Privacy Policy

Last updated: 15 January 2026

1. Introduction

ROJA ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our rental property platform located in Zimbabwe. Please read this Privacy Policy carefully. By accessing or using our platform, you agree to be bound by the terms of this Privacy Policy.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you provide directly to us, including:

  • Name, email address, phone number, and postal address
  • National identification number (for verification purposes)
  • Payment information (processed securely through third-party payment processors)
  • Property details and rental history
  • Profile photographs and identification documents
  • Communication preferences

2.2 Automatically Collected Information

When you visit our platform, we automatically collect certain information, including:

  • IP address and device information
  • Browser type and version
  • Pages visited and time spent on pages
  • Referring website addresses
  • Cookies and similar tracking technologies

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our services
  • Process transactions and send related information
  • Verify user identities and prevent fraud
  • Facilitate communication between tenants and landlords
  • Send administrative information, updates, and promotional communications
  • Respond to your inquiries and provide customer support
  • Monitor and analyze usage patterns and trends
  • Comply with legal obligations under Zimbabwean law

4. Data Protection Under Zimbabwean Law

We comply with applicable data protection laws in Zimbabwe, including but not limited to:

  • The Constitution of Zimbabwe (Section 57 - Right to Privacy)
  • The Cyber and Data Protection Act (Chapter 12:07)
  • Relevant regulations issued by the Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ)

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

5. Information Sharing and Disclosure

We may share your information in the following circumstances:

  • With Landlords/Tenants: To facilitate property rentals, we share relevant information between parties involved in a transaction
  • Service Providers: We may share information with third-party service providers who perform services on our behalf
  • Legal Requirements: We may disclose information if required by law or in response to valid requests by public authorities
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred
  • With Your Consent: We may share information for any other purpose disclosed to you with your consent

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When we no longer need your information, we will securely delete or anonymize it.

7. Your Rights

Under Zimbabwean data protection law, you have the right to:

  • Access your personal data
  • Request correction of inaccurate or incomplete data
  • Request deletion of your personal data (subject to legal obligations)
  • Object to processing of your personal data
  • Request restriction of processing
  • Data portability (where applicable)
  • Withdraw consent at any time (where processing is based on consent)

To exercise these rights, please contact us using the information provided in Section 10.

8. Security Measures

We implement industry-standard security measures to protect your information, including:

  • Encryption of sensitive data in transit and at rest
  • Secure authentication and access controls
  • Regular security assessments and updates
  • Employee training on data protection
  • Incident response procedures

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

9. Children's Privacy

Our platform is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than Zimbabwe. We ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable law.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

12. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

ROJA

Email: privacy@roja.co.zw

Phone: +263 (0) 24 2 XXX XXX

Address: Harare, Zimbabwe