Privacy Policy
How BeliShum Investments handles the personal information you share with us through this website.
BeliShum Investments (“BeliShum”, “we”, “us”) respects your privacy. This policy explains what personal information we collect through this website and in the course of our work, why we collect it, how we protect it and the rights you have. We handle personal information in line with Zimbabwe’s Cyber and Data Protection Act [Chapter 12:07] and its regulations.
1. Who we are
Belishum Investments (Pvt) Ltd is a diversified investment, advisory and business solutions company based in the Avenues, Harare, Zimbabwe. Our divisions cover property management and real estate, corporate finance and investment advisory, finance management and accounting, tax and compliance, data analytics, digital systems and Microsoft 365, media and photography, and data protection advisory. For the personal information described in this policy, Belishum Investments is the data controller.
Questions about this policy or your information can be sent to info@belishum.co.zw or by phone on +263 77 795 9661.
2. Information we collect
Information you give us
- Enquiry and quote forms: your name, company, email address, phone number, the service you are interested in, your preferred way to be contacted, your message, and whether you asked to receive updates.
- Calls, emails, WhatsApp and meetings: the details you share when you contact us.
- Client engagements: to deliver our services we may receive company and director details, tax registration and ZIMRA, NSSA or PRAZ records, financial statements and accounting records, bank and mobile money statements, payroll and employee information, and access to accounting or Microsoft 365 systems.
- Property and media work: owner and tenant details, lease and rental records, and photographs or video of people, premises and events, used only for the agreed work and with the consent of the people shown where required.
Information collected automatically
- Our web server records technical information such as your IP address, browser type and the pages requested, to keep the website secure and working.
- The website uses only the cookies it needs to function (for example, to keep site administrators signed in). We do not use advertising or tracking cookies. If this changes, we will update this policy and ask for your consent where required.
- Website fonts are delivered by Google Fonts, which receives your IP address when a page loads.
Information from others
We may receive information about you from public registers, from authorities we deal with on your instructions, from your previous accountants or advisers, or from the person who referred you to us.
Please do not send passwords, bank card details or copies of identity documents through the website form. If we need them for an engagement, we will arrange a secure way to receive them.
3. How we use your information and why
| Purpose | Legal basis |
|---|---|
| Responding to enquiries and preparing proposals or quotations | Your consent, given on the form, and steps you ask us to take before entering into a contract |
| Delivering the services you engage us for (bookkeeping, tax filings, audits, registrations, systems and training) | Performance of our contract with you or your organisation |
| Keeping tax, accounting and business records, and meeting client due-diligence and anti-money-laundering requirements where they apply | Compliance with the law |
| Sending occasional updates about tax deadlines, insights and training | Your consent (you can withdraw it at any time) |
| Keeping our website and systems secure, and improving our services | Our legitimate interests, balanced against your rights |
We do not sell your personal information, and we do not use it for automated decision-making that has legal or similar effects on you.
4. Confidentiality of client information
Client financial, tax and business information is treated as strictly confidential. Access is limited to the BeliShum staff working on your engagement. Where you give us access to your accounting, payroll or Microsoft 365 systems, we use that access only for the agreed work and ask you to remove it when the engagement ends.
5. Who we share information with
- Authorities and public bodies such as ZIMRA, NSSA, PRAZ and the Registrar of Companies, when we act on your instructions or when the law requires it.
- Service providers who help us run our business, such as website hosting, email and Microsoft 365, and accounting or analytics software. They may use the information only to provide their service to us and must keep it secure.
- Professional advisers such as lawyers or auditors, where needed.
- Others with your permission, or where required by law, court order or to protect our legal rights.
6. Transfers outside Zimbabwe
Some of our service providers, for example cloud email, hosting and software providers, may store information on servers outside Zimbabwe. We only transfer personal information outside Zimbabwe where the law allows it and adequate protection is in place.
7. How we protect your information
We use reasonable technical and organisational measures to protect personal information, including encrypted (HTTPS) connections to this website, access controls and multi-factor sign-in on our systems, and confidentiality obligations for our staff. No system is completely secure. If a breach affects your personal information, we will act promptly and notify you and the Data Protection Authority where the law requires.
8. How long we keep it
- Enquiries that do not lead to an engagement are kept for up to 12 months, then deleted.
- Client records are kept for the periods required by tax, company and other laws (generally at least six years after the end of the relevant financial year), then securely deleted or destroyed.
- Updates mailing list: until you unsubscribe or withdraw your consent.
9. Your rights
Under the Cyber and Data Protection Act you have the right to:
- be informed about how your personal information is used;
- ask for access to the personal information we hold about you;
- ask us to correct information that is inaccurate or incomplete;
- ask us to delete information we no longer have a lawful reason to keep;
- object to the use of your information, including for direct marketing;
- withdraw your consent at any time, without affecting anything we did before you withdrew it;
- complain to the Data Protection Authority.
To exercise any of these rights, email info@belishum.co.zw. We may need to confirm your identity before acting on a request, and we will respond within the time the law allows.
10. Complaints
If you are unhappy with how we have handled your information, please contact us first so we can try to put it right. You may also complain to the Data Protection Authority, the Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ): www.potraz.gov.zw.
11. Other websites and WhatsApp
This website links to other websites, such as government agencies, and to WhatsApp. Those services have their own privacy policies, and we are not responsible for how they handle your information.
12. Children
Our services are for businesses and organisations. This website is not intended for children, and we do not knowingly collect information from anyone under 18.
13. Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.
14. Contact us
BeliShum Investments, Avenues, Harare, Zimbabwe
Email: info@belishum.co.zw
Phone: +263 77 795 9661
Or use our Contact page.