Harare, Zimbabwe
Data protection, IT support, ICT projects and staff training for Zimbabwean organisations. One team. Fixed fees.
The Act calls all of these personal data
01 Who this is for
Patients, pupils, customers or staff. On a server or in a cabinet. If you decide how personal information is used, you are a data controller.
A wall of patient folders is a database. The Act treats it as one.
Patient files, test results, ID numbers, next of kin
Health information is sensitive data under the Act and carries the strictest rules of all.
Pupil records, parents’ details, fee accounts, photos
Children’s data needs parental consent and extra care, and parents will ask.
KYC documents, payslips, credit histories, claims
Financial records are what thieves want and what regulators look at first.
Client matters, tax records, contracts, correspondence
Confidentiality is now a statutory duty as well as a professional one.
Beneficiary lists, donor records, staff and volunteer files
Donors and partners increasingly ask for proof of compliance before they fund.
Loyalty databases, bookings, tenant files, CCTV
A camera pointed at a customer is processing personal data. So is the loyalty card.
02 What the law asks of you
The Act set the rules in 2021. SI 155 of 2024 made a licence and a Data Protection Officer mandatory.
The Cyber and Data Protection Act is gazetted. POTRAZ becomes the Data Protection Authority. Personal information becomes a regulated asset.
SI 155 of 2024 makes two things mandatory for every data controller: a licence from POTRAZ, and a trained, registered Data Protection Officer.
Licensing and DPO registration are under way across the country. Organisations that can show their paperwork will be fine. Organisations that cannot will be asked why.
Register as a data controller with POTRAZ and pay the licence fee for your tier.
We prepare and submit the application, and keep the renewal date.
Name a Data Protection Officer who has completed accredited training, and register them with the Authority.
We act as your DPO on a retainer, or prepare the person you nominate.
Keep a record of what personal data you process, why, where it lives and who can see it.
We build the register with you in a day, and it stays yours.
Publish privacy notices and collect consent where the Act requires it.
Notices and forms in language your customers actually read.
Take appropriate technical and organisational measures to secure the data.
Tested backups, patched devices, access tied to real people. Our IT service.
Notify POTRAZ within 24 hours of becoming aware of a breach.
A one-page breach plan on the wall and a number to call.
People can ask what you hold, have it corrected, or have it deleted.
A request process, templates and a log, so it takes minutes not weeks.
Sending personal data outside Zimbabwe needs adequate protection or a lawful basis.
We review your cloud tools and vendors and tell you which are fine.
03 Two-minute self-check
Seven questions, two minutes, no email address. You get a straight answer and a list of what to fix first.
Question 1 of 7
Do you keep any records about people: customers, patients, pupils, members or staff?
04 What we do
If you get them from four suppliers, the gaps between each are where breaches live.
01 / 04 Data Protection & Privacy
02 / 04 Technical Support
03 / 04 Project Management
04 / 04 ICT Training & Support
05 Your first 30 days
Every engagement starts the same way, so the price and the timeline are settled before you commit to anything.
Tell us what you hold and what is worrying you. We tell you whether the Act applies, what it will take, and roughly what it costs. No charge.
On site or remote. We walk your systems and paperwork with you: what data, where, who has access, what is missing.
Every gap, its priority, and a fixed price to close it. The report is yours whether or not you continue.
Licence application, DPO, register, notices, breach plan, and the IT fixes that the assessment flagged.
Staff training, DPO handover or retainer, quarterly reviews. Compliance that holds next year, not just this quarter.
06 What you can hold us to
A fixed price before work starts. A named person who answers the phone. A date on every deliverable. None of that is a slogan; all of it goes in your engagement letter.
You get a price before work starts, and the price does not move unless the scope does.
The engineer who set up your backups is the one who answers when something fails. Not a queue.
A policy your receptionist can follow beats a forty-page PDF nobody has opened. We write the first kind.
Load-shedding, patchy bandwidth and USD budgets are inputs to the design, not excuses afterwards.
The policy, the laptop, the rollout and the person using it all agree, because the same people did all four.
We do compliance, IT and training. When a question needs a legal opinion we say so, and we work alongside your lawyer.
07 Questions
Not here? Ask. The first call is free.
Yes. The obligations attach to anyone who decides why and how personal data is used, not to a size of organisation. If you keep records about customers, patients, pupils, members or employees, you are a data controller.
The Act provides for fines and, for the most serious offences, imprisonment, and POTRAZ can inspect and enforce. In practice the first pressure often comes sooner and softer: a donor, a tender, an insurer or a bank asking for proof of compliance you cannot produce.
It depends on what you hold and what is already in place, which is why we start with a fixed-fee gap assessment and a written, costed plan. You will know the full price before any further work begins.
You have to appoint one. That can be an existing staff member who completes accredited training, or MazeTech acting as your DPO on a retainer. We help you decide which is right for your size.
Yes. Assessments, DPO services and most IT support run remotely; we travel for on-site work. Ask us about your location.
No. MazeTech provides compliance, IT and training services. Where a question needs a legal opinion, we say so and work alongside your lawyer.
08 Start
Tell us what you hold. We tell you whether the Act applies, what it takes, and roughly what it costs. No charge.
Prefer to write it down? Send us a message and we will call you back.
