1. Scope
This Policy explains how Identifreed handles personal information collected through this website, enquiries, discovery calls and connected tools used to respond to prospective or current clients.
A separate product, client platform or service may require additional privacy terms where its data processing is materially different.
2. Information we may collect
Depending on how you interact with us, we may collect:
- your name, business name, role and contact details;
- information you submit in an enquiry, form, booking request or discovery call;
- project, operational or technical information you choose to share with us;
- basic device, browser, page and referral information generated when you use the website;
- analytics and cookie information where those tools are enabled;
- billing or transaction records where a paid engagement exists.
Please do not send passwords, payment-card details, health information or other sensitive data through ordinary website contact forms unless we have specifically provided an appropriate method.
3. Why we use personal information
We may use personal information to:
- respond to enquiries and arrange discovery calls;
- understand a requested service or business problem;
- prepare proposals, scopes, invoices and service communications;
- deliver and support agreed client work;
- maintain website security and diagnose technical issues;
- understand website performance where analytics are enabled;
- meet legal, accounting and record-keeping obligations;
- protect our rights, users, clients and systems.
4. Legal basis and fair processing
We process personal information only where there is an appropriate reason to do so, such as your consent, steps requested before entering a contract, performance of a contract, compliance with a legal obligation, or a legitimate business need that does not override your rights.
5. Service providers and connected systems
We may use third-party providers for website hosting, CRM, forms, scheduling, email, file storage, analytics, communications, payment processing or other operational functions.
Those providers may process information on our behalf or under their own terms, depending on the service. We aim to give providers only the information reasonably needed for the relevant function.
6. International data transfers
Identifreed works from Zimbabwe and may work with clients or technology providers in other countries. This means personal information may be processed or stored outside the country where it was originally collected.
Where cross-border processing occurs, we aim to use appropriate contractual, technical or provider safeguards required by applicable law.
7. Retention
We keep personal information only for as long as it is reasonably needed for the purpose it was collected, an active or potential client relationship, legal or accounting obligations, dispute handling, security, or another legitimate business requirement.
Retention periods can differ by record type. Information that no longer has a reasonable purpose should be deleted, anonymised or securely archived where appropriate.
8. Security
We use reasonable organisational and technical measures intended to protect personal information. No internet service, storage provider or transmission method can guarantee absolute security.
9. Your privacy rights
Depending on the law that applies, you may have rights to ask what personal information we hold, request correction, object to certain processing, withdraw consent where consent is relied on, or request deletion where the information no longer needs to be kept.
We may need to confirm identity before acting on a request. Some records may need to be retained where the law or an active contractual obligation requires it.
10. Children
This business website is not directed to children. We do not intentionally use this website to solicit personal information from children. A separate service or product involving minors would require its own appropriate consent, safeguarding and privacy process.
11. Cookies and similar technologies
The website may use necessary storage and, where enabled, analytics or other technologies. See the Cookie Policy for more detail.
12. Zimbabwe privacy framework
Our privacy approach is intended to operate consistently with applicable Zimbabwean data protection requirements, including the Cyber and Data Protection Act, together with any other law that applies to a particular processing activity or client relationship.
13. Changes to this Policy
We may update this Policy as the website, service providers, business systems or legal requirements change. The latest published date appears at the top of the page.
14. Contact and complaints
Privacy questions or requests can be raised through the website contact process. If a request relates to a specific client engagement, include enough information for us to identify the relevant record without sending unnecessary sensitive information.