HANDY HANDS PRIVATE LIMITED PRIVACY POLICY

Last Updated: 12 February 2025

This Privacy Policy outlines the manner in which we collect, use, disclose, and protect your personal information in compliance with the DATA PROTECTION ACT [CHAPTER 11:12] of Zimbabwe and our operational framework governed by the COMPANIES AND OTHER BUSINESS ENTITIES ACT [CHAPTER 24:31]. By registering with Handy Hands, you expressly consent to the processing of your personal data to the extent reasonably necessary for the fulfilment of Handy Hands’ obligations.  

1.   Purposes of Data Processing

We process your personal data for the following purposes:   a) Providing and Personalizing the Chatbot Experience:

   Your data is utilized to understand user preferences, tailor responses, and deliver relevant information or services. For instance, display location and geographic coordinates may be used to provide location-specific recommendations. b) Communication and Support:

   Contact information, such as your WhatsApp number, may be used to communicate with you, provide support, or send important updates.   c) Identity Verification:

   Your data may be used to verify your identity, particularly when resolving user queries or ensuring compliance with legal requirements.   d) Analytics and Service Improvement:

   Aggregated and anonymized message logs and user data are analyzed to understand user behavior, identify areas for improvement in the chatbot’s functionality, and track key metrics. This data is visualized in a Looker Studio dashboard for client analysis.   e) Legal and Compliance:

   Data, including message logs, may be used to ensure compliance with legal obligations, resolve disputes, or investigate potential misuse of the chatbot.   f) Service Delivery:

   To provide you with the services you have signed up for.  

1. g) Feedback and Improvement: To solicit your opinions and feedback regarding our products and services.

2.   Data We Process

We collect and process the following categories of information:  

1. Agreed to Terms A Boolean value indicating whether you have agreed to the terms and conditions and privacy policy.
2. Date Created: The timestamp of when your user profile was created.
3. Display Location: Your specified location, which may be used for location based services or personalization.
4. Location: Geographic coordinates (latitude and longitude) provided by you, which may be used for location-based services, analytics, or demographic understanding.
5. User Name: Your name, used for personalization and identification purposes.
6. WhatsApp Number: Your WhatsApp number, used for communication and account management.
7. Message Logs: All messages exchanged with the chatbot, including message content, timestamps, and user identifiers.

3.   How We Use Your Data

We utilize the information collected for the following purposes:  

1. To facilitate the account creation and login process.
2. To deliver marketing and promotional communications.
3. To provide administrative updates and information.
4. To enforce our terms, conditions, and policies.
5. For other business related purposes, including data analysis, identifying usage trends, assessing the effectiveness of promotional campaigns, and enhancing our websites, apps, products, services, marketing efforts, and overall user experience.

4.   Rights and Options Regarding Your Data 

You have the following rights concerning your personal data:  

1. Access: You may request access to the personal data we have collected about you.
2. Rectification: You may request the correction of any inaccuracies in your personal data.
3. Erasure: You may request the deletion of your personal data, subject to legal obligations.
4. Objection: You may object to the processing of your personal data for specific purposes.
5. Data Portability: You may request to receive your personal data in a structured, commonly used, and machine-readable format.

5.   Data Protection Measures  

We have implemented the following measures to safeguard your data:  

1. Data Encryption: Data is encrypted both in transit and at rest using industrystandard encryption protocols.
2. Access Control: Access to data is strictly limited to authorized personnel, adhering to the principle of least privilege.
3. Multi-Factor Authentication (MFA): All access to Google Cloud Platform (GCP) resources is protected by MFA to prevent unauthorized access.
4. Compliance with Best Practices: We adhere to GCP best practices for security and data privacy.
5. Data Minimization: We only collect data necessary for the functionality of the chatbot and the purposes outlined in this policy.
6. Data Retention: We retain information only for as long as required to fulfil our services or comply with legal obligations. Certain records may be retained for up to seven years for regulatory compliance.

6.   Data Sharing  

Your data may be shared with the following parties:  

1. Handy Hands: As the data owner, Handy Hands has access to all data collected by the chatbot.
2. Steady State Solutions: As the developers and maintainers of the chatbot, Steady State Solutions has access to the data for technical support, maintenance, and development purposes. Access is strictly controlled and limited to authorized personnel.
3. Google Cloud Platform (GCP): Data is stored and processed on GCP services. Google, as the cloud provider, has access to the data but employs robust security measures to ensure data privacy and integrity.
4. Legal Authorities: Data may be disclosed to legal authorities if required by law, court order, or government request.

7.   Privacy Policy Changes  

This policy is subject to regular review. Any changes will be posted on our website.

We reserve the right to modify, add, or remove portions of this policy at any time.  

8.   Governing Law and Jurisdiction  

This Privacy Policy is governed by the laws of the Republic of Zimbabwe. Any disputes arising under this policy shall be exclusively resolved by the courts located within Zimbabwe, and you agree to submit to the personal jurisdiction of such courts.  

By continuing to use our services, you acknowledge that you have read, understood, and agreed to the terms outlined in this Privacy Policy.