Privacy

Who this covers

Perko is an employee wellbeing and benefits platform for African workplaces, starting in Zambia. We connect employers, employees and category partners. We are not an HRIS, payroll system, insurer or counselling provider.

This notice covers two situations that work differently:

• Website visitors and enquiries — people who browse this site or use the contact form. Perko decides how that enquiry information is used.
• Signed-in platform users — employer administrators, employees and partner users whose accounts are set up for a workplace or partner organisation. Much of that employee information is provided so the employer can offer benefits; we handle it under the privacy rules described below and in any agreement with that employer.

This page describes current product practices. It does not replace jurisdiction-specific legal review, a data-processing agreement with an employer customer, or notices we may show at the point of a particular action.

This website and contact form

When you use the contact form, we ask for your name, organisation, email address and a short message about what you want to offer your people. We use that information only to understand and respond to your enquiry.

When you submit the contact form, we email your enquiry to our team so we can reply. We do not use that submission to create a lasting public mailing list. Those fields are used to respond to you and, if relevant, continue a conversation about Perko for your organisation.

We do not use the contact form to create an employee account. Employee access is set up by the employer.

Like most websites, our hosting provider may process technical request data (such as IP address, browser type and pages requested) needed to deliver and protect the site. We do not currently run a separate marketing cookie banner or advertising tracker on these public pages.

Accounts and the platform

There is no public sign-up. Pilot and workplace accounts are created for people who need them. Sign-in uses an email address and password.

Depending on your role, the platform may hold information such as:

• name and email;
• employer or partner organisation;
• role and account status;
• for employees, membership of groups used for eligibility;
• opportunity views and redemptions needed to show what you can use and to fulfil access;
• for employer administrators, configuration and aggregate engagement information for their own workplace;
• for partners, information needed to manage their offers and permitted fulfilment reporting.

We collect employee attributes only where there is a clear purpose: access, eligibility, communication, permitted reporting or service fulfilment. Employers are isolated from each other. Employees cannot see another employee's private activity.

Sensitive and confidential services

For counselling and other sensitive health, mental-health, financial or similar services:

• we minimise what we collect;
• we minimise what an employer can see about an individual;
• partners receive only what they need to deliver the service and for permitted reporting;
• clinical notes, diagnoses, counselling content and equivalent records are not exposed to employers;
• employer reporting for these services is aggregate and privacy-preserving;
• very small groups may be suppressed or generalised so individuals cannot be re-identified.

We do not promise anonymity unless a specific workflow actually supports it. We explain relevant privacy at the point of action where it matters. Where convenience conflicts with documented confidentiality, confidentiality wins.

Who else may see information

• Your employer — may see configuration, eligibility and permitted engagement insight for their workplace. They do not receive confidential individual counselling detail as described above.
• Category partners — receive only information necessary for service delivery and permitted reporting. They do not browse other employers' programmes.
• Infrastructure providers — for example hosting and authentication services that run the application and database on our behalf. They process data to provide those services, not to use it for their own unrelated purposes under our arrangements with them.
• Legal or safety requirements — we may disclose information if the law requires it, or to protect people from serious harm where we are permitted to do so.

We do not sell personal information.

How long we keep information

We do not keep personal information indefinitely without a reason. Contact enquiries are kept only as long as needed to respond and manage the relationship. Account and redemption records are kept while a workplace programme needs them and for legitimate historical integrity after access changes.

Specific retention periods will be set as legal and operational requirements mature, including for the Zambian market. Until then we apply purpose limitation and avoid unnecessary copies.

Security and access

Access follows least privilege across Perko administrators, employer administrators, employees and partner users. Employer data is isolated. Sensitive administrative actions should be auditable. The signed-in product path is designed so authorisation is enforced on the server, not only by what the interface hides.

No method of transmission or storage is perfectly secure. If we become aware of an incident that affects your personal information, we will act according to applicable requirements and our operational process at the time.

Your choices and requests

Depending on your situation and applicable law — including Zambia's Data Protection Act, 2021 where it applies — you may be able to ask what personal information we hold about you, ask for correction, object to certain uses, or ask for deletion where we no longer need the information.

Employees should usually start with their employer for workplace account questions, because the employer controls who is enrolled. You can also contact Perko using the details below. We may need to verify the request and, for workplace data, coordinate with the employer customer.

Changes

We will update this page when our practices change in a material way. The “Last updated” date at the top will change when we do. For significant changes that affect signed-in users, we will provide a clearer notice where practical.

How to contact us

Questions about privacy can be sent through our contact form. Ask for the privacy topic in your message so we can route it correctly.

Related reading: our terms of use.