Privacy Policy

How we collect, use, and protect your personal information

Last updated: March 28, 2025

This Privacy Policy explains how Thaton Realty ("we", "us", or "our") collects, uses, and discloses your personal information when you use our website and services. We comply with the Zimbabwe Data Protection Act (Chapter 12:07) and the Cyber Security and Data Protection Act, 2021.

Information We Collect

Personal Information

We may collect the following personal information:

  • Contact information (name, email address, phone number, address)
  • Account information (username, password)
  • Property preferences and search history
  • Financial information (for transactions and payments)
  • Identity verification information
  • Communication records between you and our team
  • Feedback and survey responses

Automatically Collected Information

When you visit our website, we automatically collect certain information about your device and usage, including:

  • IP address and location data
  • Browser type and version
  • Operating system
  • Pages you visit and how you interact with them
  • Time and date of your visits
  • Referral source

How We Use Your Information

We use your personal information for the following purposes:

  • Providing and improving our services
  • Processing property listings, inquiries, and transactions
  • Managing your account and preferences
  • Communicating with you about our services, properties, and updates
  • Processing payments and maintaining financial records
  • Sending marketing communications (with your consent)
  • Analyzing usage to improve our website and services
  • Ensuring security and preventing fraud
  • Complying with legal obligations

In accordance with the Zimbabwe Cyber and Data Protection Act, we process your data based on:

  • Your consent
  • Necessity for contract performance
  • Compliance with legal obligations
  • Legitimate business interests

Data Storage and Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction, as required by the Zimbabwe Cyber and Data Protection Act.

Your personal data is stored on secure servers and may be transferred to and stored in countries outside Zimbabwe. When we transfer data internationally, we ensure adequate protection in compliance with applicable laws.

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements.

Data Breach Notification

In the event of a data breach that may compromise your personal information, we will notify you and the relevant authorities as required by the Zimbabwe Cyber and Data Protection Act, typically within 72 hours of becoming aware of the breach.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect information about your browsing activities. Cookies are small text files stored on your device that help us provide you with a better browsing experience.

We use the following types of cookies:

  • Essential cookies: Required for the website to function properly
  • Functional cookies: Remember your preferences and settings
  • Analytical cookies: Help us understand how visitors interact with our website
  • Marketing cookies: Track your browsing habits to deliver targeted advertising

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

Your Data Protection Rights

Under the Zimbabwe Cyber and Data Protection Act, you have the following rights regarding your personal information:

  • Right to information: You have the right to know what personal information we collect about you and how we use it.
  • Right to access: You can request a copy of your personal information that we hold.
  • Right to rectification: You can ask us to correct any inaccurate or incomplete information.
  • Right to erasure: You can request deletion of your personal information in certain circumstances.
  • Right to restrict processing: You can ask us to temporarily or permanently stop processing your personal information.
  • Right to data portability: You can request to receive your personal information in a structured, machine-readable format.
  • Right to object: You can object to the processing of your personal information for certain purposes, including direct marketing.
  • Right to withdraw consent: You can withdraw your consent at any time where we rely on consent as the legal basis for processing.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

Disclosure to Third Parties

We may share your personal information with the following third parties:

  • Service providers who help us operate our business
  • Financial institutions for payment processing
  • Professional advisors (legal, accounting, etc.)
  • Government authorities when required by law
  • Business partners with your explicit consent

We require all third parties to respect the security of your personal information and to treat it in accordance with applicable laws. We do not allow our third-party service providers to use your personal information for their own purposes.

Updates to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any significant changes by posting the new policy on our website and, where appropriate, by email. We encourage you to review this Privacy Policy regularly.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer at:

Thaton Realty

Attention: Data Protection Officer

Travel Centre - 1st Floor

Corner Jason Moyo & 3rd St

Harare, Zimbabwe

Email: [email protected]

Phone: +263 77 992 5122

If you are unsatisfied with our response, you have the right to lodge a complaint with the Zimbabwe Data Protection Authority.