Privacy Notice for AFINET (African Fibre Networks) www.afinet.africa Effective Date: (18/07/2025) At AFINET (African Fibre Networks) (“we”, “our”, or “us”), your privacy is important to us. This Privacy Notice outlines how we collect, use, store, and protect your personal information when you visit and use our website, www.afinet.africa (“the Website”), in accordance with the Cyber and Data Protection Act [Chapter 12:07] of Zimbabwe (The Act) and other applicable laws.
1. Information We Collect
We may collect the following types of information:
Personal Information Under the Act, “personal information” is broadly defined as any information relating to an identified or identifiable living individual. When you contact us, fill out forms, or subscribe to our services, we may collect personal information such as:
- Full name
- Email address
- Phone number
- Company or organisation name
- Any other information you voluntarily provide
Automatically Collected Information When you browse the Website, we may collect:
- IP address
- Browser type and version
- Pages visited
- Date and time of visit
- Referring website
Cookies We use cookies and similar tracking technologies to improve user experience and analyse website traffic. You can modify your browser settings to decline cookies.
2. How We Use Your Information
We use your information to:
- Respond to your inquiries or requests
- Provide services and support
- Improve website functionality and content
- Send updates, newsletters, or marketing materials (if opted in)
- To comply with legal and regulatory obligations
- To ensure the security of our systems
3. Sharing of Information
We do not sell or rent your personal information. We may share it with:
- Service providers who assist us with website hosting, analytics, or communication
- Third-party service providers who assist us in delivering our services (e.g., payment processors, hosting providers, marketing platforms)
- Regulatory or law enforcement agencies if required by law
- Our employees and authorised personnel for lawful and legitimate purpose
4. Lawful Basis for Processing
The Act requires that we have a lawful basis for processing your personal information. These bases may include:
- Consent: Where you have freely given your explicit consent for a specific purpose.
- Contract: Where processing is necessary for the performance of a contract with you.
- Legal Obligation: Where processing is necessary for compliance with a legal obligation.
- Legitimate Interests: Where processing is necessary for our legitimate interests or the legitimate interests of a third party, provided your interests and fundamental rights do not override those interests.
- Public Interest: Where processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority.
- Vital Interests: Where processing is necessary to protect your vital interests or those of another person.
5. Data Storage and Security
We store personal data securely using appropriate technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction, in line with the requirements of The Act. Depending on the nature of the data and operational requirements, personal data may be stored:
- On our secure servers located in Zimbabwe, or
- On trusted third-party cloud platforms that comply with data protection and security obligations.
We ensure that any data stored or processed outside Zimbabwe is done in compliance with cross-border data transfer provisions under The Act.
6. Your Rights
The Act provides that you, as a data subject, has the following rights regarding your personally identifiable information:
- Right to be Informed: You have the right to be informed about the collection and use of your personal information.
- Right to Access: You have the right to request access to your personal information that we hold.
- Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal information of yours that we hold.
- Right to Erasure (Right to be Forgotten): You have the right to request the deletion of your personal information under certain circumstances.
- Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal information in certain situations.
- Right to Data Portability: You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit that data to another controller without hindrance.
- Right to Object: You have the right to object to the processing of your personal information in certain circumstances.
- Rights Related to Automated Decision-Making including Profiling: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, unless there is a lawful basis for such processing.
To exercise these rights, please contact us at dpo@afinet.africa Please note we may require you to provide proof of your identity before we can respond to your request.
7. Third-Party Links
- Our website may contain links to other websites. We are not responsible for the privacy practices of such external sites. You will need to review their policies separately.
8. Data Retention
- We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable laws and regulations. Once data is no longer needed, we will take appropriate steps to securely delete or anonymise it in accordance with our internal data retention policy and the provisions of The Act. In some cases, we may retain data for longer periods if required for legal, regulatory, or legitimate business reasons, such as the establishment, exercise, or defence of legal claims.
9. Updates to This Policy
- We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised “Effective Date.” We encourage you to review it periodically.
10. Contact Us
- If you have any questions or concerns about this policy, please contact us: AFINET (African Fibre Networks) (Pvt) Ltd Email: dpo@afinet.africa Phone: +263 242 304 101 / 335 886 Website: www.afinet.africa Physical Address: Block D, Emerald Office Park, 30 The Chase, Emerald Hill, Harare.