Privacy Policy

Vanguard Digital (“Vanguard”, “we”, “us”) is the organisation responsible for personal information collected through vanguarddigital.co.zw and related services.

Legal entity (to be completed): [Full registered company name], [Company registration number], [Registered address in Zimbabwe].

We are appointing / have appointed a Data Protection Officer (DPO) in line with Zimbabwe’s data-protection framework and POTRAZ-related registration requirements. DPO contact: [dpo@… or privacy@… email]. Until that address is live, privacy requests may go through the Help page or WhatsApp support listed on the storefront.

This Privacy Policy should be read with our Terms of Service. By using Vanguard you acknowledge the practices described here.

This policy covers customers, account holders, website visitors, affiliate applicants (where applicable), and anyone who contacts support.

It does not cover third-party websites we link to (for example Amazon or SHEIN product pages). Those sites have their own privacy policies.

Identity and contact data: name, email, phone number, and similar details you provide when registering or messaging us.

Delivery and order data: addresses, product links or selections, quote details, order history, delivery preferences, and support correspondence.

Account and authentication data: login identifiers; if you sign in with Google, we receive your name, email, and profile picture according to the permissions you grant Google.

Payment-related data: payment status, references, amounts, and method type from our payment gateway (for example Paynow). Full card or mobile-money secrets are typically processed by the gateway and not stored by Vanguard.

Technical and usage data: IP address, device/browser type, pages viewed, approximate location derived from IP, diagnostics, and security logs.

Marketing and analytics data (with consent where required): cookie/analytics identifiers, aggregated behaviour, and session insights as described in the cookies section.

KYC or verification data: only if we reasonably require identity documents to prevent fraud or meet compliance obligations.

Directly from you (forms, checkout, WhatsApp, email, account settings).

Automatically through cookies, local storage, and similar technologies.

From service providers that help us run the platform (authentication, hosting, payments, analytics).

From logistics or sourcing partners as needed to fulfil an order you placed.

To provide the contract: create accounts, produce landed quotes, process payments, procure goods, arrange shipping and customs-related handling, deliver or arrange collection, and send transactional updates (including WhatsApp order notices when enabled).

Legitimate interests: secure the platform, prevent fraud and abuse, improve product experience, understand aggregate demand, and defend legal claims — balanced against your rights.

Consent: non-essential analytics/cookies, optional marketing messages, and certain WhatsApp or promotional communications. You can withdraw consent where consent is the basis.

Legal obligation: tax, import/customs record-keeping, responding to lawful requests, and data-protection duties once our DPO / registration obligations apply.

Essential cookies and local storage support sign-in (for example Supabase auth), shopping cart, security, and affiliate referral attribution. These are needed for the service to function.

With your permission via the cookie banner, we may use analytics such as PostHog (product analytics and session replay with sensitive fields masked where configured), Vercel Web Analytics, Vercel Speed Insights, and Google Analytics if enabled.

You can choose Essential only or Accept analytics. Clearing site data in your browser resets the banner choice.

We do not sell your personal information.

We share data with processors and partners only as needed to run the service, including: payment gateways; hosting and infrastructure providers (for example Vercel); authentication/database providers (for example Supabase); analytics providers you consent to; messaging/email providers; logistics and fulfilment partners (including international freight and local delivery); and sourcing suppliers for the products you order.

We may disclose information to regulators, courts, or law enforcement when required by law or to protect rights, safety, and the integrity of the platform.

Service providers are expected to process personal data under appropriate contractual and security controls and only for the purposes we specify.

Some providers host or process data outside Zimbabwe (for example cloud infrastructure or analytics). Where we transfer personal data internationally, we do so because it is necessary to provide the service and we take reasonable steps to use reputable providers and appropriate safeguards available to us.

By using Vanguard you understand that such transfers may occur. We will update this section as our DPO and counsel finalise the formal transfer documentation.

Account data: kept while your account remains active and for a reasonable period afterward if needed for security or disputes.

Order, payment, and customs-related records: kept for the period required for tax, accounting, import records, and dispute resolution — commonly several years; exact period to be confirmed with counsel ([proposed: at least 5–7 years for transactional records]).

Support chats and marketing preferences: kept as needed to provide support or until you opt out / request deletion where applicable.

Analytics data: retained according to the tool’s configuration and your cookie choices.

When retention ends, we delete or anonymise data where practicable.

We use HTTPS, access controls, and industry-standard hosting/security practices. No internet transmission or storage system is perfectly secure.

If we become aware of a personal-data breach that poses a risk to you, we will take steps required by applicable law, which may include notifying you and/or the relevant authority, and our DPO will coordinate the response once appointed.

Subject to Zimbabwe law and applicable exceptions, you may request: access to your personal data; correction of inaccurate data; deletion; restriction or objection to certain processing; and withdrawal of consent for marketing or non-essential analytics.

You can update many account details in your Vanguard account. To exercise other rights, contact the DPO email above or use Help & Support. We may need to verify your identity before acting.

You may lodge a complaint with the relevant Zimbabwe data-protection / POTRAZ channels once your counsel confirms the correct supervisory route for our registration status.

Vanguard is not directed at children under 18. We do not knowingly collect personal data from children for accounts or orders. If you believe we have done so, contact us and we will take appropriate steps.

If you apply to or join the affiliate programme, we process additional information (for example payout details and performance data) to run commissions, integrity checks, and communications. Programme rules and integrity policies also apply.

We may update this Privacy Policy from time to time. The “Last updated” date will change when we publish revisions. Significant changes may be highlighted on the site or communicated by email where appropriate.

Privacy and DPO requests: [dpo@ / privacy@ email], Help & Support page, or the official WhatsApp line listed on the storefront.

This page is a working draft prepared for lawyer and DPO review in connection with company registration, payment-gateway onboarding, and POTRAZ / data-protection compliance. It is not a substitute for professional legal advice.