Our Data Protection Policy

  1. Purpose
    2. We (Impact Center Investments t/a Impact Training Institute ) aim to protect the privacy and personal data of our clients, customers, employees, partners, contractors, and other stakeholders and this Data Protection Policy explains how we collect, use, store, share, and protect personal data in accordance with the Cyber and Data Protection Act [Chapter 12:07] of Zimbabwe and other applicable laws. By engaging with our services or interacting with us, you acknowledge that you have read and understood this Data Protection Policy.
  2. Definition of terms
    3. Personal Information : Information relating to an identified or identifiable individual as defined by the applicable law in Zimbabwe.
    Data Protection Officer (DPO) : The person responsible for overseeing data protection, compliance and assisting with data protection matters.
  3. Who We Are
    4. Impact Center Investments t/a Impact Training Institute is a professional training school which offer a number of courses from certificate level to diploma level as well as one day seminars.
  4. Consent
    5. By using our Services, you consent to our Privacy Policy and agree to its terms.
  5. Personal Data We Collect
    6. We may collect and process the following categories of personal data:

    Students
    • Full names
    • National ID or passport details
    • Contact details (phone number, email address)
    • Employers address
    • Date of birth
    • Academic and professional qualifications

    Employees and Job Applicants
    • Identification details
    • Contact and residential information
    • Employment history and qualifications
    • Banking details
    • Performance, training, and disciplinary records
    Business Partners and Service Providers
    • Names and contact details
    • Company and contractual information
    • Billing and payment information
  6. How We Collect Personal Data
    We collect personal data through:
    • Direct interactions (walk-in at our offices)
    • Phone calls
    • Whasapp messages
    • Electronic systems, forms, and correspondence

  7. Purpose of Processing
    8. We process personal data for the following purposes:
    • Provision of effective trainings
    • Market segmentation
    • Compliance with regulatory authorities
    • Employment administration and human resources management
    • Billing, invoicing, and financial management
    • Customer service, communication, and complaint handling
    • Security monitoring and fraud prevention
    • Legal Basis for Processing
    We process personal data where:
    • It is necessary for the performance of a contract
    • It is required to comply with legal or regulatory obligations
    • It is necessary for our legitimate business interests
    • Consent has been provided, where applicable
  8. Data Sharing and Disclosure
    9. We may share personal data with:
    • Government and regulatory bodies
    • Service providers and contractors acting on our instructions
    • Law enforcement agencies, where required by law
    • We do not sell personal data to third parties.
  9. Cross-Border Data Transfers
    10. Where personal data is transferred outside Zimbabwe, we ensure that appropriate safeguards are in place in line with the Cyber and Data Protection Act to protect your personal data.
  10. Data Security
    11. We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. These measures include access controls, secure systems, and staff awareness.
  11. Data Retention
    12. We retain personal data only for as long as necessary to fulfil the purposes for which it was collected or to comply with legal and regulatory requirements.
  12. Your Rights
    13. Under Zimbabwean data protection law, you have the right to:
    • Access your personal data
    • Request correction of inaccurate or incomplete data
    • Object to or restrict processing in certain circumstances
    • Request deletion of personal data, where legally permissible
    • Lodge a complaint with the relevant data protection authority
  13. Children’s Information ( Those below 18 years of age)
    14. We don’t process / collect children’s information directly from them. Whenever it is necessary for us to do so we get consent from the parent or guardian.
  14. Cookies and Website Use
    15. Where applicable, our website may use cookies or similar technologies to enhance user experience and monitor performance. Details will be provided on the website where relevant.
  15. Changes to This Data Protection Policy
    16. We may update this Data Protection policy from time to time. Any changes will be communicated through appropriate channels and updated on our official platforms.
  16. Data Protection Officer Contact Details
    17. For questions, requests, or concerns regarding this Data Protection Policy or the handling of personal data, please contact:
    Mr Tafadzwa Mutasa
    Designation : Data Protection Officer
    Email : [email protected]
    Phone : 0773928 321 / 0716147020
    Office Address : Bible House 99 Mbuya Nehanda Street .Harare
  17. Organization : Impact Center Investments t/a Impact Training Institute
    18. Registered Address : Bible House 99 Mbuya Nehanda Street , Harare, Zimbabwe
    Email : [email protected]
    Phone : 0242751191 / Cell 0716896576
This Data Protection Policy forms part of Impact Center Investments t/a Impact Training Institute’s commitment to lawful, fair, and transparent processing of personal data.