Privacy Policy

Last updated: January 1, 2024

1. Information We Collect

When you use our Store, we may collect the following types of information:

Personal Information: Name, email address, phone number, and delivery address when you place an order or create an account.
Payment Information: Payment processing is handled by Paynow. We do not store your payment card details or mobile money PINs on our servers.
Usage Data: We may collect information about how you interact with the Store, including pages visited, time spent on pages, and browser type.
Cookies: We use cookies to maintain your session, remember your cart items, and improve your experience. You can disable cookies in your browser settings, but some features may not work correctly.

2. How We Use Your Information

We use the information we collect to:

Process and fulfil your orders
Send order confirmations and shipping updates
Communicate with you about your account or orders
Improve our Store and customer experience
Comply with legal obligations under Zimbabwean law

3. Information Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information with:

Paynow: To process your payments (subject to Paynow's own privacy policy)
Shipping providers: To deliver your orders (name and address only)
Legal requirements: If required by Zimbabwean law or regulatory authorities

4. Data Security

We implement appropriate technical and organisational measures to protect your personal information, including:

Passwords stored using bcrypt hashing (industry-standard one-way encryption)
CSRF protection on all forms
Secure session management with HTTP-only cookies
HTTPS encryption for data in transit
Regular security reviews of our platform

5. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this policy. Order information is retained for a minimum of 5 years for tax and legal compliance under Zimbabwean law.

6. Your Rights

Under Zimbabwean data protection law, you have the right to:

Access the personal information we hold about you
Request correction of inaccurate information
Request deletion of your personal information (subject to legal retention requirements)
Opt out of marketing communications

7. Third-Party Links

Our Store may contain links to third-party websites. We are not responsible for the privacy practices or content of those external sites.

8. Children's Privacy

Our Store is not intended for children under the age of 13. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page with an updated date.

10. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at hello@thirtythird.company.