This Privacy Policy explains what personal information Texila American University (TAU) Zambia collects through tau.edu.zm and related digital services, why we collect it, and the choices available to you. Read it together with our Cookie Policy and Terms and Conditions.
1. Introduction
“TAU”, “TAU Zambia”, “Texila Zambia”, “we”, “us” and “our” refer to Texila American University Zambia. “You” means any visitor, applicant, student or other person whose personal information we process in connection with the website and our services.
Who we are and the law we follow
TAU Zambia processes personal information in accordance with the Data Protection Act No. 3 of 2021 of Zambia and other data protection laws that apply to our international applicants and students.
Data controller: [CONFIRM: Zambian registered company name, e.g. Texila American University Zambia Limited] ([CONFIRM: PACRA registration number]), 405A, Given Lubinda Road, Lilayi, Lusaka, Zambia. Registered with the Office of the Data Protection Commissioner as a data controller, certificate number [CONFIRM: ODPC registration certificate number].
Data Protection Officer: [CONFIRM: DPO name and job title] oversees how we handle personal information. Contact: [CONFIRM: DPO email, e.g. [email protected]], or by post to the Data Protection Officer at the address above.
2. Information We Collect
| Category | Examples |
|---|---|
| Identity and contact details | Name, date of birth, nationality, NRC or passport details, email address, phone number, permanent and postal address |
| Application and academic records | School certificates and results (for example ECZ results), transcripts, prior education, admission and enrolment status |
| Financial information | Fee payment records and billing details. Card data is generally handled directly by our authorised payment providers – see our Payment and Refund Policy |
| Communications | Enquiries, support requests and correspondence with TAU staff, including chat and WhatsApp messages |
| Technical and usage data | IP address, browser and device type, pages visited and cookie data – see our Cookie Policy |
Sensitive personal data. For medical and health programmes we may need health information, such as immunisation records and medical fitness certificates, and background or police clearance required by hospitals, the HPCZ or other regulators. We collect this only when your programme or the law requires it, keep it separately with restricted access, store it in Zambia as the Data Protection Act requires, and share it only with the clinical sites or authorities that need it.
We collect information directly from you (for example through application and contact forms) and automatically as you use our website.
3. How We Use Your Information
- Process applications and manage admissions and enrolment
- Provide academic, administrative and student support services
- Process payments and manage financial records
- Respond to enquiries and provide support
- Send service and administrative messages and, where you have agreed, marketing communications
- Keep our website and systems secure and working properly
- Meet legal, regulatory and accreditation obligations, including those of the HEA, ZAQA and HPCZ
Improve our website, programmes and services
4. Our Legal Reasons for Using Your Information
We use personal information only where the Data Protection Act, 2021 allows it. Depending on the purpose, we rely on one of the following:
- Contract: to assess your application, enrol you and deliver your programme
- Legal obligation: to meet accreditation, immigration, tax and regulatory requirements
- Legitimate interests: to keep our website and systems secure and to improve our services, where this does not override your rights
- Consent: for marketing messages and non-essential cookies. You can withdraw consent at any time
- Vital interests: to protect your life or health in an emergency
We process sensitive personal data only where the Act specifically allows it, for example with your explicit consent, for medical purposes, or to establish or defend legal claims.
6. Cookies and Tracking Technologies
Our website uses cookies and similar technologies to operate, secure, analyse and improve tau.edu.zm. Details of the cookies we use and how to manage them are in our Cookie Policy and on our Privacy and Cookie Choices page.
7. Data Retention
We keep personal information only for as long as we need it for the purposes in this Policy, and for any further period the law requires. As section 51 of the Data Protection Act requires, this is at least one year after we stop using it for its original purpose, unless a different period applies. When we no longer need it, we delete it or make it anonymous.
| Information | How long we keep it |
|---|---|
| Enquiries and prospective-student contacts | 2 years after our last contact with you |
| Applications that do not lead to enrolment | 1 year after the intake you applied for |
| Student academic records and transcripts | Permanently, so we can verify your qualifications |
| Other student files (admission documents, correspondence) | 7 years after you leave TAU |
| Financial and payment records | At least 6 years, or longer if Zambian tax law requires it |
| Health and background-check records | Until the end of your clinical training, then 1 year |
| Marketing preferences | Until you opt out; we then keep a short record so we do not contact you again |
| Website analytics data | 14 months |
| CCTV footage | 30 days, unless needed for an investigation |
8. Your Privacy Choices and Rights
Your rights. Subject to the Data Protection Act, 2021, you can ask us to:
- tell you whether we hold your personal information and give you a copy of it
- correct information that is wrong or incomplete
- delete your information, subject to legal and academic record-keeping requirements
- restrict or object to certain uses of your information, including direct marketing
- send your information to you or another organisation in a portable format
- not be subject to a decision based only on automated processing that significantly affects you
- withdraw any consent you have given
How to make a request. Use our Contact Us page or email [CONFIRM: DPO email, e.g. [email protected]]. We will acknowledge your request promptly and aim to respond within 30 days. We may need to verify your identity first.
Complaints. If you are unhappy with how we have handled your information, please contact our Data Protection Officer first. You also have the right to lodge a complaint with the Office of the Data Protection Commissioner of Zambia.
To manage cookies and marketing preferences, see our Privacy and Cookie Choices page.
9. Data Security
We use reasonable administrative, technical and physical safeguards to protect personal information against unauthorised access, loss, misuse or alteration. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
If something goes wrong. If a security breach affects personal information, we will notify the Data Protection Commissioner within 24 hours, as the Data Protection Act requires, and tell affected individuals as soon as possible, explaining what happened and what we are doing about it.
10. Where Your Information Is Stored and Transferred
The Data Protection Act requires personal data to be processed and stored on servers or data centres in Zambia, and sensitive personal data must always be stored in Zambia.
TAU is part of an international group and works with service providers in other countries, such as cloud hosting, email, analytics and student-management systems. Where personal data (other than sensitive personal data) is transferred outside Zambia, including to [CONFIRM: countries, e.g. India, Mauritius, the United States and the European Union], we do so only in the circumstances allowed by section 71 of the Act, such as with your consent and approved contractual safeguards, or with the authorisation of the Data Protection Commissioner. Recipients must protect your information to a standard comparable to Zambian law.
11. Children’s Privacy
Our website and services are intended for prospective and current higher-education students and are not directed at children. Where an applicant is under 18, we process their personal information only with the consent of a parent or legal guardian, as the Data Protection Act requires.
12. Third-Party Links
Our website may link to third-party websites. This Privacy Policy does not apply to those websites, and we encourage you to read their privacy practices separately.
13. Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices, technology, legal requirements or services. The latest version will always be published on this page with an updated review date.
14. Contact Us
If you have questions about this Privacy Policy or wish to exercise a privacy right, contact: