Skip to content
Qiutec
Legal

Privacy Policy

Qiutec is a software engineering company based in Bulawayo, Zimbabwe, working with clients across Africa. This policy explains what personal information we hold, why, and what you can tell us to do with it.

Last updated 18 August 2026

Who is responsible

Qiutec is the data controller for information collected through this website: we decide what is collected and why. You can reach us at [email protected] or on +263 78 457 8785, and that is also the address for anything in this policy, including requests about your own data.

What we collect

Only what you give us, and a little about how the site is used.

  • When you contact us: your name, email address, phone number if you provide one, your organisation, and whatever you write in the message.
  • When you subscribe: your email address.
  • When you browse: if you accept optional cookies, aggregate statistics about which pages are visited. If you refuse, none of this is collected.

We do not ask for and do not want special categories of information, health, religion, political opinion, biometrics, or anything similar. Please do not put such details in an enquiry form.

Why we hold it, and on what basis

  • To answer you. If you send an enquiry, we use your details to reply and to carry out any work that follows. The basis is your request, and then the contract between us.
  • To send what you asked for. Newsletters go only to people who subscribed, on the basis of consent, and every one carries an unsubscribe link.
  • To improve the site. Analytics, only where you have consented to the cookies that produce it.
  • To meet our obligations. Some records must be kept for tax and accounting purposes.

We do not sell personal information, we do not share it for advertising, and we do not make automated decisions about you.

Who can see it

Our own staff, and only those who need it. Beyond that we rely on a small number of service providers, our email provider, our hosting provider, and Google Analytics where you have consented. Each processes data on our instructions.

We will disclose information if the law requires it, and we will tell you when we are permitted to.

Where it goes

Our infrastructure and some providers are outside Zimbabwe, so your information may be transferred and stored abroad. Where we transfer personal information across a border, we do so only to a jurisdiction offering comparable protection or under contractual safeguards with the provider, as required by section 28 of the Cyber and Data Protection Act and by the equivalent provisions elsewhere.

How long we keep it

  • Enquiries: 24 months after we have dealt with them, then deleted.
  • Newsletter subscriptions: until you unsubscribe.
  • Client records: as long as the relationship lasts, then as tax law requires.
  • Analytics: up to 24 months, in aggregate.

Deletion is automatic on those schedules, not a promise to get round to it.

Your rights

Wherever you are reading this from, you can ask us to:

  • tell you what we hold about you, and give you a copy;
  • correct anything that is wrong or out of date;
  • delete it, where we have no obligation to keep it;
  • stop using it for a particular purpose, including marketing;
  • hand it to you or another provider in a portable form;
  • withdraw consent you previously gave, without affecting what came before.

Write to [email protected]. We answer within 30 days, and we do not charge for it.

The law this sits under

We are governed by Zimbabwe's Cyber and Data Protection Act (Chapter 12:07), overseen by POTRAZ as the Data Protection Authority. Because we work across the continent, we also apply the standards of the regimes our clients fall under, rather than treating this as a Zimbabwe-only policy:

  • South Africa: Protection of Personal Information Act (POPIA), 2013
  • Kenya: Data Protection Act, 2019
  • Nigeria: Nigeria Data Protection Act, 2023
  • Ghana: Data Protection Act, 2012
  • The African Union Convention on Cyber Security and Personal Data Protection

Where a visitor is in the European Union or the United Kingdom, we handle their information to GDPR standards.

If you are unhappy

Tell us first, at [email protected], and we will try to put it right. You also have the right to complain to your data protection regulator: in Zimbabwe that is POTRAZ, in South Africa the Information Regulator, in Kenya the Office of the Data Protection Commissioner, and in Nigeria the Nigeria Data Protection Commission.

Cookies

Which cookies we set, what each is for, and how to change your mind is set out in full in our Cookie Policy.

Changes

If we change this policy we will update the date at the top. Where a change materially affects your rights, we will say so on the site rather than rely on you noticing.

Qiutec, Bulawayo, Zimbabwe. [email protected]