Privacy Policy Zimbabwe
This Privacy Policy explains how Autumn Fiscal Solutions collects, uses, discloses, and protects your personal data in compliance with Zimbabwe's Cyber and Data Protection Act and other applicable data protection laws.
This Privacy Policy is compliant with Zimbabwe's Cyber and Data Protection Act (Chapter 12:07) and international data protection standards.
1. Introduction
Autumn Fiscal Solutions ("we", "us", "our") is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy applies to all personal data collected through our website (https://Autumnnfiscal.co.zw/), services, and interactions with us in Zimbabwe.
Legal Compliance
We comply with Zimbabwe's Cyber and Data Protection Act (Chapter 12:07) and other applicable data protection regulations. We are registered as a data controller with the appropriate authorities in Zimbabwe where required.
By using our services, you consent to the collection, use, and disclosure of your personal data as described in this Privacy Policy.
2. Information We Collect
We collect personal data that you provide directly to us, as well as data collected automatically when you use our services.
2.1 Personal Data You Provide
- Contact Information: Name, email address, phone number, physical address in Zimbabwe
- Business Information: Company name, registration details, VAT number, ZIMRA registration details
- Financial Information: Bank details, transaction history, tax information
- Identity Documents: Copies of ID cards, passports, driver's licenses (for verification purposes)
- Communication Data: Messages, emails, and other communications with us
- Service Information: Details about the accounting, tax, or advisory services you request
2.2 Data Collected Automatically
- Technical Data: IP address, browser type, device information, operating system
- Usage Data: Pages visited, time spent on pages, clickstream data
- Location Data: General location information (city/country level)
- Cookies and Tracking Technologies: See Section 7 for details
Sensitive Data
We only process sensitive personal data (such as financial records, tax information) when necessary for providing our accounting and tax services, and with your explicit consent or as required by law.
3. How We Use Your Information
We use your personal data for the following purposes:
3.1 Service Provision
- To provide accounting, tax compliance, and advisory services
- To process ZIMRA filings, tax returns, and statutory submissions
- To manage client relationships and provide customer support
- To communicate about service updates, changes, or requirements
3.2 Legal and Compliance
- To comply with Zimbabwean laws and regulations (ZIMRA, Companies Act, etc.)
- To fulfill our contractual obligations to you
- To prevent fraud and ensure security
- To respond to legal requests and court orders
3.3 Business Operations
- To improve our services and website functionality
- For internal record keeping and administrative purposes
- To send relevant marketing communications (with your consent)
- To analyze website usage and improve user experience
Legal Basis for Processing
We process your personal data based on: (1) Your consent; (2) Contractual necessity; (3) Legal obligations under Zimbabwean law; (4) Legitimate business interests.
4. Data Sharing and Disclosure
We may share your personal data with third parties only in the following circumstances:
4.1 Service Providers
- IT and Hosting Providers: For website hosting and technical support
- Communication Tools: Email and messaging service providers
- Analytics Providers: For website analytics and improvement
- Payment Processors: For processing payments (if applicable)
4.2 Regulatory Authorities
- ZIMRA: For tax filings and compliance purposes
- Registrar of Companies: For company secretarial services
- Other Zimbabwean Authorities: As required by law (NSSA, NEC, etc.)
4.3 Professional Advisors
- Legal advisors for contract review and legal compliance
- Auditors for financial statement verification
- Other professional service providers as needed
4.4 Business Transfers
In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the new entity, subject to confidentiality obligations.
Data Processing Agreements
All third-party service providers sign data processing agreements that require them to protect your personal data and use it only for the purposes we specify.
5. Data Security and Retention
5.1 Security Measures
We implement appropriate technical and organizational measures to protect your personal data, including:
- Encryption of sensitive data in transit and at rest
- Access controls and authentication mechanisms
- Regular security assessments and vulnerability testing
- Employee training on data protection and privacy
- Secure data backup and disaster recovery procedures
- Physical security measures for our premises
5.2 Data Retention
We retain your personal data only for as long as necessary:
- Client Records: 7 years from the end of the financial year (as required by Zimbabwean tax law)
- Financial Data: 7 years for tax and accounting purposes
- Marketing Data: Until you withdraw consent or opt-out
- Website Analytics: 26 months from last visit
- Legal Requirements: As required by specific laws and regulations
Data Storage Locations
Your personal data is primarily stored and processed in Zimbabwe. Where we use international service providers, we ensure they provide adequate data protection through standard contractual clauses or other approved mechanisms.
6. Your Data Protection Rights
Under Zimbabwe's Cyber and Data Protection Act, you have the following rights regarding your personal data:
Right to Access
You can request a copy of the personal data we hold about you.
Right to Rectification
You can request correction of inaccurate or incomplete data.
Right to Erasure
You can request deletion of your data under certain circumstances.
Right to Restrict Processing
You can request restriction of data processing in specific cases.
Right to Data Portability
You can request transfer of your data to another organization.
Right to Object
You can object to certain types of data processing.
Exercising Your Rights
To exercise any of these rights, please contact us using the details in Section 10. We will respond within 30 days and may request additional information to verify your identity. There is no fee for exercising your rights, unless your request is manifestly unfounded or excessive.
7. Cookies and Tracking Technologies
7.1 What Are Cookies?
Cookies are small text files stored on your device when you visit our website. They help us provide a better user experience and understand how our website is used.
7.2 Types of Cookies We Use
- Essential Cookies: Necessary for website functionality
- Performance Cookies: Help us understand website usage
- Functional Cookies: Remember your preferences
- Analytics Cookies: Google Analytics for traffic analysis
7.3 Managing Cookies
You can control cookies through your browser settings:
- Browser Settings: Most browsers allow you to refuse or delete cookies
- Opt-Out Tools: Use privacy tools to manage tracking
- Google Analytics: Opt-out via Google's tool
Cookie Consent
When you first visit our website, you will see a cookie consent banner. You can accept all cookies, reject non-essential cookies, or customize your preferences. Essential cookies cannot be disabled as they are necessary for website functionality.
8. Children's Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children without parental consent.
Parental Consent
If we discover that we have collected personal data from a child without parental consent, we will delete that information promptly. Parents or guardians who believe their child has provided us with personal data should contact us immediately.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements.
9.1 Notification of Changes
- We will post the updated Privacy Policy on our website
- We will update the "Last Updated" date at the top of this policy
- For significant changes, we may notify you by email or through our website
9.2 Review Period
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.
Previous Versions
Previous versions of this Privacy Policy are archived and available upon request. Contact us if you would like to review previous versions.
10. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
Autumn Fiscal Solutions
110 Leopold Takawira Street
Construction House 8th Floor
Harare, Zimbabwe
+263 783 011 904
info@https://Autumnnfiscal.co.zw/
Data Protection Officer
dpo@https://Autumnnfiscal.co.zw/
Response Time: Within 30 days
Regulatory Authority
If you are not satisfied with our response, you have the right to lodge a complaint with the Zimbabwe Data Protection Authority or other relevant regulatory body.