Controller and public contact
The production controller name, address and public privacy/legal email are still being completed and will be published here. Review and operator submission services remain disabled.
Data we collect
Public browsing does not require an account. Submission services are currently disabled. When they open, a review submission will include a public display name, private email, score, title, description, category and optional event month. Optional evidence will also include the file name, type and private file content. Operator claims will include the signed-in identity, business email, role and verification information.
Why we process it
We use the data to prevent spam, contact an author about moderation, assess factual risk, publish approved content, handle corrections, verify operator representatives, keep an audit trail and protect the integrity of ratings. Private contact and evidence fields are not published.
Security and access
Structured records are stored in a platform database. Uploaded evidence is stored separately with access limited to authorised moderators. Operator representatives cannot view a reviewer’s private email, IP-derived anti-abuse value or uploaded evidence.
Public browsing and operational logs
The hosting and security layers may process request time, requested URL, IP address, device or browser information and security signals when a person browses the directory. These operational records are used to deliver the site, prevent abuse and investigate incidents; they are not published as part of an operator profile or review.
Zambia registration and cross-border hosting
Before public collection begins, the controller or processor registration position must be completed with Zambia's Data Protection Commission. The production team must also document where the database, private files, backups, logs, email and support data are stored. Any storage or transfer outside Zambia will be enabled only after the applicable statutory route and Commission requirements have been confirmed.
- Data controller and processor registration — Zambia Data Protection Commission
- Data Protection Act No. 3 of 2021
Retention
Rejected submissions and their private evidence are scheduled for deletion after the moderation and appeal window unless preservation is required for a legal, abuse or security reason. Approved review contact data is retained only while needed for integrity, corrections and dispute handling. A final retention schedule will be published before the site accepts public submissions at scale.
Do not upload sensitive identity or payment data
Do not submit a password, full card number, mobile-money PIN, identity-document number, unredacted identity image, health information or another person’s personal data. Moderators may delete unsafe files without publishing the review.
Your requests
You may request access, correction or deletion of your private submission data, subject to applicable legal and integrity needs. The production contact address and Zambia data-controller details will be added before public submission services open.
Public browsing and indexing are enabled. Review, claim, profile update and operator-reply submissions remain disabled until the controller identity, privacy contact, registration and cross-border hosting position, processor list, breach workflow and final retention policy have been approved.