Privacy policy

02What this policy covers

This policy covers information we collect through this website, and information you give us when you enquire about our services.

It does not cover the websites or social media accounts we build and manage for our clients. When we handle information on a client's behalf we act as a processor under that client's instructions and under our written contract with them. If you have a question about a client's website, that client's own privacy policy applies.

03What we collect

When you send an enquiry through the contact form, we collect:

• Your name
• Your email address
• Which service you are interested in
• Whatever you write in the message field

When you simply visit the site, our hosting provider and analytics record technical information such as the pages you viewed, your approximate location by country, your device and browser type, and your IP address.

We do not ask for identity documents, payment card details or any special category of personal information through this website. Please do not send us that kind of information through the contact form.

04Why we collect it

We use enquiry information only to reply to you and, if you go ahead, to prepare a quote and a contract. The lawful basis is your consent in sending the enquiry, and the steps necessary before entering into a contract with you.

We use technical and analytics information to understand which pages are useful and to keep the site working. The lawful basis is our legitimate interest in running and improving the site.

We do not sell personal information. We do not use it for automated decision-making or profiling.

05Who else handles it

We use a small number of service providers to run the site. Each one only receives what it needs:

• Vercel, which hosts the website and keeps server logs
• Formspree, which delivers contact form submissions to our email
• [ANALYTICS PROVIDER], which records anonymous usage statistics
• Our email provider, which stores correspondence with you

We do not share your information with anyone else unless you ask us to, or unless the law requires it.

06Information sent outside Zimbabwe

The providers listed above operate servers outside Zimbabwe. That means your information is transferred across borders, which the Cyber and Data Protection Act regulates.

We only use providers that apply recognised security standards and contractual data protection terms. If you would rather not have your information handled this way, contact us by email or WhatsApp instead of using the form, and we will deal with you directly.

07How long we keep it

Enquiries that do not become projects are kept for 24 months and then deleted, so we have context if you come back to us.

If you become a client, we keep records for as long as the working relationship lasts, and afterwards for as long as tax and accounting law requires us to.

Analytics information is aggregate and is retained for no more than 14 months.

08Your rights

Under the Cyber and Data Protection Act you have the right to:

• Ask what personal information we hold about you, and get a copy of it
• Ask us to correct anything that is wrong or incomplete
• Ask us to delete information we no longer have a reason to keep
• Object to us using your information, or ask us to restrict how we use it
• Withdraw consent at any time, where consent is what we relied on

To exercise any of these, email mobdigital.agency@outlook.com. We will respond within a reasonable period and will not charge you for a first request.

We may ask you to confirm your identity before we act, so that we do not disclose someone's information to the wrong person.

09Complaints

If you think we have handled your information badly, please tell us first so we can put it right.

You also have the right to complain to the Data Protection Authority. In Zimbabwe that role sits with the Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ).

10Cookies

This site uses only what it needs to function and to count visits. We do not run advertising cookies and we do not track you across other websites.

You can block or delete cookies in your browser settings. The site will still work.

11Security

The site is served over an encrypted connection. Enquiries are delivered to an access-controlled mailbox. Credentials we hold for client accounts are never shared outside MOB.

No system is perfectly secure. If a breach ever affects your information, we will tell you and the Data Protection Authority without undue delay.

12Changes to this policy

If we change how we handle information, we will update this page and change the date shown at the top. Material changes will be flagged clearly rather than made quietly.

13Contact

Questions about this policy, or about information we hold: mobdigital.agency@outlook.com, or WhatsApp on +263 00 000 0000.