Privacy Policy
This policy explains how PropertyHandle Africa collects, uses, and protects your personal data in compliance with the Zimbabwe Data Protection Act and GDPR principles.
1. Introduction
PropertyHandle Africa (Pvt) Ltd ("we", "us", "our") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.
We comply with the Zimbabwe Data Protection Act (2021) and adhere to international best practices including GDPR principles where applicable.
2. Data We Collect
2.1 Information You Provide
- Identity Data: Full name, date of birth, national ID/passport number
- Contact Data: Email address, phone number, physical address
- Financial Data: Bank account details, mobile money numbers, transaction history
- KYC Documents: ID copies, proof of address, selfie verification
- Investment Data: Investment preferences, risk tolerance, portfolio information
2.2 Automatically Collected Data
- Device Data: IP address, browser type, operating system
- Usage Data: Pages visited, features used, time spent on platform
- Location Data: Country and city based on IP address
- Cookies: Session and preference data (see our Cookie Policy)
3. How We Use Your Data
We use your personal data to:
- Create and manage your account
- Process investments and transactions
- Comply with KYC/AML regulatory requirements
- Send transaction confirmations and statements
- Provide customer support
- Improve our platform and services
- Send marketing communications (with your consent)
- Detect and prevent fraud
4. Legal Basis for Processing
We process your personal data on the following legal bases:
- Contract: To provide our services as agreed in the Terms of Service
- Legal Obligation: To comply with financial regulations and AML laws
- Legitimate Interest: To improve our services and prevent fraud
- Consent: For marketing communications and cookies
6. Data Retention
We retain your data for:
- Active accounts: Duration of account plus 7 years
- Transaction records: 10 years (regulatory requirement)
- KYC documents: 5 years after account closure
- Marketing preferences: Until you withdraw consent
7. Your Rights
Under data protection laws, you have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate or incomplete data
- Erasure: Request deletion of your data (subject to legal requirements)
- Restriction: Limit how we process your data
- Portability: Receive your data in a structured format
- Objection: Object to processing based on legitimate interests
- Withdraw Consent: Withdraw marketing consent at any time
To exercise your rights, contact us at legal@propertyhandleafrica.com.
8. Security
We implement industry-standard security measures including:
- 256-bit SSL/TLS encryption for data in transit
- AES-256 encryption for data at rest
- Two-factor authentication
- Regular security audits and penetration testing
- Employee access controls and training
9. International Transfers
Your data may be transferred to and processed in countries outside Zimbabwe for cloud hosting and service provision. We ensure adequate protection through:
- Standard contractual clauses with service providers
- Selecting providers with robust security certifications (SOC 2, ISO 27001)
10. Children's Privacy
Our platform is not intended for individuals under 18 years of age. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us immediately.
11. Policy Changes
We may update this Privacy Policy periodically. We will notify you of material changes via email or platform notification. Your continued use of the platform after changes constitutes acceptance.
12. Contact Us
For privacy-related inquiries:
- Data Protection Officer: legal@propertyhandleafrica.com
- General Privacy: legal@propertyhandleafrica.com
- Address: Eight2Five Innovation Hub, Three Anchor House, 54 Jason Moyo Avenue, Harare, Zimbabwe
You may also lodge a complaint with the Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ) as the data protection supervisory authority.