Privacy Policy
How we collect, use, and protect your personal information
Last updated: March 28, 2025
This Privacy Policy explains how Thaton Realty ("we", "us", or "our") collects, uses, and discloses your personal information when you use our website and services. We comply with the Zimbabwe Data Protection Act (Chapter 12:07) and the Cyber Security and Data Protection Act, 2021.
Information We Collect
Personal Information
We may collect the following personal information:
- Contact information (name, email address, phone number, address)
- Account information (username, password)
- Property preferences and search history
- Financial information (for transactions and payments)
- Identity verification information
- Communication records between you and our team
- Feedback and survey responses
Automatically Collected Information
When you visit our website, we automatically collect certain information about your device and usage, including:
- IP address and location data
- Browser type and version
- Operating system
- Pages you visit and how you interact with them
- Time and date of your visits
- Referral source
How We Use Your Information
We use your personal information for the following purposes:
- Providing and improving our services
- Processing property listings, inquiries, and transactions
- Managing your account and preferences
- Communicating with you about our services, properties, and updates
- Processing payments and maintaining financial records
- Sending marketing communications (with your consent)
- Analyzing usage to improve our website and services
- Ensuring security and preventing fraud
- Complying with legal obligations
In accordance with the Zimbabwe Cyber and Data Protection Act, we process your data based on:
- Your consent
- Necessity for contract performance
- Compliance with legal obligations
- Legitimate business interests
Data Storage and Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction, as required by the Zimbabwe Cyber and Data Protection Act.
Your personal data is stored on secure servers and may be transferred to and stored in countries outside Zimbabwe. When we transfer data internationally, we ensure adequate protection in compliance with applicable laws.
We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements.
Data Breach Notification
In the event of a data breach that may compromise your personal information, we will notify you and the relevant authorities as required by the Zimbabwe Cyber and Data Protection Act, typically within 72 hours of becoming aware of the breach.
Your Data Protection Rights
Under the Zimbabwe Cyber and Data Protection Act, you have the following rights regarding your personal information:
- Right to information: You have the right to know what personal information we collect about you and how we use it.
- Right to access: You can request a copy of your personal information that we hold.
- Right to rectification: You can ask us to correct any inaccurate or incomplete information.
- Right to erasure: You can request deletion of your personal information in certain circumstances.
- Right to restrict processing: You can ask us to temporarily or permanently stop processing your personal information.
- Right to data portability: You can request to receive your personal information in a structured, machine-readable format.
- Right to object: You can object to the processing of your personal information for certain purposes, including direct marketing.
- Right to withdraw consent: You can withdraw your consent at any time where we rely on consent as the legal basis for processing.
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.
Disclosure to Third Parties
We may share your personal information with the following third parties:
- Service providers who help us operate our business
- Financial institutions for payment processing
- Professional advisors (legal, accounting, etc.)
- Government authorities when required by law
- Business partners with your explicit consent
We require all third parties to respect the security of your personal information and to treat it in accordance with applicable laws. We do not allow our third-party service providers to use your personal information for their own purposes.
Updates to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any significant changes by posting the new policy on our website and, where appropriate, by email. We encourage you to review this Privacy Policy regularly.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer at:
Thaton Realty
Attention: Data Protection Officer
Travel Centre - 1st Floor
Corner Jason Moyo & 3rd St
Harare, Zimbabwe
Email: [email protected]
Phone: +263 77 992 5122
If you are unsatisfied with our response, you have the right to lodge a complaint with the Zimbabwe Data Protection Authority.