Privacy Policy

Dandemutande Investments (Private) Limited (“Dandemutande”, “we”, “us”, or “our”) values and respects the privacy of individuals whose personal information we collect and process.

This Privacy Notice explains how and why we collect, use, store, disclose, and protect personal information, and outlines the rights of data subjects in accordance with the Zimbabwe Cyber and Data Protection Act [Chapter 12:07], related Statutory Instruments, and—where applicable—the EU General Data Protection Regulation (GDPR) as a best-practice benchmark.

This Notice should be read together with our internal Privacy Policy.

Dandemutande Investments (Private) Limited is the Data Controller responsible for the personal information described in this Privacy Notice.

Contact details:

Level 9 Pegasus House, 52 – 54 Samora Machel Avenue, Harare, ZIMBABWE 00263812000000

We have appointed a Data Protection Officer (DPO) responsible for overseeing compliance with data protection laws.

Contact the DPO: Stella Wutete stella.wutete@dandemutande.africa 002638612000000

The personal information we collect depends on your interaction with us and may include:

  • Identification information (e.g. name, ID/passport number)
  • Contact details (e.g. address, email, telephone number)
  • Employment or professional information
  • Financial and transactional information
  • Technical and online identifiers
  • Correspondence and communications

 

Sensitive Personal Information

Where necessary, we may collect sensitive personal information, such as information relating to health, criminal history, or trade union membership. We only collect such information:

  • With your explicit consent, or
  • Where required or authorised by law; or
  • To prevent a serious and imminent threat to life or health.

We collect personal information:

  • Directly from you (in person, by phone, email, or online)
  • When you use our websites or digital platforms
  • When you apply for employment, contracts, or services
  • When you attend our events or subscribe to our communications
  • Where lawful, from third parties or publicly available sources

We process personal information for purposes including:

  • Providing and managing our products and services
  • Responding to enquiries and requests
  • Managing contractual, employment, or business relationships
  • Improving our services and customer experience
  • Marketing and communications (where permitted)
  • Internal administration and record keeping
  • Compliance with legal and regulatory obligations

We process personal information on one or more of the following lawful bases:

  • Your consent
  • Performance of a contract
  • Compliance with a legal obligation
  • Legitimate business interests
  • Protection of vital interests

We may share personal information with:

  • Trusted third-party service providers
  • Professional advisers (legal, audit, ICT)
  • Marketing and analytics providers
  • Regulatory authorities or law enforcement where required by law

All third parties are required to protect personal information and use it only for authorised purposes.

Some of our service providers or partners may be located outside Zimbabwe.

Where personal information is transferred across borders, we ensure that:

  • You have consented to the transfer; or
  • The recipient is subject to comparable data protection laws; or
  • Appropriate safeguards are in place; or
  • The transfer is required or authorised by law or the Data Protection Authority.

We implement reasonable technical and organisational measures to protect personal information, including:

  • Physical and logical access controls
  • Encryption and secure systems
  • Restricted access on a need-to-know basis
  • Cybersecurity safeguards and monitoring

Our websites use cookies and analytics tools to improve functionality and user experience.

Cookies do not directly identify you. You may disable cookies through your browser settings; however, this may affect website functionality.

We may send you marketing communications where you have consented or where permitted by law.

You may opt out at any time by using the unsubscribe option in our communications or by contacting us directly.

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law.

You have the right to:

  • Be informed about the processing of your personal information
  • Access personal information we hold about you
  • Request the correction or updating of your information
  • Object to or restrict certain processing
  • Request data portability (where applicable)
  • Withdraw consent (where processing is based on consent)
  • Lodge a complaint with the Data Protection Authority

Requests to access or correct personal information must:

  • Be made in writing
  • Include sufficient information to verify your identity

We aim to respond to valid requests within 30 days, subject to lawful exemptions.

We may update this Privacy Notice from time to time to reflect legal, regulatory, or operational changes. The latest version will always be available on our website or upon request.

If you have questions about this Privacy Notice or how we handle personal information, please contact:

Data Protection Officer

Dandemutande Investments (Private) Limited

Email: stella.wutete@dandemutande.africa

Phone: 002638612000000