Privacy notice

1. Who we are

This website is run by UKAF Cargo Limited, a private company limited by shares registered in Zambia (registration number 120261048100), with its registered office at Ibex, Salama Park, Lusaka, Zambia. The site is aimed at buyers in Zambia.

We are the "data controller" for the personal information described in this notice. We are registered, or are completing our registration, as a data controller with the Office of the Data Protection Commissioner of Zambia.

Privacy contact: [email protected], or write to us at our registered office.

2. The law that applies

We handle personal information in line with the Data Protection Act, 2021 of Zambia and the Electronic Communications and Transactions Act, 2021, together with the other Zambian laws that apply to a business operating online. Our website servers are in the United Kingdom, so the providers who host and protect the site also operate under UK data protection law; we expect the same standard from them.

3. The short version

This website shows vehicles and equipment for sale. It has no customer accounts, no payments and no advertising trackers. The only form is the optional "Leave a review" page, which we open only when we want customers to send us reviews (see section 4). We keep simple, anonymous counts of how often each vehicle is viewed and how often its WhatsApp button is pressed, so we know which vehicles people want. These counts use no cookies, store no IP address or device details and cannot identify you; the only thing recorded about a visit is the country it came from. If you want to talk to us, you message us on WhatsApp or email us. We collect as little as we can.

4. What we collect

• Technical logs. Like every website, our hosting provider and our security provider (Cloudflare) record your IP address, browser and device type, the pages requested and the time. This is needed to deliver the site, keep it secure and stop abuse.
• WhatsApp messages. If you click a WhatsApp link and message us, we receive your WhatsApp phone number, your profile name and whatever you choose to send (for example questions about a vehicle, or photographs).
• Emails. If you email us, we keep your email address and the message.
• If a sale goes ahead. Only then, and only what is needed to complete it: your name, contact details, the delivery address in Zambia, and the information needed for shipping and customs clearing (for example identification required by a clearing agent or the Zambia Revenue Authority).
• Reviews you send us. If we have the "Leave a review" page open and you use it, we keep the name, town or company, star rating, review text and photos you send, an email address if you give one (never shown), the time you sent it, and the fact that you ticked the box agreeing to the wording shown on the page. We save that wording so we can show what you agreed to. Staff read every review first; only the parts they approve are shown on the website, and they may leave parts out.
• Staff accounts. Our own staff sign in to manage stock. That is their information, held for that purpose only; ordinary visitors never have an account.

We do not ask you for anything else, and we do not collect information about you from other sources. The vehicle listings are about vehicles, not people: we do not publish the personal details of the private individuals selling them.

5. Why we use it, and our legal basis

Under the Data Protection Act we must have a lawful reason each time. Ours are:

• To show and secure the website (technical logs): our legitimate interest in running a safe, working website, which does not override your rights.
• To reply to you and help with a vehicle (WhatsApp and email): because you asked us to, and to take steps at your request before any contract.
• To carry out a sale you have agreed to (delivery, shipping, clearing): to perform that contract.
• To meet legal obligations, such as tax, customs, accounting and anti-fraud records, and to respond to lawful requests from authorities.
• To keep and show a review you send us (including photos): your consent, given by ticking the box on the review page. You can withdraw it at any time and we will remove your review and photos.
• Marketing messages: only with your consent. We do not send any unless you ask us to, and you can say STOP at any time.

We do not sell your information and we do not make automated decisions about you.

6. Who we share it with

• Our website hosting provider (servers in the United Kingdom).
• Cloudflare, which protects and speeds up the site.
• Meta (WhatsApp), when you message us. Meta's own privacy terms apply to the messaging service.
• Shipping lines, freight forwarders, clearing agents and inspection providers, and the relevant authorities, only where a sale you have agreed to needs it.
• Our professional advisers (accountants, lawyers), and authorities such as the Zambia Revenue Authority or law enforcement where the law requires or allows it.

Everyone who handles information for us does so under a written agreement or their own binding terms, and only for the purpose we give them.

7. Where it is stored (transfers outside Zambia)

Our website servers are in the United Kingdom, and Cloudflare and Meta operate globally. So information about visitors in Zambia is processed outside Zambia. We only do this where the Data Protection Act allows: the providers are bound by written data protection terms and the UK has its own comprehensive data protection law. WhatsApp conversations are held on our staff devices and in WhatsApp's own systems.

8. How long we keep it

• Technical logs: up to 30 days, unless needed to investigate a security problem.
• WhatsApp conversations and emails that do not lead to a sale: deleted after 12 months without contact.
• Records of a completed sale or shipment: kept for as long as tax, customs and accounting law require.
• Marketing details: until you withdraw consent.
• Reviews and review photos: until you ask us to remove them, or until we stop using them. Reviews we choose not to publish are deleted by our staff when they are checked.

9. How we protect it

The site is served over an encrypted (HTTPS) connection. Access to the staff area needs a personal account with a strong password, and staff only see what their role needs. We collect minimal information so there is less to protect. If a breach affecting personal information occurs, we will notify the Data Protection Commissioner within 24 hours, as the Data Protection Act requires, and tell you as soon as practicable.

10. Your rights

Under the Data Protection Act you can ask us to:

• tell you whether we hold information about you and give you a copy;
• correct information that is wrong or incomplete;
• delete it, or stop using it, where we have no good reason to keep it;
• stop using it for a purpose you object to, including marketing;
• withdraw any consent you gave, at any time (this does not affect what we did before);
• explain how a decision affecting you was made.

Use our My data page, or email [email protected]. We may need to confirm who you are first, and we will answer within 30 days. We do not normally charge a fee.

11. Children

This site is for adults buying vehicles. It is not aimed at anyone under 18 and we do not knowingly collect information from children.

12. Complaints

Please tell us first at [email protected]; we would like the chance to put it right. You also have the right to complain to the Office of the Data Protection Commissioner of Zambia, and to go to the courts.

13. Cookies

See our cookie policy. In short, this site only uses cookies that are strictly necessary.

14. Changes

We will update this notice if how we handle information changes, and show the date below. The current version is always on this page.

Version 1.2-showcase — last updated 28 September 2026.