iMpiya Privacy Notice
We are Netciety Innovation Limited (“Netciety”), the parent company and operator of the iMpiya platform (“iMpiya”), a payment technology service registered and incorporated under the laws of Zambia with offices at 14691/M Libala South, Lusaka, Zambia. Our registration number is 120241007551. For any access request, questions, or inquiries about how we use your Personal Data and our privacy practices, please contact our support team.
Overview
Netciety, through its platform iMpiya, is committed to protecting the rights and privacy of individuals in accordance with the Zambia Data Protection Act, 2021 and other applicable laws. This Privacy Notice (“Notice”) is designed to give you information on our privacy practices, the measures we take to protect the security of data, and to help you understand your rights and choices when we collect or process your Personal Data.
This Privacy Notice applies to all iMpiya Services you access but the parent company.
Our Privacy Principles
Netciety and iMpiya focus on the following core principles:
Empower the individual: Giving you control over your Personal Data and voluntary choices.
Keep and secure Personal Data: Applying strong technical and organisational measures.
Be transparent and educate users: Clear communication on what we collect, why, and how.
Abide by local laws: Compliance with Zambian privacy and financial regulations.
Ensure accuracy: Keeping Personal Data up to date.
Collect on a “need-to-collect” basis: We collect only what is necessary to deliver our Services and meet legal obligations.
1. Personal Data We May Collect About You
We may collect, use, or process:
Identity Data: Full name, Zambian National Registration Card (NRC), passport or other government ID, date of birth, and photos/video for KYC/KYB/AML purposes.
Contact Data: Address, email, phone, device details, billing info.
Log/Technical Data: IP address, device IDs, browsing behaviour, etc.
Financial Data: Bank account number, card details, sort code, merchant info, transaction date & amount.
Transactional Data: Details of your transactions using iMpiya.
Marketing & Communications Data: Your opt-in/out preferences for marketing.
We do not collect Special Categories of Personal Data unless required by Zambian law and with your explicit consent.
2. How We Get Your Personal Data and Why We Have It
We collect your data when you:
Sign up for an iMpiya account;
Use Netciety’s services through the iMpiya platform affiliates and subsidiary companies.
- Contact our support team;
Apply for jobs with Netciety/iMpiya;
Attend events/webinars;
Are referred by verified third-party sources such as Zambian credit reference bureaus, identity verification providers, and fraud prevention agencies.
3. The Legal Basis for Using Your Personal Data
We rely on the following under Zambian law:
Your consent;
Contractual obligation;
Legal obligation (e.g., compliance with the Bank of Zambia AML & CFT directives);
Legitimate interest (fraud prevention, service improvement).
4. How We May Use Your Personal Data
Create and manage accounts;
Process transactions;
Prevent fraud and financial crime;
Communicate offers, updates, or service notices;
Comply with Zambian AML, CFT, and KYC/KYB obligations;
Improve our services through analytics.
5. Your Data Protection Rights (Under the Zambia Data Protection Act, 2021)
You have the right to:
Be informed;
Access your data;
Request deletion (subject to regulatory retention requirements);
Correct inaccurate data;
Opt-out of marketing;
Object to processing;
Request portability of your data.
Requests can be made a through our support team.
6. Disclosing Your Personal Data
We may share data with:
Netciety affiliates and iMpiya service partners;
Zambian and international financial institutions;
Service providers for fraud prevention, analytics, and customer service;
Regulators such as the Bank of Zambia, ZICTA, and Financial Intelligence Centre (FIC);
In legal proceedings or compliance investigations.
7. Data Security and Retention
We use encryption, firewalls, secure servers, and restricted access to protect data.
Data is retained only as long as required by Zambian law.
8. Marketing
We will only send marketing with your consent, and you can opt out at any time.
9. Cookies
We use cookies to improve our services. See our Cookie Policy.
10. Minors
iMpiya does not knowingly collect data from persons under 16.
11. International Data Transfers
If we transfer your data outside Zambia, we will ensure compliance with the Zambia Data Protection Act, 2021.
12. Updates to This Privacy Notice
We may amend this notice and will inform you through our website or by email when material changes occur.
13. Contact Us
Data Protection Officer
Netciety Innovation Limited – Operator of iMpiya
14691/M Libala South, Lusaka, Zambia
Registration Number: 120241007551
Email: hello@netciety.co
