Privacy Policy

We collect personal information that you provide directly, as well as data collected automatically when you use our website or services.

This may include your name, email address, phone number, company or organisation, messages and project details submitted through contact forms or chat, and technical data such as your IP address, browser type, operating system, and the pages you visit.

We process personal information only for the purposes for which it was collected, in line with the data minimisation and purpose limitation principles of the Cyber and Data Protection Act.

We use your information to respond to enquiries, provide services, improve our website and services, send relevant communications, maintain security, and comply with legal obligations.

Under Zimbabwe's Cyber and Data Protection Act [Chapter 12:07], we process personal data on a lawful basis such as consent, contract performance, legitimate interest, or compliance with a legal obligation.

Where the law requires your consent, such as for non-essential cookies and marketing communications, we will ask for it before processing begins. You can withdraw consent at any time by contacting us.

We do not sell your personal information. We may share it with trusted service providers who assist us with hosting, analytics, communication, and payment processing, provided they keep the data secure and use it only for the agreed purpose.

We may also disclose information if required by law, regulation, legal process, or to protect our rights, property, or safety.

The Cyber and Data Protection Act places limits on transferring personal information outside Zimbabwe. We only transfer data internationally when there is a lawful basis and where the receiving country or service provider provides adequate protection, or with your explicit consent where required.

We keep personal information only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. When no longer needed, we securely delete, anonymise, or destroy the information.

As a data subject under Zimbabwean law, you have the right to access, rectify, erase, restrict, or object to the processing of your personal information, and the right to data portability where applicable.

You also have the right to lodge a complaint with the Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ), the designated Data Protection Authority, if you believe your rights have been infringed.

Our website uses cookies and similar technologies to remember preferences, analyse traffic, and improve your experience. When you first visit, we ask for your consent to non-essential cookies.

You can manage or withdraw your cookie preference at any time by clearing your browser cookies or adjusting your browser settings. Essential cookies needed for security and core functionality may remain active.

We implement appropriate technical and organisational measures to protect personal information against unauthorised access, loss, or destruction.

In the unlikely event of a data breach that poses a risk to your rights, we will notify the Data Protection Authority within 24 hours and, where the risk is high, notify affected individuals within 72 hours as required by Zimbabwean law.

Our services are not directed to children under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected such information, please contact us immediately so we can remove it.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be posted on this page with a revised date.

If you have any questions about this Privacy Policy or wish to exercise your data subject rights, please contact our Data Protection Officer at hello@ioi.co.zw.

You can also write to us at 69 Bains Avenue, Harare, Zimbabwe or call +263 77 556 5247.