Effective Date: September 26, 2025
This Privacy Policy describes how Digipost (“we,” “us,” or “our”) collects, uses, and discloses your personal information when you visit or use our website located at www.digipost.co.zw (the “Site”) and our services.
We are committed to protecting your privacy and handling your personal data in accordance with applicable Zimbabwean law, specifically the Cyber and Data Protection Act [Chapter 12:07] and its accompanying regulations.
1. Contact Information
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:
Company Name: Digipost
Address: Shop 26, Village Walk, 8th St, Borrowdale, Harare, Zimbabwe
Email: digipost26@gmail.com
Phone: +263 785 900 786
2. Personal Data We Collect
We collect personal information that you voluntarily provide to us when you use our services, register on the Site, express an interest in obtaining information about us or our products and services, or otherwise contact us.
The personal data we collect may include:
Identity Data: Name, surname.
Contact Data: Postal address, email address, phone number.
Transaction Data: Details about services you have purchased from us.
Other Information you choose to provide to us (e.g., in contact forms or correspondence).
Data Collected Automatically
When you visit our Site, we automatically collect certain information about your device and usage, which may include:
Log Data: Internet Protocol (IP) address, browser type, device details, operating system, referring/exit pages, and the time and date of your visit.
Usage Data: Information about how you use our Site, such as the pages you view and the time spent on those pages.
Cookies and Tracking Technologies: We may use cookies and similar tracking technologies (like web beacons) to access or store information. Refer to our Cookie Policy (if separate, otherwise detail below) for more information.
3. How We Use Your Personal Data
We process your personal data based on the principles of lawfulness, fairness, and transparency, as required by the Cyber and Data Protection Act. We use the information we collect for the following purposes:
To Provide Services: To fulfill and manage your orders, payments, and other transactions related to our products and services.
To Communicate with You: To send you information, updates, and service-related notices (e.g., confirmations, technical notices, security alerts).
Customer Support: To respond to your enquiries and provide support.
Marketing and Promotions: To send you promotional and marketing communications, subject to your consent and preferences.
Site Improvement: To monitor and analyse trends, usage, and activities in connection with our Site to improve its functionality and user experience.
Legal Compliance: To comply with legal obligations, including those related to the Cyber and Data Protection Act.
Security: To maintain the security and integrity of our Site and prevent fraud.
4. Sharing of Personal Data
We may disclose your personal data to the following categories of recipients:
Service Providers: Third-party companies and individuals who perform services on our behalf (e.g., hosting, data analysis, email delivery, payment processing). They are obligated not to disclose or use it for any other purpose.
Business Transfers: In connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company.
Legal Compliance and Protection: To comply with legal requirements, respond to lawful requests (e.g., subpoenas, court orders), or protect our rights, property, and safety, as well as the rights, property, and safety of our users or others.
We will not sell or share your data with other third parties for their direct marketing purposes without your explicit consent.
5. Lawful Basis for Processing (as per Zimbabwean Cyber and Data Protection Act)
We will only process your personal data where we have a lawful basis to do so, which primarily includes:
Consent: Where you have given clear consent for us to process your personal data for a specific purpose (e.g., marketing).
Contract: Where the processing is necessary for the performance of a contract to which you are a party (e.g., fulfilling your order for a service).
Legal Obligation: Where the processing is necessary for compliance with a legal obligation to which we are subject (e.g., financial reporting).
Legitimate Interests: Where the processing is necessary for our legitimate interests or those of a third party, provided those interests are not overridden by your fundamental rights and freedoms (e.g., improving our services, preventing fraud).
6. Data Retention
We will retain your personal data only for as long as is necessary for the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by law (e.g., for legal, accounting, or reporting requirements).
7. Data Security
We implement appropriate technical and organisational security measures to protect the security of your personal data both online and offline, as required by the Cyber and Data Protection Act. While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee its absolute security.
8. Your Data Protection Rights (Data Subject Rights)
In accordance with the Cyber and Data Protection Act, you have the following rights regarding your personal data:
The Right to Be Informed: You have the right to be informed about the collection and use of your personal data.
The Right of Access: You have the right to request a copy of the personal data we hold about you.
The Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data we hold.
The Right to Object: You have the right to object to the processing of your personal data in certain circumstances.
The Right to Erasure (The Right to be Forgotten): You have the right to request the deletion or removal of your personal data where there is no compelling reason for its continued processing.
The Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances.
The Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
The Right to Withdraw Consent: Where we are relying on consent to process your personal data, you have the right to withdraw that consent at any time.
To exercise any of these rights, please contact us using the Contact Information provided above. We will respond to your request within the timeframe required by law.
9. Children’s Privacy
Our Site and services are not intended for use by anyone under the age of 18. We do not knowingly collect personally identifiable information from children under 18. If you are a parent or guardian and become aware that your child has provided us with personal data, please contact us. If we discover that a child under 18 has provided us with personal data, we will take steps to delete that information.
10. Changes to This Privacy Policy
We may update our Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the “Effective Date” at the top of this policy. We encourage you to review this Privacy Policy periodically for any changes.
11. Lodging a Complaint
If you feel that we have not addressed your concerns in a satisfactory manner, you have the right to lodge a complaint with the Data Protection Authority in Zimbabwe, which is the Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ).