How Cavara handles personal information.

Effective date and scope

Effective date: March 10, 2026. This policy applies to personal data processed through the Cavara website, quote forms, WhatsApp enquiries, email communications, and related pre-contract discussions.

Data controller

Cavara Cabins (Lusaka, Zambia) is the data controller for personal data collected through this site.

Information we collect

We collect data you provide directly, including name, email, phone number, project location, budget range, timeline, and project requirements. We may also collect technical information such as IP address, browser type, and basic site usage diagnostics.

Why we process your data (lawful basis)

• To respond to enquiries and prepare quotations (pre-contract steps requested by you).
• To deliver requested services and project communications (contract performance).
• To maintain security, prevent misuse, and improve service quality (legitimate interests).
• To meet legal and record-keeping obligations where required by applicable law.
• Where needed, based on your consent, which you may withdraw at any time.

Sharing and transfers

Cavara does not sell personal data. We may share data with vetted service providers (for hosting, communications, and operations) and project partners where required to handle your enquiry or deliver services. If data is transferred outside Zambia, we apply reasonable contractual and operational safeguards.

Retention

We retain personal data only as long as necessary for enquiry handling, service delivery, legal compliance, dispute resolution, and operational records. Retention periods vary by record type and legal requirements.

Your rights

Subject to applicable law, including the Zambia Data Protection Act, 2021, you may request access, correction, deletion, objection/restriction of processing, or withdrawal of consent where consent is the basis for processing.

Security

We apply reasonable technical and organizational safeguards to protect data against unauthorized access, loss, misuse, and disclosure. No internet transmission or storage system can be guaranteed fully secure.

Children

This website is not directed to children. We do not knowingly collect personal data from children without appropriate legal authorization.

Complaints and regulator contact

If you believe your data rights have been infringed, please contact us first so we can resolve the issue. You may also lodge a complaint with the Data Protection Commissioner in Zambia.