Privacy Policy & Data Protection

Last updated: 16 July 2026

1. Introduction

The Zambia Institute of Architects ("ZIA", "we", "us", or "our") is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, member portal, and services.

2. Information We Collect

2.1 Personal Information

• Identity data: full name, title, date of birth, gender, national registration number.
• Contact data: email address, postal address, phone numbers.
• Professional data: membership number, architect registration number, qualifications, employment history, areas of specialisation.
• Financial data: payment details and transaction history for membership fees and event registrations.
• Technical data: IP address, browser type and version, time-zone setting, operating system.

2.2 Public Directory Data

Members who opt in to the public "Find an Architect" directory may have the following information displayed publicly: name, profile photo, specialisation, location, years of experience, and portfolio samples. You control what is visible via your profile privacy settings.

3. How We Use Your Information

• To administer your membership and provide member services.
• To process payments and send receipts.
• To communicate about events, CPD opportunities, and industry updates.
• To verify professional credentials for the public directory.
• To comply with legal and regulatory obligations.

4. Data Sharing & Third Parties

We do not sell your personal data. We may share data with:

• Payment processors: ProbaseGroup for secure payment processing.
• Cloud services: Firebase (Google) for database hosting and authentication.
• Regulatory bodies: Architects Registration Board (ARB) where required by law.

5. Data Security

We implement appropriate technical and organisational measures to protect your data, including:

• SSL/TLS encryption for data in transit.
• Firebase Authentication with role-based access control.
• Regular security audits and access logging.
• Password hashing and secure session management.

6. Your Rights

Under the Data Protection Act of Zambia and applicable regulations, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data (subject to legal retention requirements).
• Object to processing for direct marketing.
• Withdraw consent for public directory display at any time via your profile settings.

7. Data Retention

We retain personal data for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting requirements. Membership data is typically retained for 7 years after membership lapses.

8. Cookies & Tracking

We use essential cookies for authentication and session management. We do not use third-party advertising cookies. You can manage cookie preferences through your browser settings.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify members of significant changes via email or through the member dashboard.

10. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us:

• Email: privacy@zia.co.zm
• Address: ZIA Secretariat, Lusaka, Zambia
• Phone: +260 211 123 456