Privacy Policy

1. Who this policy is for

TjTech ("TjTech", "we", "our", or "us") is based at 5175 Chiedza Karoi, Zimbabwe. This policy applies when you visit tjtech.co.zw, submit an enquiry or support ticket, use a TjTech account or portal, apply for a vacancy, communicate with us through WhatsApp, or receive services from us.

We handle personal information with reference to Zimbabwe's Cyber and Data Protection Act [Chapter 12:07] and applicable regulations. The Act and the 2024 licensing and data protection officer regulations are available from the Ministry of ICT and POTRAZ.

2. Our role depends on the service

For this website, our contact forms, our accounts, and our own support operations, TjTech is generally the data controller because we decide why and how the information is used. When we build or host a system for a client, that client may be the controller and TjTech may act as a processor under the project agreement and a written data processing agreement. The client-specific contract and processing instructions govern that relationship.

TjTech is separately confirming its licensing, registration, and data protection officer obligations with POTRAZ and professional advisers. This notice describes our current handling practices; it is not a representation that a regulatory licence or DPO notification has been issued.

3. Information we collect

• Enquiries and support: name, email address, phone or WhatsApp number, category, priority, subject, ticket details, replies, attachments, and related communication records.
• Accounts and portals: login email, name, organisation details, authentication records, ticket history, notifications, and security events.
• Vacancy applications: the information and documents you choose to submit, such as a CV, cover letter, qualifications, and work history.
• Billing and payments: invoice, quotation, payment status, transaction references, and account information. Payment providers process payment credentials; do not send card numbers, PINs, or passwords through a support form.
• Technical information: IP address, browser and device details, referring page, pages visited, timestamps, and security logs.
• WhatsApp: information you choose to send through WhatsApp. WhatsApp and its providers process that communication under their own terms and privacy notices.

4. Why we use it

• To answer enquiries, create and manage support tickets, and provide the service you request.
• To create and secure accounts, authenticate users, route work, and send service notifications.
• To deliver projects, host systems, maintain backups, troubleshoot faults, and protect our services from abuse.
• To process invoices, payments, job applications, and legally required records.
• To send optional marketing where you have consented, and to measure site usage only after you allow analytics cookies.

5. Sensitive and children's information

Please do not put sensitive personal information into a public enquiry or support form unless we specifically ask for it through a secure, agreed channel. Where a client system processes sensitive information or children's information, the processing must be covered by the relevant client contract, written instructions, appropriate consent or other lawful basis, access controls, and risk assessment. For children's information, the applicable rules require parental or guardian consent and additional protection by design and by default.

6. Who receives information

We do not sell personal information. We may share limited information with:

• Hosting, infrastructure, backup, email, messaging, monitoring, and support providers that help us operate the service.
• Payment providers when you make or reconcile a payment.
• Client organisations where TjTech is operating a system on their instructions.
• Regulators, courts, law enforcement, or professional advisers where disclosure is required or legally permitted.

Some providers may process information outside Zimbabwe. We assess those transfers and apply contractual, technical, and organisational safeguards appropriate to the processing and the law.

7. Retention

We keep information only for as long as it is needed for the purpose collected, a contract, security, accounting, dispute handling, or a legal obligation. Our normal operational approach is:

• Enquiries and closed support tickets: normally up to 24 months after closure, unless a longer client or legal retention period applies.
• Account and billing records: while the account or service is active and afterwards for the period required for accounting, tax, audit, or legal purposes.
• Vacancy applications: normally up to 12 months after the relevant recruitment process, unless you agree to a talent pool or the law requires otherwise.
• Security logs: for the period needed to investigate abuse, maintain service security, and meet legal obligations.
• Analytics consent: the preference cookie lasts for up to 12 months and can be changed at any time.

8. Cookies and analytics

Necessary cookies support authentication, CSRF protection, security, and basic site operation. If Google measurement tags are enabled in the deployment, they are blocked until you choose "Allow measurement" in the cookie notice. You can choose "Use necessary only" or change the decision through Cookie settings in the footer. External sites, including WhatsApp, may set their own cookies under their own policies.

9. Security and vulnerability reporting

We use measures such as HTTPS/TLS, secure password handling, access controls, throttling, audit records, backups, and security headers appropriate to the service. No internet service can be guaranteed completely secure. Please report suspected vulnerabilities privately to [email protected] and do not access, alter, or disclose another person's information.

10. Your rights and requests

Subject to the Act and applicable exceptions, you may ask us to:

• confirm whether we hold information about you and provide access to it;
• correct inaccurate or incomplete information;
• delete information where retention is no longer justified;
• withdraw consent where processing relies on consent;
• object to or ask us to restrict particular processing; and
• explain how an automated decision or disclosure affects you, where applicable.

Send a request to our data protection contact at [email protected]. We may ask for reasonable information to verify your identity, and some requests may be limited by law, contract, security, or another person's rights.

11. Complaints and changes

If you are not satisfied with our response, you may contact the Zimbabwe Data Protection Authority through POTRAZ. We may update this policy when our services, providers, or legal obligations change. The effective date at the top of this page will change when we publish a material revision.