Privacy Policy

1.1 Controller Identity. VAZ is the data controller responsible for your personal information. We are registered in Zimbabwe and operate under Zimbabwean data protection laws.

1.2 Scope. This Privacy Policy applies to all personal information processed by VAZ through our website (vaz.org.zw), mobile applications, volunteer programs, and related services.

1.3 Legal Basis. We process your personal information based on your consent, contractual necessity, legal obligations, and our legitimate business interests.

2.1 Personal Information You Provide

We collect information you voluntarily provide when you:

• Create an account or register as a member
• Apply for membership or volunteer programs
• Make payments or donations
• Submit contact forms or inquiries
• Participate in surveys or events
• Communicate with us via email or phone

2.2 Automatically Collected Information

When you access our services, we automatically collect:

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages viewed, time spent, clicks, navigation paths
• Location Data: Approximate geographic location based on IP address
• Cookies & Similar Technologies: See Section 8 for details

2.3 Information from Third Parties

We may receive information about you from:

• Payment processors (transaction details, payment status)
• Partner organizations (if you participate in joint programs)
• Publicly available sources (for verification purposes)
• References provided during application processes

We collect information through various methods:

• Direct Collection: Registration forms, application forms, payment portals
• Automated Collection: Cookies, web beacons, analytics tools
• Communications: Emails, phone calls, contact forms, chat services
• Third-Party Integration: Payment gateways, social media platforms (if you choose to connect)

We use your personal information for the following purposes:

5.1 Service Providers

We share information with trusted third-party service providers who assist us in:

• Payment processing (e.g., Paynow, payment gateways)
• Email delivery services
• Cloud hosting and storage
• Analytics and performance monitoring
• Customer support tools

These providers are contractually obligated to protect your information and use it only for specified purposes.

5.2 Program Partners

With your consent, we may share relevant information with organizations hosting volunteer programs you've joined.

5.3 Legal Requirements

We may disclose information when required by law, court order, or governmental authority, or to:

• Comply with legal processes
• Protect our rights and property
• Prevent fraud or security threats
• Protect the safety of users or the public

5.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

6.1 Security Measures

We implement industry-standard security measures to protect your information:

• Encryption: SSL/TLS encryption for data in transit; AES encryption for sensitive data at rest
• Access Controls: Role-based access with multi-factor authentication for staff
• Secure Infrastructure: Firewalls, intrusion detection, regular security audits
• Payment Security: PCI DSS compliance for payment processing
• Regular Updates: Software patches and security updates
• Employee Training: Staff trained on data protection and security best practices

6.3 Data Breach Notification

In the event of a data breach that affects your personal information, we will notify you and relevant authorities within 72 hours as required by applicable law.

You have the following rights regarding your personal information:

8.1 What Are Cookies?

Cookies are small text files placed on your device to collect standard internet log information and visitor behavior.

8.2 Types of Cookies We Use

• Essential Cookies: Necessary for website functionality (e.g., login sessions)
• Performance Cookies: Collect anonymous data about how visitors use our site
• Functionality Cookies: Remember your preferences and settings
• Analytics Cookies: Help us understand user behavior and improve our services

8.3 Managing Cookies

You can control cookies through your browser settings. Note that disabling certain cookies may affect website functionality.

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy:

• Active Accounts: Retained while your account is active
• Inactive Accounts: Deleted after 3 years of inactivity (with prior notice)
• Transaction Records: Retained for 7 years for legal and tax purposes
• Marketing Data: Deleted upon withdrawal of consent or after 2 years of inactivity
• Legal Obligations: Retained as required by law

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children without verifiable parental consent.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. We will delete such information from our records.

Your information may be transferred to and processed in countries other than Zimbabwe. When we transfer data internationally, we ensure appropriate safeguards are in place, including:

• Standard contractual clauses approved by regulatory authorities
• Transfers to countries with adequate data protection laws
• Your explicit consent for specific transfers

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by:

• Posting a prominent notice on our website
• Sending an email to your registered email address
• Updating the "Last Updated" date at the top of this policy

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.