Privacy Policy

Welcome to Zed Event Hub (https://zedeventhub.shop), operated by Observer Tech in Lusaka, Zambia. We are dedicated to respecting and safeguarding your personal privacy. This Privacy Policy details how we collect, process, store, and protect your personal information when you browse our website, book tickets, subscribe to notifications, or host events.

1. Legal Basis for Data Processing

We only collect and process personal data when we have a lawful basis under the Zambia Data Protection Act and international GDPR regulations:

• Contractual Necessity: To fulfill your ticket bookings, issue valid QR pass codes, and transmit transaction receipts.
• Legitimate Interests: To protect our platform from cyber threats, ticket scalping, duplicate bookings, and financial fraud.
• Legal Obligation: To maintain mandatory transaction records and tax ledgers as required by Zambian financial laws.
• Explicit Consent: To send you event notifications and newsletters when you voluntarily subscribe. You can withdraw your consent at any time.

2. Information We Collect (Data Minimization)

In accordance with data minimization standards, we only collect information that is strictly necessary for ticketing and platform security:

• Ticket Attendees: Full name (for pass identity verification), email address (for ticket and QR code dispatch), and contact phone number (for USSD mobile money payment prompts and event updates).
• Organizers: Account holder name, email address, password hash (encrypted via bcrypt), payout mobile money numbers (MTN, Airtel, Zamtel), and event details.
• Subscribers: Name, email address, and home city preference for location-relevant public event notifications.
• Technical Telemetry: IP address, user agent, session identifiers (`PHPSESSID`), and security tokens (`csrf_token`) to safeguard transactions.

3. Children's Privacy (COPPA & GDPR-K Compliance)

Zed Event Hub does NOT knowingly collect, process, or solicit personal data from children under the age of 13 (or under 16 without parental authorization). If you are under 18, you may only use this site with the active involvement and consent of a parent or legal guardian.

If we become aware that personal information from an unauthorized minor has been collected without verified parental consent, we take immediate steps to delete that data from our servers.

4. Payment Processing & Third-Party Processors

We work with trusted external service providers who process data strictly on our behalf under confidential, encrypted agreements:

• Lenco Payment Gateway: Encrypted payment infrastructure for Zambian Mobile Money (MTN MoMo, Airtel Money, Zamtel) and debit/credit cards. We do not store raw card credentials or PIN numbers.
• Gmail SMTP (Google Workspace): Secure transport layer for automated transactional emails, reservation codes, and ticket delivery.
• Content Delivery & Fonts: Open-source Google Fonts and Font Awesome loaded securely without tracking cookies.

5. Data Security & Retention Schedules

We implement industrial safeguards including Transport Layer Security (TLS 1.3 / HTTPS encryption), salted password hashing, rate-limiting, and OTP verification codes that automatically expire after 10 minutes.

Retention Periods:

• Marketing Subscriptions: Retained until you click Unsubscribe or request deletion.
• Ticket Reservations: Retained for historical event check-in records and up to 7 years for tax and statutory accounting compliance.
• Temporary Auth Codes: Purged automatically upon expiration.

6. Your Rights (Right to be Forgotten)

Under applicable data privacy laws, you possess the following enforceable rights:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete contact records.
• Right to Erasure ("Right to be Forgotten"): Request full deletion of your personal records through our self-service portal: Submit Data Deletion Request.
• Right to Withdraw Consent: Unsubscribe from marketing communications at any time with a single click via Unsubscribe Page.

7. Cookies & Local Storage

Our website uses essential session cookies (`PHPSESSID`, `csrf_token`) and local storage for your consent and interface settings. We do NOT use advertising trackers. Read our complete Cookie Policy.

8. Contact Our Privacy Officer

If you have any questions, wish to exercise your data rights, or want to file a privacy inquiry, please contact our Data Protection Officer:

Email: zedeventhub@gmail.com
Phone / WhatsApp: +260 772407024 | +260 964819916
Address: Zed Event Hub, Observer Tech, Lusaka, Zambia
Website: https://zedeventhub.shop