Privacy Policy

01

Who We Are

The Water and Sanitation Regulatory Council (WASAReC) is a non-governmental organisation registered in Zambia. Our principal office is located at Plot 1313 New Avondale, Off Simon Mwansa Kapwepwe Road, Lusaka, Zambia.

WASAReC acts as the data controller for personal information collected through our website (https://wasarec.org/), programmes, and organisational activities.

For questions about this policy, contact our Data Officer at wasare0321@gmail.com.

02

Information We Collect

Information you provide directly

check_small Contact forms — name, email address, phone number, and message content.
check_small Donation inquiries — name, email, and stated donation amount.
check_small Volunteer applications — name, email, area of expertise, and motivational statement.
check_small Partnership inquiries — organisation name, organisation type, contact name, email, focus areas, and partnership intent.
check_small Newsletter sign-ups — email address.

Information collected automatically

check_small IP address and approximate geographic location (country/city level).
check_small Browser type, operating system, and device type.
check_small Pages visited, time spent on pages, and referring URLs.
check_small Cookie identifiers (see the Cookies section for full details).

03

How We Use Your Information

mail To respond to enquiries and contact form submissions.

volunteer_activism To process and manage volunteer applications and onboarding.

handshake To facilitate corporate and institutional partnership discussions.

campaign To send organisational updates and impact reports (where you have consented).

bar_chart To analyse website traffic and improve our digital presence.

gavel To comply with applicable Zambian law and NGO regulatory requirements.

04

Legal Basis for Processing

We process personal data under the following lawful bases in accordance with the Zambia Data Protection Act and applicable data protection principles:

Consent

You have given clear consent for us to process your data for a specific purpose, such as newsletter subscriptions.

Contract

Processing is necessary to fulfil a request you have made, such as a volunteer application or partnership inquiry.

Legitimate Interest

We have a legitimate organisational interest in understanding how our website is used and improving it.

Legal Obligation

We may need to process data to comply with a legal obligation imposed on WASAReC under Zambian law.

05

Sharing Your Information

WASAReC does not sell, rent, or trade personal information to any third party. We may share limited data only in the following circumstances:

check_small With service providers who support our operations (e.g. email delivery, web hosting), bound by confidentiality agreements.
check_small With programme partners (e.g. GIZ, BORDA, UNZA) strictly where necessary to fulfil a joint project, with your knowledge.
check_small With regulatory authorities in Zambia when required by law.
check_small In an organisational merger or transfer, where the recipient agrees to honour this policy.

06

Data Retention

We retain personal information only for as long as necessary to fulfil the purpose for which it was collected, or as required by law.

Data Type	Retention Period
Contact form submissions	12 months
Volunteer applications	3 years (active programme records)
Partnership correspondence	5 years
Website analytics	26 months (aggregated)
Newsletter subscriptions	Until unsubscribed + 30 days

07

Your Rights

You have the following rights regarding your personal data held by WASAReC:

visibility

Access — Request a copy of the personal data we hold about you.

edit

Rectification — Ask us to correct inaccurate or incomplete information.

delete

Erasure — Request deletion of your personal data where we have no overriding legal reason to retain it.

pause

Restriction — Ask us to limit how we use your data while a complaint is being resolved.

download

Portability — Receive your data in a structured, machine-readable format.

do_not_disturb_on

Objection — Object to processing based on legitimate interests or direct marketing.

cancel

Withdraw Consent — Withdraw previously given consent at any time without affecting prior lawful processing.

To exercise any of these rights, contact us at wasare0321@gmail.com. We will respond within 30 days.

08

Cookies

Our website uses cookies to improve performance and understand visitor behaviour. For full details, please read our Cookie Policy.

You can manage or disable cookies through your browser settings at any time, though this may affect certain website functionality.

09

Third-Party Links

Our website may contain links to external websites operated by partner organisations or government bodies. WASAReC is not responsible for the privacy practices of these third-party sites and encourages you to review their respective privacy policies before submitting personal information.

10

Children's Privacy

Our website and services are not directed at children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has submitted personal data to us, please contact us immediately so we can delete it.

11

Changes to This Policy

WASAReC may update this Privacy Policy periodically to reflect changes in our practices or applicable law. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this policy regularly. Continued use of our website after any changes constitutes your acceptance of the updated policy.

Your privacy matters to us.