Privacy Policy

This policy explains how the Institute of Internal Auditors — Zambia ("IIA Zambia", "we", "us") collects, uses, and protects information through this membership portal (membership.iiazambia.com), covering members, applicants, event registrants, and administrators.

Information we collect

• Membership register data — name, membership number (GAN), status, and join date, sourced from IIA Zambia's official records.
• Contact and profile details — email address, phone number, organization, job title, and postal/physical address, provided by you when you claim your profile, submit a membership application, or an admin adds them on your behalf.
• Google account information — when you sign in with Google, we receive your Google account email address to link it to your membership record (members) or to verify you against a pre-authorized list (admins). We do not receive your Google password, and we do not post to or read your Google account beyond this sign-in.
• Membership activity — payment records (amount, method, date — not card or bank details, which are handled entirely outside this app via direct bank transfer), event registrations and attendance, CPE (continuing professional education) hours you log, certifications, and committee membership.
• Technical data — a single essential sign-in cookie, a few browser-only preferences like your light/dark theme choice, and standard web server logs (IP address, browser type) kept by our hosting providers for security and reliability. See our Cookie Policy for the full detail.

How we use this information

• To maintain an accurate register of IIA Zambia members.
• To let you view your own membership status, CPE hours, certifications, digital membership card, and event history.
• To let anyone (including employers) verify a member's current standing using their membership number — this verification only ever shows name, category, status, and validity, never contact details or payment history.
• To process event registrations, issue certificates and invoices, and send renewal or event-related reminders once you've claimed your profile.
• To let IIA Zambia administrators manage membership records, payments, and events, with every change logged in an internal audit trail.

Who we share information with

We don't sell or rent your information. It's shared only with the service providers that operate this portal on IIA Zambia's behalf:

• Google — for sign-in (OAuth), per Google's own privacy policy.
• Supabase — our database and authentication provider, which stores your membership record.
• Vercel — which hosts this website.
• Resend — which delivers renewal reminders, certificates, and other notification emails on IIA Zambia's behalf, once configured.

Your choices

• You can view and update your own contact details, organization, and job title at any time from your member dashboard.
• If your profile was claimed in error or by the wrong person, an administrator can release the claim, unlinking the Google account so it can be re-claimed correctly.
• To request a copy of your data, a correction, or deletion, contact us using the details below.

Data retention

We keep membership records for as long as you're a member and for a reasonable period afterward, to maintain accurate historical records (e.g. for renewal history, CPE compliance, and financial reporting). Deleting a member record also removes their associated payments, certifications, and event attendance history.

Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision.

Contact us

For questions about this policy or your data, contact IIA Zambia at membership@iiazambia.com.