Privacy notice
Draft for legal review. This describes how we intend to handle personal information under Zimbabwe's Cyber and Data Protection Act [Chapter 12:07].
Information we collect
- Account information: name, email address, telephone number, password credentials.
- Advertiser information: business details, verification evidence, listing content and payment records.
- Enquiry information: the name, contact details and message you send to an advertiser, plus your stated timeframe and finance status where you provide them.
- Usage information: pages viewed, searches, saves and contact reveals, kept in a privacy-conscious form for reporting to advertisers in aggregate.
How we use it
To operate the platform, deliver enquiries to the correct advertiser, verify advertisers, moderate listings, prevent fraud, take payment for advertising, produce aggregate market statistics and meet legal obligations. Marketing messages are sent only with separate consent, which you can withdraw at any time.
Who we share with
The advertiser you choose to enquire with; our hosting, database, email, messaging, analytics and payment suppliers acting under written agreements; and regulators or law enforcement where legally required. Verification documents are stored privately and are never shown publicly.
Retention schedule
- Account and profile data: while the account is open, then 12 months.
- Enquiries and lead records: 24 months from the last activity.
- Verification evidence: for the life of the account plus 24 months.
- Payment and invoice records: as required by tax law.
- Analytics events: 26 months, in aggregate form thereafter.
Your rights
You can request access to your information, correction, deletion, a copy for portability, or object to particular processing. Use our contact page and we will respond within the statutory period. Deleting an account does not remove records we must keep for legal, tax or fraud-prevention reasons.
Security
Data is transmitted over encrypted connections, access to personal data is restricted and logged, sensitive endpoints are rate limited and uploads are validated. No system is perfectly secure, so please use a strong, unique password.
This notice must be reviewed by a Zimbabwean legal practitioner before launch, including the named data controller, the data protection officer contact details and supplier list.