Who this policy applies to
This policy applies to personal information processed by Modeste By Ano through this website, customer accounts, orders, support, and related communications. We process information in accordance with Zimbabwe's Cyber and Data Protection Act and other applicable law.
Information we collect
- Identity and contact details, such as your name, email, telephone number, and delivery or billing address;
- Account, order, returns, wishlist, and customer-service records;
- Payment transaction details. Full card credentials are ordinarily handled by the selected payment provider rather than stored by us;
- Device, browser, approximate location, cookie, and website usage information; and
- Marketing preferences and information you choose to provide.
Why we use it
We use personal information to provide the store, create and secure accounts, process and deliver orders, manage payments and returns, respond to enquiries, prevent fraud, maintain records, improve the website, comply with legal obligations, and send marketing where permitted.
We rely on the lawful basis appropriate to each purpose, including performance of a contract, legal obligations, consent, and legitimate business interests that do not override your rights.
Who receives information
We share only what is reasonably necessary with service providers such as WooCommerce and WordPress hosting, payment processors, delivery carriers, email providers, analytics or security providers, and professional advisers.
We may also disclose information where law requires it, to protect legal rights, or in connection with a legitimate business reorganisation. Some providers may process information in other countries; where required, we use appropriate safeguards for cross-border transfers.
Retention and security
We retain information only for as long as needed for the purposes described, including tax, accounting, dispute, fraud-prevention, and legal requirements.
We use reasonable organisational and technical safeguards, but no internet transmission or storage system can be guaranteed completely secure.
Your rights
Subject to applicable law, you may ask to access or correct your information, object to certain processing, withdraw consent, or request deletion where appropriate.
You may also raise a concern with the Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ), Zimbabwe's data-protection authority. We may need to verify your identity before acting on a request.
Children
The store is not directed to children who cannot lawfully enter a purchase contract. We do not knowingly collect children's personal information without the authorisation required by law.
Contact and changes
Use our contact page for privacy questions or requests. We may update this policy as our services or legal obligations change; the date above identifies the current version.