Draft for review. This page is a plain-language draft with [placeholders]. Have it reviewed by a lawyer before launch.
Last updated: [date]. This notice explains what personal information BidReady collects, why, and your rights. The data controller is [registered business name], trading as BidReady, [address]. Data protection contact: [email].
What we collect
- Your email address, when you sign up for the weekly email or the free ToR checklist, with your consent.
- Your WhatsApp number, when you ask for a quote or join the WhatsApp alert group, with your consent.
- Your name, email and message when you contact us.
- Account and order details when you buy a plan, template or service. Card and mobile money details are handled by Paynow, not by us.
- Documents you upload for CV tailoring or proposal review.
- Basic usage data from cookies the site needs to work, such as keeping you signed in and remembering your cart.
Why we use it
- To send the alerts and emails you asked for.
- To deliver plans, downloads and services you bought, and to keep records of orders.
- To reply to your messages and quote requests.
- To review submitted ToRs and contact the person who submitted them.
Unsubscribing
Every alert email has an unsubscribe link. You can also delete your saved alerts under My account, Alerts, leave the WhatsApp group at any time, or email [email] and we will remove you.
How long we keep it
Email addresses stay on the list until you unsubscribe. Uploaded documents are deleted 90 days after the order. Order records are kept for [number] years for accounting. Messages are kept for [number] months.
Who we share it with
We do not sell your information. We share it only with services that help us run BidReady: our web host [host], Paynow for payments, and our email provider [provider]. [List any others.]
Your rights
Under Zimbabwe’s Cyber and Data Protection Act [Chapter 12:07], you can ask to see the information we hold about you, correct it, or have it deleted, and you can withdraw consent at any time. Email [email]. You can also complain to POTRAZ, the Data Protection Authority.
Registration
[Data controller licence number from POTRAZ and the name of our Data Protection Officer, if required. Confirm with a lawyer.]