Privacy Policy

1. Overview and scope

This Privacy Policy explains how Pemu Computer Services (“Pemu”, “we”, “us”, or “our”) handles personal information when you visit this website, contact us, request a quotation, make a booking, purchase a product, or use our IT, cybersecurity, software development, hosting, repair, support, or related technology services.

Pemu Computer Services, located in Kamwala South, Lusaka, Zambia, is the data controller for personal information processed for the purposes described here. This policy is intended to support our obligations under Zambia’s Data Protection Act No. 3 of 2021 and other applicable law. It does not apply to third-party websites or services that have their own privacy notices.

2. Information we collect

Information you provide

• Contact information: your name, email address, telephone number, company, subject, and message.
• Quotation information: requested service, project description, requirements, estimated budget, and related business details.
• Booking information: chosen service, preferred date and time, company, contact details, and notes.
• Assistant callback information: when you ask Lukas, our provisional AI assistant, for a team callback, we collect your name, email address, telephone number, and optional message so Pemu can respond. Ordinary conversations with Lukas remain in the current browser session and are not sent to an external AI service.
• Customer and transaction information: billing details, order and licence information, support history, agreements, invoices, and payment status. Payment-card information may be processed directly by a payment provider and is not necessarily stored by us.
• Service information: device, system, domain, account, network, diagnostic, and technical information reasonably required to deliver or support a service.
• Communications: emails, telephone correspondence, feedback, complaints, and other records of your interactions with us.

Information collected automatically

When you use the website, we and our service providers may receive your IP address, browser and device type, operating system, approximate location, referring page, pages viewed, session activity, timestamps, error information, and security signals. We do not ask you to submit sensitive personal information through ordinary website forms. Please avoid including passwords, financial credentials, health information, or other unnecessary sensitive information in free-text fields.

3. How and why we use information

We process personal information only where we have an appropriate purpose and lawful basis, including to:

• respond to enquiries and prepare requested quotations or proposals;
• schedule appointments and communicate booking updates;
• enter into and perform contracts for products, hosting, support, repairs, development, and professional services;
• create and administer customer, licence, domain, hosting, and support records;
• process transactions, invoices, renewals, and account-related communications;
• secure the website, prevent fraud and spam, troubleshoot problems, and maintain reliable services;
• measure website use and improve our content, services, accessibility, and user experience;
• protect our legal rights, resolve disputes, keep required business records, and comply with lawful requests;
• send marketing communications where you have consented or where otherwise permitted by law. You may opt out at any time.

Depending on the circumstances, processing may be based on your consent, steps requested before entering a contract, performance of a contract, compliance with a legal obligation, or our legitimate interests in operating, securing, and improving our business without overriding your rights.

4. Cookies, local storage, and analytics

Our website may use the following technologies:

• Essential session and security cookies used by the website framework to maintain sessions, protect form submissions, and provide requested functions.
• Theme preference storage named pemu-theme in browser storage and a theme cookie, retained for up to one year, to remember Light, Dark, or System appearance.
• Google Analytics to understand visits, device/browser categories, approximate geography, and interactions. Google Analytics may use identifiers such as _ga and _ga_*, subject to our configuration and Google’s controls.
• Cloudflare Turnstile on selected forms to distinguish legitimate visitors from automated abuse. Cloudflare may process device, network, and interaction information for this security purpose.

You can restrict or delete cookies through your browser settings. Blocking essential storage may cause parts of the website to work incorrectly. You can also use Google’s available Analytics opt-out controls. Learn more from Google Analytics privacy information and Cloudflare’s Privacy Policy.

5. When we share information

We do not sell your personal information. We may disclose relevant information to:

• hosting, cloud, email, analytics, security, domain, software, licence, payment, backup, and technical-support providers acting for us;
• technology manufacturers, distributors, and authorised partners where necessary to quote, register, activate, renew, support, or fulfil a product or service;
• professional advisers such as accountants, auditors, insurers, and legal advisers;
• regulators, courts, law-enforcement bodies, or other authorities when disclosure is required or permitted by law;
• a successor or prospective purchaser in connection with a genuine merger, financing, reorganisation, or sale of all or part of our business, subject to appropriate confidentiality safeguards.

International processing

Some service providers and technology partners may operate infrastructure outside Zambia. Where personal information is transferred or remotely accessed across borders, we seek to use lawful transfer arrangements and reasonable contractual, organisational, and technical safeguards appropriate to the information and applicable Zambian requirements.

6. Retention and security

We retain information only for as long as reasonably necessary for the purpose collected, including service delivery, warranty and support, security, dispute resolution, and legal, tax, accounting, or regulatory requirements. Enquiries, unsuccessful quotations, and unconfirmed bookings are periodically reviewed and deleted or anonymised when no longer needed. Customer, contractual, invoice, and transaction records may be kept for the legally required recordkeeping period. Backup copies may remain until safely overwritten under our backup cycle.

We use proportionate administrative, technical, and physical measures designed to protect personal information, including access controls, authentication, encrypted transport where supported, backups, monitoring, software maintenance, and staff or supplier confidentiality obligations. No internet transmission or storage system is completely secure, so we cannot guarantee absolute security. If a breach creates a risk requiring notification, we will take steps required by applicable law.

7. Your choices and data-protection rights

Subject to applicable limitations and verification of your identity, you may have the right to:

• be informed about our processing and request access to your personal information;
• request correction of information that is inaccurate or incomplete;
• request deletion or restriction of processing where the legal conditions apply;
• object to certain processing, including direct marketing;
• withdraw consent at any time where processing relies on consent, without affecting earlier lawful processing;
• request portability of eligible information and information about recipients;
• raise a concern with us or lodge a complaint with Zambia’s Data Protection Commission.

To make a request, email us using the details below and describe the information or right concerned. We may ask for reasonable proof of identity and may retain a record of the request. More information about your rights is available from the Data Protection Commission of Zambia.

Children

This website and our general business services are not directed to children. A parent or legal guardian should contact us before providing personal information for a child. If we learn that information was submitted without appropriate authority, we will take reasonable steps to delete it.

8. Changes and contact information

We may update this policy when our practices, technologies, or legal obligations change. The revised policy will be published here with a new “last updated” date. Material changes may also be communicated through an appropriate additional notice.