Privacy Policy

This Privacy Policy explains how Blitz ("we," "us," or "our"), an online ecommerce and auction platform operating in Zimbabwe, collects, uses, stores, shares, and protects the personal information of our customers and website visitors ("you" or "your") when you use our website (www.blitz.co.zw), mobile application, or related services (collectively, the "Services"). We are committed to protecting your privacy in accordance with the Cyber and Data Protection Act [Chapter 12:07] of Zimbabwe and other applicable laws.

Summary: By agreeing to this Privacy and Cookie Policy together with the Terms and Conditions you consent to us processing your personal information obtained from the Blitz Website, as well as the information from the ZiTenga website, which is necessary for you to use Blitz. We process your personal data in compliance with Zimbabwe law. This policy explains how we collect, retain, and share information, including across borders, the measures used to protect data, how cookies are processed and what your rights and access to review and recourse are.

We collect personal information to provide and improve our Services. The types of information we may collect include:

1. Personal Identifiers: Name, email address, phone number, postal address, ZiTenga username, ZiTenga authentication tokens or other contact details you provide when creating an account, placing an order, or contacting us.
2. Bid and Order Information: Details related to your bids and purchases, such as products ordered, payment information (e.g., credit/debit card details or mobile payment information), billing address, and shipping address.
3. Device Information: Technical data such as your IP address, browser type, operating system, device type, and browsing activity when you visit our website.
4. Usage Data: Information about how you interact with our Services, including pages visited, products viewed, and links clicked.
5. Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to enhance your experience, analyse site usage, and provide personalized content. Cookies may collect data such as your browsing preferences or session information. You can manage cookie preferences through your browser settings.
6. Third-Party Data: Information collected from third-party services, such as payment processors or analytics providers, in connection with your use of our Services.
7. We do not collect personal information from children. Users need to be at least 18 years of age to use the Services.

1. Directly from You: When you register an account, place an order, fill out a contact form, subscribe to our newsletter, or communicate with us via email or other channels.
2. Automatically: Through cookies, log files, and other tracking technologies when you interact with our website or app.
3. From Third Parties: From service providers such as payment processors, shipping companies, or analytics platforms that assist us in operating our Services.
4. From our partners: We access personal information held by ZiTenga, including transactional information regarding your ZiTenga Wallet, so as to facilitate seamless transactions and account linking with our Services.

We use your personal information for the following purposes:

1. Bids and Order Fulfilment: To process bids and deliver your orders, including payment processing, shipping, and providing order confirmations or invoices.
2. Product Information: To collect, process and display information regarding items placed up for auction on the website.
3. Customer Service: To respond to your inquiries, provide support, or resolve disputes.
4. Improving Services: To analyse website usage, monitor performance, and enhance user experience.
5. Marketing and Communications: To send you promotional offers, newsletters, or updates about our products and services, provided you have consented to receive such communications. You can opt out at any time.
6. Fraud Prevention: To screen orders for potential fraud or risk and protect the security of our Services.
7. Legal Compliance: To comply with legal obligations under Zimbabwean law, including the Cyber and Data Protection Act and the Consumer Protection Act, and to respond to lawful requests from government authorities.

1. Consent: Where you have given explicit consent, such as for marketing communications.
2. Contractual Necessity: To fulfil our obligations under a contract, such as processing your order.
3. Legal Obligation: To comply with applicable laws and regulations in Zimbabwe.
4. Legitimate Interests: For purposes such as improving our Services, preventing fraud, or maintaining website security, provided these interests do not override your rights and freedoms.

We may share your personal information with:

1. Service Providers: Third parties that assist us in operating our Services, such as ZiTenga’s transactions, warehousing and shipping companies, or IT service providers. These providers are contractually obligated to protect your data and only use it for the purposes we specify.
2. Government Authorities: When required by law, such as in response to a court order or request from a regulatory body in Zimbabwe.
3. Business Partners: With your consent, we may share limited information with partners for marketing or promotional purposes.
4. Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to a successor entity, subject to applicable data protection laws.

We do not sell your personal information to third parties for marketing purposes without your explicit consent.

We take reasonable measures to protect your personal information from unauthorized access, loss, misuse, or disclosure. These measures include:

1. Encryption of sensitive data (e.g., payment information) using Secure Socket Layer (SSL) technology.
2. Implementation of firewalls, access controls, and other technical safeguards.
3. Regular security audits and compliance with industry standards.

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, comply with legal obligations, or resolve disputes. For example:

1. Order information is retained for 7 years to comply with tax, securities and accounting laws in Zimbabwe.
2. Account information is retained until you request deletion or your account becomes inactive.
3. Anonymous usage data may be retained indefinitely for analytics purposes.
4. When personal information is no longer needed, we will securely delete or anonymize it.

Under the Cyber and Data Protection Act, you have the following rights regarding your personal information:

1. Right to Access: Request a copy of the personal data we hold about you.
2. Right to Rectification: Request correction of inaccurate or incomplete data.
3. Right to Deletion: Request deletion of your data, subject to legal obligations.
4. Right to Restrict Processing: Request that we limit the use of your data in certain circumstances.
5. Right to Data Portability: Request a copy of your data in a structured, commonly used, and machine-readable format.
6. Right to Object: Object to the processing of your data for certain purposes, such as marketing.
7. Right to Withdraw Consent: Withdraw consent at any time where we rely on it for processing.

8.8 We may use automated decision-making to screen bids or orders for fraud. You have the right to request human review of any decision that significantly affects you, as per the Cyber and Data Protection Act. To exercise these rights, contact us at query@blitz.co.zw.

Our Services may contain links to third-party websites or services not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing personal information.

Our Services are not directed to children. We do not knowingly collect personal information from individuals under the age of 18. If we learn that we have collected personal information from a child under 18 without verifiable parental consent, we will delete it promptly. If you believe we have collected such information, please contact us immediately.

1. If you are accessing our Services from outside Zimbabwe, your data may be transferred to and processed in Zimbabwe. We ensure that any international data transfers comply with the Cyber and Data Protection Act and include appropriate safeguards, such as standard contractual clauses where required.
2. If your data is transferred to service providers outside Zimbabwe, such as international cloud hosting services, we ensure compliance with the Cyber and Data Protection Act by using standard contractual clauses with service providers that are within jurisdictions that are subject to similar data protection legislation and ensure the service provider’s compliance with their domestic data protection regulations.

Any information, reviews, comments, or other content that you voluntarily submit or post on our Services (e.g., product reviews, forum posts) may be publicly visible and accessible to other users. Please exercise caution when disclosing personal information in public areas of our Services. We are not responsible for the information you choose to submit in these public forums.

13.1 This section explains how we use cookies and similar tracking technologies when you use the Services. It describes the types of cookies we use, their purposes, and how you can manage your cookie preferences.

13.2 Types of Cookies We Use

1. Essential Cookies: Necessary for operation (login, cart, checkout). These cannot be disabled.
2. Performance Cookies: Collect anonymized data about site use to improve performance.
3. Functional Cookies: Remember preferences such as language or cart items.
4. Advertising Cookies: Track browsing habits for personalised ads (with consent).

13.3 How We Use Cookies

1. Enable essential website functions.
2. Analyse website usage to improve performance.
3. Remember your preferences for a customized experience.
4. Deliver relevant advertisements with consent.
5. Monitor and prevent fraudulent activity.

13.4 Third-Party Cookies

Some cookies are set by third-party services such as analytics providers, payment processors, and advertising partners. These third parties are contractually obligated to follow data protection laws.

13.5 Legal Basis for Using Cookies

13.5.1 Consent: For non-essential cookies we obtain explicit consent via a cookie banner. 13.5.2 Legitimate Interests: For essential cookies we rely on legitimate interest in operating and securing the website.

13.6 Managing Your Cookie Preferences

You can manage cookies via our cookie consent banner or your browser settings. You can update preferences by clicking “Manage Cookies” in the footer of our website.

13.7 Data Retention (Cookies)

Session Cookies expire when you close your browser. Persistent Cookies remain for a set period (days, months, years) or until deleted.

13.8 Changes to This Cookie Policy

We may update the Cookie Policy; material changes will be posted with a revised date. Continued use constitutes acceptance.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by posting the updated policy on our website with a revised “Last Updated” date or by other means, such as email, where required by law. Your continued use of our Services after such changes constitutes your acceptance of the revised policy.

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us at: query@blitz.co.zw