Privacy Policy

Last updated: 27 April 2026

This Privacy Policy explains how Kaloo Technologies Limited ("we", "us", "our") collects, uses, stores, and protects your personal information when you use the FundRaiserZM platform ("Platform") at fundraiser.kalootech.com. We are committed to protecting your privacy in accordance with applicable Zambian data protection principles.

By using the Platform you consent to the practices described in this Policy. If you do not agree, please do not use the Platform.

1. Information We Collect

1.1 Information you provide directly

• Account registration: full name, email address, phone number, and password (stored as a one-way hash).
• Campaign content: campaign title, description, story, cover images, category, goal amount, end date, and updates you post publicly.
• Donation details: donation amount, your name (or anonymous preference), message to the organiser, and Mobile Money phone number.
• Withdrawal requests: Mobile Money operator, phone number, and withdrawal amounts.
• Communications: messages you send to our support team.

1.2 Information collected automatically

• Usage data: pages visited, buttons clicked, time spent on pages, referring URL.
• Device data: browser type and version, operating system, screen resolution, device type.
• Network data: IP address, approximate location (country/city level derived from IP), connection type.
• Cookies & local storage: session tokens and user preferences stored in your browser's local storage. We do not use third-party advertising cookies.

1.3 Information from third parties

• Mobile Money operators (MTN, Airtel, Zamtel) provide us with transaction status, reference numbers, and confirmation of payment via our payment partner Lenco.

2. How We Use Your Information

We do not use your personal data for targeted advertising, and we do not sell or rent your data to any third party.

3. How We Share Your Information

We share your data only in the following limited circumstances:

• Mobile Money processors (Lenco / MTN / Airtel / Zamtel): phone number, amount, and operator code are shared solely to execute payment transactions.
• Hosting & infrastructure providers: our server infrastructure provider processes data under a data processing agreement with confidentiality obligations.
• Law enforcement & regulators: we will disclose data where required by a valid court order, subpoena, or regulatory request under Zambian law.
• Business transfers: in the event of a merger, acquisition, or sale of assets, user data may be transferred to the successor entity, with prior notice to users.

Campaign content you post (title, description, images, updates) is public and may be indexed by search engines or shared by other users.

Donation records display your name (or "Anonymous" if you opted out) and amount on the campaign page. Your phone number is never publicly displayed.

4. Data Retention

• Active accounts: retained for the lifetime of the account.
• Closed accounts: personal data is deleted within 30 days of a verified closure request, except where retention is required by law (e.g. financial transaction records must be kept for a minimum of 7 years under Zambian financial regulations).
• Campaign content: publicly posted campaigns are retained for 12 months after a campaign ends, then archived or deleted.
• Server logs: automatically deleted after 90 days.

5. Cookies & Local Storage

We use browser local storage (not traditional cookies) to store your authentication session token and display preferences. No tracking pixels or third-party advertising scripts are loaded on this Platform. You may clear local storage at any time via your browser settings, which will log you out.

6. Data Security

• All data is transmitted over HTTPS/TLS encryption.
• Passwords are stored as irreversible bcrypt hashes — we cannot read your password.
• Authentication tokens are signed and expire after a set period of inactivity.
• Access to production databases is restricted to authorised personnel only, and all access is logged.
• We conduct periodic security reviews. However, no system is completely secure; we encourage you to use a strong, unique password.

7. Your Rights

You have the right to:

• Access: request a copy of the personal data we hold about you.
• Correction: update inaccurate or incomplete information via your Profile settings or by contacting us.
• Deletion: request deletion of your account and associated personal data (subject to legal retention requirements).
• Objection: object to processing of your data for legitimate interest purposes.
• Portability: request your data in a structured, machine-readable format.

To exercise any of these rights, email us at privacy@kalootech.com with your full name and the email address associated with your account. We will respond within 30 days.

8. Children's Privacy

The Platform is not directed at children under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has registered an account, please contact us immediately and we will delete the account.

9. Links to Third-Party Sites

Campaign pages may contain links to external websites (e.g. WhatsApp sharing). We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before providing any personal information.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify registered users via email or an in-platform banner at least 7 days before material changes take effect. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the Platform after the effective date constitutes acceptance of the updated Policy.

11. Contact & Data Controller