Who we are

This website is operated by Aventus Business Solutions (Private) Limited, a company registered in Zimbabwe under registration number [company number], with its registered office at [registered address] (“Aventus”, “we”, “us” or “our”).

For the purposes of the Cyber and Data Protection Act [Chapter 12:07], Aventus is the data controller responsible for your personal information collected through this website. We are licensed as a data controller by the Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ) under licence number [licence number].

What this policy covers

This policy applies to the Aventus company website at [aventus.co.zw] and to communications you send us through it, including by email.

It does not cover the ZimListings platform (website, app or WhatsApp service). ZimListings has its own privacy policy, available at [zimlistings.co.zw/privacy].

Information we collect

Information you give us

When you contact us through our contact form or by email, we collect the details you choose to provide. This may include:

• your name and email address
• your phone number, if you provide it
• your organisation and role, if you tell us
• the subject and content of your message

If you contact us about investment or partnership opportunities, we may also receive information about your organisation and your areas of interest.

Information collected automatically

When you visit our website, some information is collected automatically, including:

• your IP address and approximate location (country or city)
• your browser type, device type and operating system
• the pages you visit, how long you stay and the website that referred you

We collect this through server logs and, where applicable, cookies and similar technologies (see section 8).

We do not ask for, and ask that you do not send us, sensitive personal information such as health, biometric, financial account or identity document details through this website.

How we use your information

We use your personal information to:

• respond to your enquiries and messages
• discuss and manage potential partnerships, investments and business relationships
• operate, secure and maintain our website
• understand how visitors use our website so we can improve it
• protect against fraud, spam and misuse of our website
• meet our legal and regulatory obligations

We will not use your information for marketing unless you have agreed to it. If you do agree, you can opt out at any time by using the unsubscribe link in any message or by contacting us.

Why we are allowed to use it

We only process your personal information where we have a lawful reason to do so, namely:

• Your consent, for example when you send us a message or agree to receive updates. You can withdraw consent at any time.
• Taking steps at your request before entering into an agreement with you, such as a partnership or investment discussion.
• Our legitimate interests in running, securing and improving our website and business, where these are not outweighed by your rights.
• Legal obligations that apply to us.

Who we share it with

We do not sell or rent your personal information. We only share it where necessary, with:

• Service providers who help us run our website and business, such as our website host, email provider and analytics provider. They may only use your information to provide their services to us.
• Professional advisers, such as lawyers, accountants and auditors, where needed.
• Authorities, where we are required to by law, court order or a lawful request from a regulator or law enforcement agency.
• A successor business, if Aventus is involved in a merger, acquisition or sale of assets, in which case we will ask the new owner to protect your information in line with this policy.

Storage outside Zimbabwe

Some of our service providers, such as our website host and email provider, may store or process information on servers outside Zimbabwe. Where your personal information is transferred outside Zimbabwe, we take steps to make sure it receives an adequate level of protection, as required by the Cyber and Data Protection Act, including by using reputable providers with appropriate security and contractual safeguards.

Cookies

Cookies are small text files stored on your device when you visit a website. We use:

• Essential cookies, which the website needs to work properly and securely.
• Analytics cookies, which help us understand how visitors use the site. We use [name of analytics tool, e.g. Google Analytics] for this. [Delete this item if you do not use analytics.]

Our website also loads fonts from Google Fonts, which means your IP address is shared with Google when a page loads.

You can block or delete cookies through your browser settings. Blocking essential cookies may affect how the website works.

How long we keep it

We keep personal information only for as long as we need it for the purposes described in this policy, or as the law requires. As a guide:

• general enquiries: up to [24 months] after our last contact with you
• partnership and investment correspondence: for the duration of the discussions and, if an agreement is reached, for as long as required by law after it ends
• website analytics data: up to [26 months]

When information is no longer needed, we delete it or make it anonymous.

How we protect it

We use appropriate technical and organisational measures to protect your personal information against loss, misuse, unauthorised access, disclosure and alteration. These include encrypted connections (HTTPS), access controls that limit information to people who need it, and secure, reputable service providers.

No method of transmission over the internet is completely secure. If we become aware of a data breach that affects your personal information, we will notify you and POTRAZ where the law requires us to.

Your rights

Under the Cyber and Data Protection Act, you have the right to:

• be told whether we hold personal information about you and get a copy of it
• ask us to correct information that is inaccurate or incomplete
• ask us to delete your information where we no longer have a lawful reason to keep it
• object to, or ask us to restrict, how we use your information
• withdraw your consent at any time, without affecting processing that happened before
• not be subject to decisions based solely on automated processing that significantly affect you

To exercise any of these rights, contact our Data Protection Officer using the details in section 15. We may need to confirm your identity before acting on your request. We will respond within [30 days].

If you are not satisfied with how we handle your information, you have the right to lodge a complaint with the Data Protection Authority, POTRAZ, at www.potraz.gov.zw.

Children

Our website is intended for businesses and adults. We do not knowingly collect personal information from anyone under 18. If you believe a child has sent us personal information, please contact us and we will delete it.

Other websites

Our website contains links to other websites, including ZimListings and WhatsApp. We are not responsible for the privacy practices of websites we do not operate, so please read their privacy policies.

Changes to this policy

We may update this policy from time to time. When we do, we will change the effective date at the top of this page. If we make significant changes, we will make this clear on our website.

Contact us

If you have any questions about this policy or how we handle your personal information, please contact our Data Protection Officer: