Who we are
Mpishi Energy Limited, 31 Peri Peri Street, Salama Park, Lusaka, Zambia (Company Reg. No. 120150135328), is the controller of the personal data described in this policy. Contact: info@mpishienergy.net.
What we collect
- Information you give us, for example your name, organisation, email address and message when you request data-room access, raise a grievance or contact us.
- Information needed for due diligence on investors, lenders, contractors and suppliers, including identity and ownership information required by anti-money-laundering rules.
- Information about community members and landowners gathered during stakeholder engagement and land processes, collected with notice and used only for that purpose.
- Basic technical data that your browser sends to any website, such as IP address and browser type, processed by our hosting provider for security.
Why we use it, and our legal basis
- To respond to enquiries and manage investor, lender and partner relationships (legitimate interests and contract).
- To carry out legally required know-your-customer, anti-corruption and sanctions checks (legal obligation).
- To operate our grievance mechanism and meet our environmental and social commitments (legitimate interests and legal obligation).
- Where we rely on your consent, you can withdraw it at any time.
Sharing, transfers and retention
- We do not sell personal data. We share it only with advisers, lenders, regulators or service providers who need it for the purposes above and are bound to protect it.
- Where data is transferred outside Zambia, for example to lenders' advisers, we use appropriate safeguards as the Act requires.
- We keep personal data only as long as needed for its purpose or as required by law, and then delete or anonymise it.
Website forms
- Messages sent through the data-room and grievance forms travel over an encrypted (HTTPS) connection and are delivered to our team by email. They are not stored on the web server.
- To prevent spam and abuse, the server keeps a one-way, non-reversible hash of your IP address for up to 15 minutes. No raw IP addresses are recorded.
Security
- Personal data is protected by role-based access, strong authentication, encryption in transit and at rest where practicable, and confidentiality obligations on everyone who handles it.
- Suspected personal-data breaches are investigated and, where required, notified to the Data Protection Commissioner and affected individuals.
Your rights
You may ask to access, correct or delete your personal data, object to or restrict its use, request portability, or withdraw consent. Write to info@mpishienergy.net. You may also complain to the Office of the Data Protection Commissioner in Zambia.
Cookies
- This website does not use advertising or analytics cookies and does not track you across other sites.
- We store one small item in your browser (local storage) to remember that you have seen our cookie notice. It contains no personal data.
- All fonts, scripts and images are served from our own website. No third-party trackers, advertising networks or content delivery services receive data about your visit.
- You can clear or block site storage in your browser settings at any time; the site will continue to work.
Contact
Mpishi Energy Limited, 31 Peri Peri Street, Salama Park, Lusaka, Zambia. Confidential reports: report@mpishienergy.net. General enquiries and grievances: info@mpishienergy.net.
This is the public version of an approved Mpishi Energy policy. It applies to Mpishi Energy Limited and its project companies and is reviewed at least annually.