Privacy Policy
1. Scope of Application
This Policy applies to all visitors and ordering customers of zalexmining.com, covering local users in Zambia and global overseas users. It complies with the GDPR and relevant Zambian data protection regulatory requirements.
2. Personal Information We Collect
2.1 Information Submitted Voluntarily
Name for order placement, delivery address, contact telephone number, email address, order records, payment vouchers, and personal data actively provided when consulting customer service.
2.2 Automatically Collected Information
Website access IP address, device model, browser type, Cookie browsing records, page dwell time, and click trajectories (utilised for website optimisation and fraud prevention).
2.3 Minors
We do not actively collect information of minors under the age of 18. Any information collected inadvertently will be deleted immediately upon discovery.
3. Purposes of Information Processing
3.1 Contract Performance
Process orders, synchronise logistics information, coordinate suppliers for shipment, and handle after-sales services including refunds and returns & exchanges.
3.2 Customer Service
Send email notifications regarding order progress, respond to after-sales enquiries and customer consultations.
3.3 Security & Risk Control
Identify fake orders, payment fraud and malicious deception to mitigate transaction risks.
3.4 Compliance Notices
Send notifications of policy updates and after-sales reminders.
3.5 Marketing (Opt-in Only)
Promotional emails featuring new product discounts and activities will only be dispatched if the customer actively ticks to consent. Customers may unsubscribe at any time.
4. Scope of Data Sharing (Strict Confidentiality, consistent with Clause 7 of the Supply Agreement)
4.1 Data shall only be shared limitedly under necessary circumstances. We will never sell customer information to any third party:
① Dropshipping Supplier: Hubei Huihe International Trade Co., Ltd. – only order delivery information is shared for shipment fulfilment. The supplier undertakes to keep all order data confidential for a period of 1 year. ② Compliant Payment Service Providers – only encrypted payment tokens are transmitted; complete card numbers will not be shared. ③ Cross-border Logistics Providers – only delivery addresses are shared for customs clearance and parcel delivery. ④ Regulatory Authorities – data will be provided in accordance with law upon receipt of formal legal documents issued by courts or the Competition and Consumer Protection Commission (CCPC).
4.2 Following termination of the agreement, both the supplier and us shall maintain confidentiality of historical order data for 1 year.
5. Cookie Statement
5.1 The website uses functional Cookies to retain shopping cart contents and login status, and analytical Cookies to compile access statistics. No third-party advertising tracking Cookies are deployed.
5.2 Users may disable Cookies via browser settings; however, disabling Cookies may cause abnormal operation of shopping cart and order functions.
6. Data Storage and Security Protection
6.1 Customer personal order data is stored in encrypted form. Raw payment card information is not stored by us at all and is hosted by PCI-compliant payment service providers.
6.2 Servers undergo regular security scanning, tiered access permission control and firewall protection to prevent data leakage and tampering.
6.3 Data Retention Periods: Order transaction records are retained for 5 years (to satisfy Zambian tax requirements and consumer claim limitation periods). Marketing email data will be deleted immediately after the customer unsubscribes.
7. Data Subject Rights (In line with GDPR and Zambian consumer protection regulations)
7.1 Right of Access
You may submit an email request to export all your personal order and information records.
7.2 Right of Rectification
You may contact customer service free of charge to amend incorrect addresses, telephone numbers and other information.
7.3 Right to Erasure
Where there are no outstanding pending orders, you may submit a request for permanent deletion of all your personal data.
7.4 Right to Withdraw Marketing Consent
A one-click unsubscribe channel is included at the bottom of all promotional emails.
7.5 Right to Lodge a Complaint
You may file a complaint with the Zambian Competition and Consumer Protection Commission (CCPC) in the event of data leakage or unlawful data collection.
8. Cross-Border Data Transfer
Customer delivery information will be transmitted to the warehouse of our supplier in China for dropshipping. We have executed a confidentiality agreement with the supplier to safeguard data security for overseas users, satisfying compliance requirements governing cross-border data transfers.
9. Policy Updates
Any amendments to this Privacy Policy will be posted at the bottom of the website with an updated date. Material changes will be notified by email to historical customers who have placed orders.