Privacy Policy

Who we are

Review Zimbabwe (review.co.zw) is run by Ratewise International (Private) Limited, a company registered in Zimbabwe ("we", "us"). We decide how your personal information is used, which makes us its data controller under Zimbabwe's Cyber and Data Protection Act [Chapter 12:07].

This policy covers the Review Zimbabwe website. It explains what we collect, why, who we share it with, how long we keep it, and your rights.

What we collect

What you give us

• Account: Your name, email address, phone number if you add one, and your password. Passwords are stored only in a scrambled (hashed) form that we cannot read.
• Your user ID and name setting: The user ID we give your account, and whether your name or your user ID is shown on what you post.
• Business details: For business accounts: the business's details, logo and contact information.
• What you post: Reviews, ratings, photos, comments, questions and answers.
• Messages: What you send us through the contact form or by email.
• Payments: Your plan and billing details. Card details are handled by our payment providers (Stripe , and Paynow) and never reach us.

What we collect automatically

• Device and log information: IP address, browser and device type, operating system, and the pages you request.
• How the site is used: Pages visited and where visitors came from. Searches typed into our search are saved without your name, to improve search results.
• Business page statistics: We count views of business pages and taps on their phone number and website, so business owners can see how their page is doing. Owners see totals, never who you are.
• Cookies: See "Cookies" below.

How we use it, and why we are allowed to

The Cyber and Data Protection Act allows us to use personal information only for a lawful reason. Ours are:

• To provide the service you signed up for: Running your account, publishing what you post, sending verification codes and replies to your reviews, and managing business plans and payments.
• Our legitimate interests: Keeping the platform trustworthy (spotting fake reviews, fraud and abuse), keeping it secure, giving business owners their page statistics and monthly report, and improving the service. We only do this where it does not override your own interests and rights.
• Your consent: Marketing emails and non-essential cookies. You can withdraw consent at any time, without affecting what we did before.
• The law: Keeping tax and billing records, and answering lawful requests.

What other people can see

Reviews, ratings, comments, questions and answers are public on Review Zimbabwe, with your first name and surname initial or, if you chose it, your user ID instead. Your full surname and email address are never shown. If you choose your user ID, your first name stays private too: only our staff can see it, and we disclose it only where the law requires.

Who we share it with

We never sell your personal information. We share it only with:

• Service providers who run parts of the service for us: DigitalOcean (hosting), Stripe and Paynow (payments), and our email delivery provider. They may use your information only to provide their service to us.
• When the law requires it: For example, a court order, or to protect people from harm or fraud.
• If the business changes hands: If we merge with or are bought by another company, which must then keep to this policy.

Where your information is stored

Our servers are run by DigitalOcean, so your information may be stored and processed outside Zimbabwe. We transfer it only as the Cyber and Data Protection Act allows, to providers who are bound to protect it to an adequate standard.

How long we keep it

• Your account: While it is open. When you delete it, your personal details are deleted within 30 days.
• What you posted: Removed when you delete your account.
• Billing records: As long as tax law requires, usually six years.
• Server and security logs: Up to 12 months.
• Search terms: Kept without your name, to improve search.

Deleting your account

Email support@review.co.zw from the address on your account with the subject "Delete my account". We delete your account and personal details within 30 days, apart from billing records we must keep by law.

Keeping it safe

• Everything between your browser and our servers is encrypted (HTTPS).
• Passwords are stored only in hashed form.
• Only staff who need personal information for their work can see it.
• If a breach puts your information at risk, we will tell the Data Protection Authority (POTRAZ) and, where needed, you, as the law requires.

Your rights

Under the Cyber and Data Protection Act you have the right to:

To use any of these rights, email support@review.co.zw.

If you are unhappy with how we handled your information, you can complain to the Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ), Zimbabwe's Data Protection Authority (potraz.gov.zw).

Children

Account holders must be at least 18, or have a parent's or guardian's consent, as our terms say. If you believe a child has given us information without that consent, email support@review.co.zw and we will delete it.

Cookies

• Essential cookies: Needed for the site to work, such as keeping you signed in.
• Preference cookies: Remember your settings.
• Analytics cookies: Help us understand how the site is used. Only with your consent.
• Marketing cookies: Used for advertising. Only with your consent.

You can change your choice at any time in the cookie settings, or block cookies in your browser. Blocking essential cookies may stop parts of the site working.

Changes to this policy

We will update the date at the top when this policy changes, and tell account holders by email about any important change before it applies.