Privacy Notice

1. Who we are

BizLink Zambia is operated by Elisha Phiri, trading as EPhiz Tech Solutions, Lusaka, Zambia. We are the data controller for the personal data described here — we decide why and how it is used.

2. What we collect and why

• Account data — name, email address, login credentials and sign-in provider. Used to create and secure your account. Legal basis: performance of our contract with you.
• Business profile data — business name, registration and TPIN numbers, sector, size, addresses, phone, email, website, description and capabilities. Used to run your workspace and to match you to opportunities. Legal basis: contract.
• Documents and business records — compliance certificates you upload, plus customers, invoices and expenses you record. Used to store, display and process them for you. Legal basis: contract.
• AI inputs and outputs — the profile, document details and opportunity text sent to our AI provider, and the analysis or draft returned. Used to provide the AI features. Legal basis: contract.
• Support messages — what you send us when you ask for help. Used to answer you. Legal basis: legitimate interests in supporting customers.
• Usage and technical data — device identifiers, IP address, browser information, log and error data. Used for security, fraud prevention, troubleshooting and improving the product. Legal basis: legitimate interests.
• Legal and accounting records — kept where we must. Legal basis: legal obligation.

3. Who we share data with

• Service providers / subprocessors — hosting, database and storage, authentication, AI model providers, email delivery and error monitoring, acting on our instructions.
• Paddle.com, our Merchant of Record, for the sale of subscriptions, subscription management, payments, tax compliance and invoicing.
• Professional advisers — legal and accounting, where needed.
• Authorities — where we are required to by law.

We do not sell your personal data.

4. International transfers

Our hosting, AI and payment providers operate outside Zambia, so your data may be processed abroad. Where data originates in the UK or EEA we rely on adequacy decisions or Standard Contractual Clauses with those providers.

5. How long we keep it

Account, profile, document and business records are kept while your account is active and for up to 12 months after closure, so you can return or export. Logs and technical data are kept for up to 12 months. Records we must keep for tax or legal reasons are kept for the required period. After that data is deleted or anonymised.

6. Your rights

You can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or send it to another provider. Where we rely on consent you can withdraw it at any time. Email phirielisha88@gmail.com and we will respond within one month. If you are in the UK or EEA you may also complain to your supervisory authority.

7. Security

We use appropriate technical and organisational measures, including encryption in transit, access controls and row-level database rules so each business can only reach its own records. Uploaded documents are held in private storage reachable only through short-lived signed links.

8. Cookies

We use essential cookies and similar browser storage to keep you signed in and to keep the Service secure. These cannot be switched off without breaking sign-in. If we add analytics or marketing cookies in future we will ask for your consent first and provide a way to manage your preferences.

9. Contact

Elisha Phiri, trading as EPhiz Tech Solutions, Lusaka, Zambia. Email phirielisha88@gmail.com for any privacy question or request.