Data Protection & Privacy Notice
Amashad Zimbabwe is the data controller for the personal information you submit through this website. Zimbabwe’s principal data protection legislation is the Cyber and Data Protection Act [Chapter 12:07], which came into operation in March 2022 and is enforced by POTRAZ as the Data Protection Authority. We process your information lawfully, fairly and transparently in terms of that Act and its regulations.
1. Data we collect
| Identity data | Full names, national ID or passport number, date of birth, nationality and certified ID copies. |
|---|---|
| Contact data | Email address, mobile number, residential and registered office address. |
| Company data | Proposed company names, share allocations, directors, members, secretary and beneficial owners. |
| Tax & compliance data | ZIMRA BP numbers, tax clearance details, NSSA employer details and PRAZ information. |
| Documents | Proof of residence, CR forms, certificates and other supporting uploads. |
| Payment data | Payment reference, amount, method and proof of payment. We never store full card details. |
| Technical data | Account credentials (passwords are stored hashed), login activity and audit logs of changes. |
We collect only what is necessary to deliver the service you requested (data minimisation), and we do not collect sensitive personal information beyond identity documents required by law.
2. Why we collect it
- •Preparing and lodging your registration with the Registrar of Companies and related authorities.
- •Registering you with ZIMRA, NSSA and PRAZ where you request those services.
- •Verifying identity and meeting anti-money-laundering and beneficial-ownership obligations.
- •Processing payments and issuing receipts and invoices.
- •Communicating status updates and delivering your completed documents.
3. Lawful basis
We rely on your explicit consent (given when you submit an application), performance of our contract with you, and compliance with legal obligations under the Companies and Other Business Entities Act [Chapter 24:31], the Revenue Authority Act and related statutes.
4. Who we share it with
Only with the authorities needed to complete your instruction — the Registrar of Companies (Deeds, Companies and Intellectual Property), ZIMRA, NSSA, PRAZ and, where you request bank account opening, your chosen bank. We do not sell your data or use it for third-party marketing.
5. Security & retention
Data is encrypted in transit and at rest, documents are stored in a private repository accessible only to you and authorised Amashad staff, access is role-based, and administrative changes are recorded in an audit log. We retain records for the statutory period applicable to company and tax records, after which they are deleted or anonymised.
6. Your rights
- •Access the personal information we hold about you.
- •Request correction of inaccurate or incomplete information.
- •Request deletion where we are not legally required to retain it.
- •Object to or restrict processing, and withdraw consent at any time.
- •Lodge a complaint with the Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ) as the Data Protection Authority.
7. Contact us
To exercise any right or raise a data protection concern, contact our Data Protection Officer at privacy@amashad.com. You can also manage or delete your information from your dashboard.