Who we are

The Zimbabwe Data Protection Guide is an independent compliance resource operated by AfrIgnite Smart Solutions. We are the data controller for the personal data you submit through this website, our WhatsApp assistant and our consultation process.

What we collect

  • Contact details you give us — name, email, phone, organisation and sector — when you book a consultation or request a sector brief.
  • Self-check responses — the answers you provide in the five-question readiness self-check, if you choose to submit them.
  • WhatsApp messages you send to our assistant, and any lead details captured in conversation.
  • Client file records for organisations that engage us — processing registers, documents and communications.

Lawful basis

We process personal data only on a lawful basis recognised by the Act: consent (when you submit a self-check or request a brief), contract (when you engage us as a client), and our legitimate interests in responding to your enquiry and operating the service. We do not sell personal data to third parties.

Retention periods

  • Lead and enquiry data is retained for up to 730 days after last contact.
  • Client file records are retained for seven years after the engagement ends.
  • WhatsApp conversation logs are retained only as long as needed to provide the service and respond to you.

Your data subject rights

Under the Act you have the right to access, correct, delete, object to, and restrict the processing of your personal data, and to data portability. To exercise any of these rights, email info@dataprotection.co.zw or message us on WhatsApp (+263 71 958 6926). We respond within a reasonable time and at no charge.

Security

We apply technical and organisational measures appropriate to the sensitivity of the data, including access controls, encrypted storage for documents, and minimising what we collect.

Children

This service is not directed at children, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, contact us so we can delete it.

International transfers

Some infrastructure providers process data outside Zimbabwe. Where that occurs, we rely on appropriate safeguards consistent with the Act.

Changes to this notice

We may update this notice as our practices or the law changes. The date of the most recent version is available on request.

Sources: Cyber and Data Protection Act 5 of 2021 [Chapter 12:07]; S.I. 155 of 2024; CDPG 1 of 2025.