Privacy Policy
This Privacy Policy explains how Skaitbridge Lab (Private) Limited ("Skaitbridge Lab", "we", "us", "our") collects, uses, shares, and protects personal information about you ("you", "your") when you visit www.skaitbridgelab.com, enrol in our programmes, use our services, or otherwise interact with us.
We are committed to protecting your privacy and complying with the Data Protection Act [Chapter 11:12] of Zimbabwe (2021), and — where applicable to learners and clients outside Zimbabwe — with the EU General Data Protection Regulation (GDPR), the UK Data Protection Act 2018, the California Consumer Privacy Act (CCPA), and other comparable laws.
Contents
1. Who we are
Skaitbridge Lab is a Zimbabwean training and inclusive learning company, incorporated and registered as follows:
- Legal name: Skaitbridge Lab (Private) Limited
- Company number: 114319A0252026
- Registered office: 42A Fairway Road, Mount Pleasant, Harare, Zimbabwe
- Email: contact@skaitbridgelab.com
For the purposes of the Zimbabwe Data Protection Act and equivalent laws, Skaitbridge Lab is the data controller of personal information collected through this website and our programmes.
2. Information we collect
2.1 Information you give us directly
- Identity and contact information — your full name, email address, phone number, and, where relevant, your city or country.
- Programme information — the programme you've enrolled in or expressed interest in, your completion date, and your certificate ID.
- Reflection responses — answers you submit in graduate reflection forms (your reflections on the programme, what you've learned, what you intend to apply).
- Waitlist and enquiry information — when you sign up for a programme waitlist or submit an enquiry, the details you include.
- Application information — when you apply for a role with Skaitbridge Lab, the information you provide in your application.
- Correspondence — emails, WhatsApp messages, or other communications you send to us.
2.2 Information we collect automatically
- Technical information — your IP address (truncated where possible), browser type, device type, and the pages you visit on our site.
- Cookies and similar technologies — see Section 9.
2.3 Information from third parties
We may receive information about you from referees you've nominated, from corporate clients who enrol you in our programmes on your behalf, or from public professional profiles (such as LinkedIn) when you apply for a role with us.
3. How we use your information
We use your personal information to:
- Deliver the programmes you've enrolled in, including issuing your Certificate of Completion and maintaining the verification record at /verify.
- Send you programme-related communications, including welcome messages, reflection links, certificate emails, and important programme updates.
- Respond to your enquiries and provide support.
- Improve our programmes, website, and services.
- Process your application if you've applied to join our team.
- Comply with our legal obligations, including under Zimbabwean tax, employment, and corporate law.
- Protect our rights, our learners' rights, and the security of our services.
We do not sell your personal information. We do not use your information for advertising on third-party platforms without your explicit consent.
4. Our legal basis for processing
Depending on the activity, we rely on one or more of the following legal bases:
- Consent — for marketing communications, optional information, and most cookies.
- Contract — to deliver the programmes you've enrolled in.
- Legitimate interests — to run our business, improve our services, and ensure security, where these interests do not override your fundamental rights.
- Legal obligation — to comply with Zimbabwean and international laws that apply to us.
5. Who we share information with
We share personal information only where necessary, with the following categories of recipients:
- Service providers who help us operate our website and deliver our programmes — including providers of website hosting and forms, email and domain services, productivity and collaboration tools, design tools, and communications platforms. All such providers are required by contract to handle your data securely and only on our instructions.
- Corporate clients — if you've been enrolled by your employer, we may share programme completion information with that employer.
- Professional advisors — our lawyers, accountants, and auditors where required.
- Authorities — where we are required by law to disclose information (for example, in response to a lawful court order).
On request, we can tell you the specific service providers we use at any given time.
6. International data transfers
Because some of our service providers are based outside Zimbabwe, your information may be transferred to and processed in countries whose data protection laws differ from Zimbabwe's. Where this happens, we rely on the safeguards required under the Zimbabwe Data Protection Act, including ensuring that the recipient is bound by appropriate contractual protections, or that the transfer is necessary for the performance of our contract with you.
7. How long we keep your information
We retain your personal information only as long as necessary for the purposes for which it was collected, or as required by law. In practice:
- Certificate records — retained indefinitely so that your credential remains verifiable. You may request removal at any time (see Your rights).
- Reflection responses — retained for the duration of our relationship and up to 3 years thereafter, for research and programme-improvement purposes.
- Enquiries and waitlist data — retained for up to 2 years from your last interaction.
- Application data (unsuccessful) — retained for up to 12 months unless you ask us to keep it longer.
- Accounting and tax records — retained for the period required by Zimbabwean law (currently 6 years).
8. Your rights
Under the Zimbabwe Data Protection Act and, where applicable, the GDPR, UK DPA, and CCPA, you have the right to:
- Access the personal information we hold about you.
- Correct any inaccurate or incomplete information.
- Delete your information (subject to legal exceptions, such as the retention of certificate records for credential verification).
- Object to certain types of processing, including direct marketing.
- Withdraw consent where we rely on consent — at any time, without affecting the lawfulness of prior processing.
- Data portability — to receive a copy of your data in a structured, machine-readable format.
- Lodge a complaint with the Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ), which oversees data protection in Zimbabwe, or with your local data protection authority if you are outside Zimbabwe.
To exercise any of these rights, email contact@skaitbridgelab.com. We will respond within 30 days.
9. Cookies and tracking
Our website uses a small number of cookies and similar technologies:
- Strictly necessary cookies — set by our hosting provider to enable basic site functionality and form submission. These cannot be turned off.
- Functional cookies — used to remember your preferences, such as whether you've dismissed a banner.
We do not currently use advertising cookies or third-party analytics that build personal profiles. If we add analytics or marketing pixels in the future, we will update this policy and, where required, ask for your consent before they are set.
10. Children's privacy
Some of our programmes — including Skaitbridge Kids — are designed for children aged 6 to 12. We treat children's data with particular care:
- We only collect a child's personal information with the verifiable consent of a parent or legal guardian.
- We collect only what is necessary to deliver the programme safely (such as the child's first name, age, and any relevant safeguarding information provided by the parent).
- We do not market to children directly.
- Parents and guardians may, at any time, request to see, correct, or delete their child's information.
Skaitbridge Lab maintains a separate Child Safeguarding Policy. Parents will be provided with that policy before their child is enrolled in any Skaitbridge Kids programme.
11. Security
We take appropriate technical and organisational measures to protect your personal information, including encrypted connections (HTTPS) across our website, access controls on our internal systems, and contractual safeguards with our service providers. No system is completely secure; if we become aware of a data breach that affects your personal information, we will notify you and the relevant authorities as required by law.
12. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email or through a notice on the website. We encourage you to review this policy periodically.
13. Contact us
If you have any questions about this policy, or if you wish to exercise any of your rights, please contact us at:
- Email: contact@skaitbridgelab.com
- Post: Skaitbridge Lab (Private) Limited, 42A Fairway Road, Mount Pleasant, Harare, Zimbabwe
This policy is also available in printed form on request. We aim to write in plain language; if anything here is unclear, please tell us and we'll explain.