Start a project

Privacy Policy

LAST UPDATED: September 2026

1. Who We Are

Mazi Ventures Ltd (Manchester, UK) acts as the primary Data Controller for personal data collected via mazi.digital. Operational processing support is provided by our affiliate entity, Mazi Digital (Pvt) Ltd (Harare, Zimbabwe).

This Privacy Policy explains how we collect, use, store, and transfer your personal data in compliance with the UK General Data Protection Regulation (UK GDPR), the UK Data Protection Act 2018, and Zimbabwe’s Cyber and Data Protection Act (Chapter 12:07).

2. Information We Collect

We collect the following personal information when you use our website, fill out contact forms, or enter into a client contract:

  • Identity Data: Full name, business name, job title.
  • Contact Data: Email address, telephone/WhatsApp number.
  • Billing & Financial Data: Billing address, shipping address, tax/VAT details, and payment confirmation details. (Note: Full credit card numbers are handled directly by Stripe, PayPal, Paynow, or Pesepay and are never stored on our servers).
  • Technical Data: IP address, browser type, operating system, device details, and browsing interactions collected automatically via cookies and tracking tags.
  • Sensitive Data: We do not collect health data, biometrics, location coordinates, or other special category sensitive personal data.

3. Legal Basis for Processing

Under UK GDPR, we rely on the following legal bases:

  • Contractual Necessity: Processing details required to perform our contract or provide service quotes.
  • Legitimate Interests: Analysing website traffic, improving user experience, preventing fraud, and conducting business-to-business marketing.
  • Consent: Direct newsletter marketing, SMS/WhatsApp updates, and non-essential analytical/marketing cookies.

4. How We Use Your Data

We use your personal data to:

  • Provide, build, and deliver custom software and marketing services.
  • Process payments and generate client invoices.
  • Communicate with you regarding project updates via email, WHMCS support tickets, or WhatsApp.
  • Deliver direct marketing, newsletters, and promotional offers (where you have opted in).
  • Analyze site navigation and optimize our marketing funnels.

5. Third-Party Services & Hosting

Your data may be shared with or processed by the following third-party infrastructure providers:

  • Hosting: Infrastructure hosted securely on servers located within the United Kingdom.
  • Client Management & CRM: WHMCS for ticket management, billing support, and client account admin.
  • Payment Processors: Stripe, PayPal, Paynow, Pesepay, and UK/Zim banking institutions.
  • Analytics & Ad Tags: Google Analytics, Google Search Console, Meta Pixel, and Hotjar.

6. Cross-Border Data Transfers (UK & Zimbabwe)

Because we operate across the UK and Zimbabwe:

  • Personal data collected by Mazi Ventures Ltd in the UK may be accessed by employees or contractors at Mazi Digital (Pvt) Ltd in Zimbabwe for software engineering, project delivery, and customer support.
  • Cross-border transfers between the UK entity and Zimbabwean operations are conducted under UK Standard Contractual Clauses (SCCs) or the UK International Data Transfer Agreement (IDTA), alongside organizational security measures that mirror UK GDPR standards to ensure protection under Zimbabwe's Cyber and Data Protection Act (Chapter 12:07).

7. Your Data Protection Rights

Depending on your location, you hold the following rights:

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Request correction of inaccurate or incomplete data.
  • Erasure: Request deletion of your personal data ("Right to be forgotten").
  • Restriction & Objection: Object to or restrict our processing of your data for direct marketing.
  • Withdraw Consent: Withdraw consent at any time for direct newsletters or marketing cookies.

To exercise any of these rights, contact our Data Protection Lead at privacy@mazi.digital.