WEBSITE PRIVACY NOTICE
Echo Zambia
Last Updated 5 October 2026
1. About this Privacy Notice
At Echo Zambia, we take the privacy and protection of personal information seriously.
This Privacy Notice explains how iWay Zambia Limited, trading as Echotel Zambia (“Echo Zambia”, “we”, “us” or “our”), collects, uses, stores and protects personal information when you visit our website, contact us through the website or otherwise interact with us through it.
It also explains who we may share your information with, where it may be processed, how long we keep it and your rights in relation to your personal information.This Privacy Notice has been prepared with reference to Zambia's Data Protection Act, 2021 (Act No. 3 of 2021).
2. Who is responsible for your information?
The organisation responsible for personal information processed through this website is:
iWay Zambia Limited, trading as Echotel Zambia
Block A, First Floor, 4 Bishops Road, Kabulonga, Lusaka, Zambia
For questions about this Privacy Notice or the way we handle your personal information, please contact:
Email: privacy@echogroup.africa
3. What information do we collect?
The information collected depends on how you interact with the website. When you contact us through our website, we may collect:
- your first and last name;
- company or organisation;
- email address;
- telephone number;
- information you include in your enquiry; and
- technical information associated with your interaction or submission, including your IP address and the page from which an enquiry was submitted.
We may also process limited technical information necessary to operate, maintain and secure our website, including information used to identify and prevent spam, fraud and automated abuse.
Providing information through our contact form is voluntary. However, if you do not provide the information necessary for us to understand and respond to your enquiry, we may not be able to assist you.
Please do not include sensitive personal information in the free-text enquiry field unless it is necessary for us to assist you.
4. How do we use your information?
We may use personal information collected through the website to:
- receive, manage and respond to your enquiries;
- communicate with you about the products, services or support you have asked about;
- manage subsequent business discussions arising from your enquiry;
- operate, maintain and secure our website;
- identify and address technical problems, misuse or security threats;
- maintain appropriate business records; and
- meet applicable legal and regulatory requirements.
We collect personal information for specific and lawful purposes related to our business and will not use it for an incompatible purpose unless permitted by applicable law.
5. Our basis for processing your information
We process personal information in accordance with applicable Zambian data-protection law. Depending on the circumstances, this may include processing:
- with your consent;
- where necessary to respond to your request or take steps in connection with a contract;
- where necessary to comply with a legal obligation;
- where necessary to protect legitimate interests, where permitted by law; or
- on another basis permitted under applicable law.
Where we rely on consent, you may withdraw that consent, subject to applicable law.
6. Who may we share your information with?
We do not sell your personal information. Personal information may be shared where reasonably necessary with:
- authorised Echo personnel who need the information to respond to or manage your enquiry;
- other Echo companies where their involvement is necessary to provide the information, service or support you have requested;
- service providers that support our website, hosting, email, security and IT operations;
- professional advisers where necessary; and
- regulators, courts, law-enforcement authorities or other bodies where disclosure is required or permitted by law.
Where another organisation processes personal information on our behalf, we take appropriate steps to ensure that the information is protected.
7. International processing and transfers
Some of the technology infrastructure currently used to operate the Echo Zambia website is located outside Zambia.
Personal information submitted through this website may therefore be processed or stored outside Zambia.
Zambian law places specific requirements on the processing, storage and transfer of personal information outside Zambia. Echo Zambia will process, store and transfer personal information in accordance with applicable legal and regulatory requirements.
8. How long do we keep your information?
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including managing an enquiry or subsequent business relationship and meeting applicable legal, regulatory, accounting or record-keeping requirements.
Website enquiries will ordinarily be retained for five years, unless there is a legitimate or legal reason to retain particular information for longer.
Technical information such as IP addresses will be retained for five years, where collected.
When personal information is no longer required, we will securely delete, destroy or anonymise it as appropriate.
9. How do we protect your information?
We use reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
We also take reasonable steps to ensure that third parties processing personal information on our behalf provide appropriate protection.
No internet-based system can be guaranteed to be completely secure. We therefore review our website and information-handling arrangements and take appropriate action where risks are identified.
10. Cookies and website technologies
Our website is primarily used to provide information about Echo Zambia and enable visitors to contact us. We use Google reCAPTCHA to help protect website forms against spam, fraud and automated abuse. reCAPTCHA processes limited technical and interaction information to assess whether an interaction is likely to be legitimate and may set a necessary security cookie (_GRECAPTCHA) for this purpose. Google processes this information on our behalf as a service provider.
We do not currently use Google Analytics or other advertising analytics through MonsterInsights on this website.
If we introduce non-essential analytics, advertising or other tracking technologies in future, we will update our privacy and cookie information and introduce consent controls where required.
11. Direct marketing
If you contact us about our products or services, we may use your information to respond to your enquiry and manage any subsequent sales discussion. Where permitted by law and, where required, with your consent, we may also use your information to keep you informed about relevant Echo products, services, solutions or updates.
You can withdraw your consent or ask us to stop sending marketing communications at any time by using the unsubscribe option provided in the communication or by contacting us at privacy@echogroup.africa.
Stopping marketing communications will not prevent us from contacting you where necessary to respond to an enquiry, provide a requested service or manage an existing business relationship.
12. Your rights
Under Zambia's data-protection framework, you have rights concerning your personal information. Depending on the circumstances, these include rights to:
- be informed about the collection and use of your personal information;
- request access to personal information held about you;
- request correction of inaccurate or incomplete personal information;
- request erasure of personal information in applicable circumstances;
- object to certain processing;
- request restriction of processing in applicable circumstances;
- receive certain personal information in a portable format where applicable; and
- lodge a complaint about the processing of your personal information.
Certain rights are subject to conditions and exceptions under applicable law. To exercise a right or ask a question about your personal information, contact: privacy@echogroup.africa. We may ask for information necessary to verify your identity before responding to a request.
13. Links to other websites
Our website may contain links to websites or online services operated by other organisations.
Echo Zambia is not responsible for the privacy practices of third-party websites. We recommend reviewing the privacy information provided by the relevant organisation before giving it personal information.
14. Children's personal information
Our website and Echo's services are intended primarily for businesses and business users and are not directed at children.
We do not knowingly use the website to solicit personal information from children. If we become aware that children's personal information has been submitted in circumstances where it should not have been collected, appropriate action will be taken in accordance with applicable law.
15. Changes to this Privacy Notice
We may update this Privacy Notice from time to time to reflect changes in Echo's operations, the website, technology or applicable legal and regulatory requirements.
The current version will be published on this website and the Last updated date at the top of the notice will be changed when the notice is revised.
16. Contact us about privacy
If you have a question about this Privacy Notice, want to exercise a privacy right or have a concern about the way we have handled your personal information, please contact:
iWay Zambia Limited, trading as Echotel Zambia
Block A, First Floor, 4 Bishops Road, Kabulonga, Lusaka, Zambia
Email: privacy@echogroup.africa
17. Complaints
If you have concerns about the way we process your personal information, you may also lodge a complaint with Zambia's Data Protection Commissioner.