Mpishi Energy
Mpishi Energy / Policies / Confidentiality

Confidentiality Policy

Investors, lenders, partners, government counterparties and communities trust us with sensitive information. This policy sets out how we classify, share and protect it, and what everyone working with us must do to keep it safe.

Issued October 2026

  • Classified

    Information labelled Public, Internal or Confidential and handled accordingly.

  • Need to know

    Access limited to named people, under NDA, and revocable.

  • Logged

    Data-room access is recorded and documents may be watermarked.

  • Lasting duty

    Confidentiality obligations continue after a relationship ends.

What is confidential

  • Commercial terms, financial models, offtake and PPA terms, tariffs and negotiations.
  • Land, permitting, technical and grid information not yet public.
  • Personal data of employees, community members and counterparties.
  • Information received from third parties under a confidentiality obligation, and internal policies and investigation records.

Classification

  • Public: approved for release, such as this website.
  • Internal: for Mpishi Energy personnel and advisers; not for external release without approval.
  • Confidential: commercially or personally sensitive; shared only under NDA or with named individuals on a need-to-know basis.

How we share it

  • Data-room materials are released only after a non-disclosure agreement is signed and access is approved by the Managing Director.
  • Access is limited to named individuals, on a need-to-know basis, and can be revoked at any time.
  • Documents may be watermarked and access logged; downloads may be restricted for the most sensitive material.

How we protect it

  • Role-based access, strong authentication and encrypted storage for electronic records.
  • Clear-desk practice and secure storage for paper records.
  • Confidentiality obligations in employment contracts and in contracts with advisers, contractors and suppliers, continuing after the relationship ends.
  • Secure return or destruction of information at the end of an engagement.

Breaches

  • Any actual or suspected disclosure of confidential information must be reported immediately to the Managing Director.
  • We investigate, contain and, where personal data is involved, notify affected people and the Data Protection Commissioner as the law requires. Breaches may lead to disciplinary or contractual action.

Contact

Mpishi Energy Limited, 31 Peri Peri Street, Salama Park, Lusaka, Zambia. Confidential reports: report@mpishienergy.net. General enquiries and grievances: info@mpishienergy.net.

This is the public version of an approved Mpishi Energy policy. It applies to Mpishi Energy Limited and its project companies and is reviewed at least annually.