Privacy policy

Data controller

Silverconne Technologies (Pvt) Ltd

Contact for privacy matters

Data Protection Officer (appointment pending)

Email

privacy@silverconne.com

Address

Harare, Zimbabwe

The data protection officer named above is an appointment we are in the process of making. Until it is made, privacy requests go to the email address above and are handled by a director.

• ›Answering you, quoting, and delivering what you bought.
• ›Invoicing, taking payment, and keeping the accounting records we are required to keep.
• ›Supporting the system you run, including responding to a ticket or a WhatsApp message.
• ›Sending you information about your own order, project or booking. These are not marketing and you cannot unsubscribe from them while the engagement is live.
• ›Sending you our newsletter, only if you asked for it, with an unsubscribe link in every message.
• ›Improving the site and our products, using aggregated analytics rather than individual behaviour.

We do not use your information to make an automated decision that affects you, and we do not profile you for advertising.

We use a small number of service providers to run the business. Each processes information on our instructions and for no other purpose. The categories are:

• ›Hosting and database — the infrastructure this site and your portal run on.
• ›Email delivery — sending invoices, confirmations and replies.
• ›Payment gateway — taking your payment. They hold the payment details; we hold the reference.
• ›Analytics — counting page views and conversion events.
• ›Error monitoring — recording faults so we can fix them.
• ›AI model provider — generating the assistant’s answers from the question and our own published content.

We will name each provider on request. We do not sell your information, and we do not share it with anyone for their own marketing.

Our infrastructure is managed hosting, and some of it sits outside Zimbabwe. We will tell you the exact region in writing before you sign anything, and we will tell you if it changes. If your organisation has a requirement about where its data may be held, raise it during scoping rather than after go-live — it is a solvable constraint if we know about it early.

We keep information for as long as it is needed for the purpose it was collected for, and then for as long as we are required to keep records. In practice:

Where a retention period is driven by accounting or tax record-keeping, we cannot delete the record on request until that period has run. We will say so, and we will tell you when it expires.

You can ask us for a copy of the information we hold about you, ask us to correct it, ask us to delete it, or object to a particular use of it.

1. 01If you have a portal accountRequest an export or a deletion from your account settings in the portal. The request is logged and tracked, so you can see its status rather than wondering whether an email arrived.
2. 02If you do notEmail privacy@silverconne.com and tell us what you want. We may ask you to confirm who you are, because handing your information to somebody else would be the worse failure.
3. 03What happens thenWe acknowledge within 5 business days and complete the request within 30 days. If we cannot delete something because we are required to keep it, we tell you which record and why.

You can also complain to the supervisory authority responsible for data protection in Zimbabwe. We would rather you came to us first, but you are not required to.

• ›Encryption in transit, and at rest on our managed infrastructure.
• ›Row-level access control in the database, so one client cannot read another client’s records even through a fault in our application.
• ›Uploaded documents held in a private store and served only through short-lived signed links.
• ›Two-factor authentication required on staff accounts.
• ›Access on a need-to-know basis, and removed the day someone leaves.
• ›An audit record of who changed what.

No system is beyond compromise. If a breach affects your information we will tell you what happened, what it affects and what we are doing, without waiting until we have a complete picture.

This site does not use advertising cookies and does not carry third-party advertising trackers. We store a random identifier in your browser so repeated visits can be counted as one visitor, and we record page views and conversion events against it. It is not linked to your name unless you have signed in.

Blocking it in your browser is fine and nothing on the site depends on it.

This site is for businesses and we do not knowingly collect information from children. Our school product holds pupil information, but the school is the controller of it and we process it on the school’s instructions under the agreement we have with them.

When we change this page we change the dates at the top of it. If a change materially affects what we do with your information, we will tell clients directly rather than relying on you noticing.