Privacy Policy

1. Who We Are

BantuziEvents is a product of Bantuzi Enterprises Limited, a Zambian technology company registered with the Patents and Companies Registration Agency (PACRA). Registration Number: 120251025472. TPIN: 2003752208. Our registered address is Shop 19, Corner Mall, Northmead, Lusaka, Zambia.

2. Information We Collect

We collect the following categories of information:

• Account information — your name, email address, phone number, and organization details.
• Event data — events you create, attendee lists, venues, schedules, and guest details.
• Financial data — invoices, payment records, and transaction history.
• Usage data — login times, features accessed, actions taken within the platform.
• Device information — browser type, operating system, IP address, and referring URLs.

3. How We Use Your Data

We use the information we collect to:

• Provide, operate, and improve the BantuziEvents platform.
• Process payments and generate invoices on your behalf.
• Send transactional notifications (event reminders, booking confirmations).
• Provide customer support and respond to your inquiries.
• Analyze usage trends to improve performance and user experience.
• Comply with applicable legal obligations under Zambian law.

4. Data Storage & Security

Your data is stored in PostgreSQL databases hosted on secured virtual private servers. We implement multiple layers of security including JWT-based authentication, passwords hashed with BCrypt, multi-factor authentication (MFA) support, and TLS/SSL encryption for all data in transit. We use soft deletes throughout the platform, meaning accidentally deleted data is recoverable within a defined retention window.

5. Multi-Tenancy & Data Isolation

BantuziEvents is a multi-tenant platform. Each organization's data is logically isolated by a unique tenant identifier. No organization can access, view, or modify another organization's data. Within an organization, access is further governed by role-based access control (RBAC), ensuring team members only see what they are authorized to see.

6. Data Sharing

We share your personal data only with trusted service providers (such as hosting and email delivery providers) who operate under strict confidentiality agreements. We may also disclose information if required by Zambian law or a valid court order. We never sell your personal data to third parties for advertising or any other purpose.

7. Data Retention

Account data is retained for as long as your account remains active. When you delete your account or specific records, soft-deleted data is retained for 90 days before permanent removal. Financial records (invoices, payment records) are retained in accordance with Zambian tax law requirements, which may require longer retention periods.

8. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Correct any inaccuracies in your personal data.
• Request deletion of your personal data and account.
• Export your data in a machine-readable format.
• Withdraw consent for optional data processing at any time.

To exercise any of these rights, contact us at the address below.

9. Cookies

We use essential cookies for authentication and session management. These cookies are strictly necessary for the platform to function and cannot be disabled. We do not use third-party tracking cookies, advertising cookies, or any form of cross-site tracking.

10. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us:

• Email: info@bantuzi.com
• Phone: +260 975 432 234
• Address: Shop 19, Corner Mall, Northmead, Lusaka, Zambia