Privacy Policy

This Privacy Policy explains how BlitzTech Electronics (Private) Limited (registration number 54770A0282025, hereafter "BlitzTech", "we", "us" or "our") handles personal information collected from visitors and customers of blitztechelectronics.co.zw, blitztechelectronics.com, and any associated services. It is published in compliance with the Cyber and Data Protection Act [Chapter 12:07] (Act No. 5 of 2021) of Zimbabwe, and reflects guidance issued by the Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ), which is the country's designated Data Protection Authority.

1. Who is responsible for your data

The data controller is:

• BlitzTech Electronics (Private) Limited
• Registration number: 54770A0282025
• Tax ID (TIN): 2000950909
• Registered office: 4th Floor, Zimpost Building, Corner Inez Terrace and George Silundika, Harare, Zimbabwe
• Email: e.makuyana@blitztechelectronics.co.zw
• Phone: +263 77 280 2438

You may contact our designated person responsible for data-protection matters at the address above using the subject line "Data Protection Request".

2. What information we collect

We collect the following categories of personal information:

1. Information you give us directly when you fill in a contact form, request a quote, register a user account, subscribe to our newsletter, or place an order. This includes your name, email address, phone number, delivery address, and the content of your message or order.
2. Information collected automatically when you browse our website: your IP address, browser type and version, device type, the pages you visit, the time and date of each visit, and referral source. This is collected through standard web-server logs and through analytics services described in Section 6.
3. Payment information when you check out via a payment gateway. We do not store full card numbers or banking credentials on our servers. Payments are processed by accredited third parties (Paynow) which hold their own data-protection certifications.
4. Cookies and similar technologies, described separately in our Cookie Policy.

3. The legal basis for processing your information

Under section 14 of the Cyber and Data Protection Act, we rely on the following lawful bases:

• Your consent, freely given when you submit a form, subscribe, or check a marketing-consent box.
• The performance of a contract with you, when we process your order, deliver goods, or provide a quoted service.
• Compliance with a legal obligation, including tax record-keeping under the Income Tax Act and ZIMRA fiscalisation requirements.
• Our legitimate interests, such as preventing fraud, securing our website, and improving our services, balanced against your rights and freedoms.

4. How we use your information

We use your personal information to:

• Respond to enquiries and provide the services or products you have requested;
• Process orders, generate invoices, arrange delivery, and handle returns and warranty claims;
• Send you transactional emails (order confirmations, quote PDFs, password resets, etc.);
• Send you marketing emails (only where you have explicitly subscribed), with a clear unsubscribe link in every message;
• Operate, secure and improve the website;
• Comply with tax, accounting, and regulatory obligations in Zimbabwe.

5. Who we share information with

We do not sell your personal information. We share it only with the following categories of recipient, and only to the extent strictly necessary:

• Payment processors: Paynow (Zimbabwe), and other gateways added in future, to authorise and capture your payment.
• Email and identity providers: Microsoft 365, which hosts our business email accounts.
• Hosting and infrastructure: DigitalOcean, where our application runs, and DigitalOcean Spaces, where database backups are encrypted at rest.
• Analytics and error tracking: Google (Analytics 4 and Tag Manager), Meta (Pixel) and Sentry, used to understand traffic, debug errors, and run marketing campaigns. See our Cookie Policy for details and opt-out instructions.
• Couriers and logistics partners when you order a physical product that needs to be delivered.
• Government and regulators when we are required by law to do so, including ZIMRA, POTRAZ, the Zimbabwe Revenue Authority for tax-clearance verification, and law-enforcement bodies acting under a valid order.

Some of these recipients are located outside Zimbabwe. Section 28 of the Cyber and Data Protection Act regulates cross-border transfers; we transfer data only to processors that publish a data-protection commitment meeting the standard set by Zimbabwean law.

6. Analytics, marketing pixels and similar technologies

We use Google Analytics 4 and (optionally) Google Tag Manager to understand how visitors use our website, and Meta Pixel to measure the effectiveness of our advertising on Facebook and Instagram. These tools set first-party and third-party cookies as detailed in our Cookie Policy. You can opt out at any time via your browser's cookie controls or via Google's and Meta's opt-out pages.

7. How long we keep your information

We retain personal information only as long as is necessary for the purpose for which it was collected, or as required by law:

• Contact-form submissions: 3 years from the date of submission;
• Customer accounts and order history: while the account is active, plus 7 years to satisfy ZIMRA record-keeping requirements;
• Newsletter subscriptions: until you unsubscribe (after which the email is retained in a suppression list);
• Server logs containing IP addresses: 90 days, then aggregated/anonymised;
• Backups: rotating 14-day retention on the VPS, plus optional encrypted offsite copy in DigitalOcean Spaces.

8. Your rights

Under sections 14–22 of the Cyber and Data Protection Act, you have the right to:

• Be informed about how we use your personal information;
• Access the personal information we hold about you;
• Request correction of inaccurate or incomplete information;
• Request erasure of your personal information, subject to legal retention requirements;
• Object to processing based on our legitimate interests;
• Withdraw consent at any time, where consent is the basis for processing;
• Receive a copy of your information in a portable format;
• Lodge a complaint with POTRAZ as the Data Protection Authority.

To exercise any of these rights, email e.makuyana@blitztechelectronics.co.zw with the subject line "Data Protection Request" and identify the right you wish to exercise. We will respond within 30 days.

9. How we keep your information secure

We use industry-standard technical and organisational measures, including HTTPS encryption for all traffic, encrypted database passwords, hashed user passwords, IP-based rate limiting on login endpoints, off-site encrypted backups, role-based access control to staff systems, and quarterly security review of dependencies. No system is invulnerable; if a breach occurs that is likely to result in a high risk to your rights, we will notify you and POTRAZ in accordance with section 27 of the Act, within 72 hours of becoming aware.

10. Children's privacy

Our website is not directed at children under the age of 12. We do not knowingly collect personal information from a child under 12 without parental consent. If you become aware that a child has provided us with personal information, contact us and we will take steps to delete it.

11. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top of this page indicates the version. Material changes will be communicated by a notice on the website and (where appropriate) by email to active customers and subscribers.

12. Contact and complaints

If you have a concern about how we are handling your personal information, please contact us first using the details in Section 1. You may also escalate the matter to the supervisory authority:

Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ)
Website: www.potraz.gov.zw
Address: Performance Close, Mt Pleasant Business Park, Harare, Zimbabwe

---

This policy is provided for transparency. It does not, by itself, constitute legal advice. Where your individual circumstances require advice, we recommend consulting a qualified legal practitioner in Zimbabwe.