service providers who host and operate the Service on our behalf (such as our hosting provider), or where disclosure is required by law. Approved contributions are published as part of the phrasebook; we do not publish contributor contact details.

5. Retention

Approved contributions are kept as part of the dataset. Rejected submissions, and server logs, are kept only as long as needed for moderation, security and troubleshooting, and then deleted. Admin accounts are kept while the person remains an administrator.

6. Security

We use reasonable technical and organisational measures, including encrypted connections (HTTPS), hashed passwords and restricted admin access. No system is completely secure, and we will notify the Data Protection Commissioner and affected people of a breach as the law requires.

7. Your rights

Under the Data Protection Act, 2021 you may ask to access the personal data we hold about you, correct it, have it deleted, or object to or restrict its processing, and you may withdraw consent at any time. To exercise these rights, contact us below. If you are unhappy with our response, you may complain to the Office of the Data Protection Commissioner of Zambia.

8. Children

The Service is not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has submitted personal data, contact us and we will remove it.

9. International transfers

Our servers may be located outside Zambia. Where personal data is transferred abroad, we take steps to ensure it remains protected in line with Zambian law.

10. Changes

We may update this policy. The date above shows the latest revision.

11. Contact

Privacy questions or requests: tshinseki@zcsi-foundation.org.