Last updated: 27 May 2026

Orbit Revolution Tech ("we", "us", or "our") is a digital agency providing web design, development, SEO, and marketing services. We operate in and are subject to the laws of the **Republic of Zimbabwe** and the **Republic of South Africa**.

This Privacy Policy explains how we collect, use, store, and protect your personal information in compliance with:

• The **Protection of Personal Information Act, 2013 (POPIA)** of South Africa.
• The **Cyber and Data Protection Act [Chapter 12:07]** of Zimbabwe.

1. Personal Information We Collect

We process personal information that you provide to us directly or that we collect automatically through your interaction with our website and backend systems. This includes:

• Contact Form Submissions: Names, email addresses, phone numbers, and any company information or messages you submit.
• Newsletter & Mailing Lists: Email addresses, names, and mailing segment tags (e.g., AI content list, web development list) used to distribute relevant updates.
• Billing & Invoice Records: Client names, physical/postal addresses, VAT/tax registration details, transaction history, and custom invoice metadata.
• WhatsApp Lead Forms: Cell phone numbers and names captured when initiating direct communication with our sales team.
• Transactional Tokens: We process tokens generated by local and international payment processors (such as Paynow in Zimbabwe or PayFast/Yoco/Stripe/PayPal in South Africa). We do not store raw card numbers or bank credentials on our servers.
• Usage & Analytics Data: IP addresses, browser agents, click tracking redirects, email open pixels, and interaction statistics.

2. Purpose and Lawful Grounds for Processing

We process your personal information under the following lawful grounds and for these specific purposes:

• Contract Performance: To render services, issue invoices, handle project updates, and process payment transactions for agency contracts.
• Consent: When you subscribe to our newsletters, join direct marketing segments, or request communication via WhatsApp.
• Legitimate Interest: To maintain secure infrastructure, prevent fraudulent transactions, analyze click tracking data, and optimize website performance.
• Legal Obligation: To comply with financial bookkeeping laws, tax filing mandates, and exchange control guidelines issued by the Reserve Bank of Zimbabwe (RBZ) and the South African Revenue Service (SARS).

3. Data Retention and Security

We implement industry-standard administrative, physical, and technical safeguards (including SSL encryption, network firewalls, and restricted administrative dashboards) to protect personal data from accidental loss, unauthorized access, disclosure, or alteration.

We retain billing data for a minimum of 5 years to satisfy statutory bookkeeping requirements in South Africa and Zimbabwe. Subscription and lead contact data is stored until you unsubscribe or request data removal.

4. Cross-Border Data Transfers

To host our Next.js application, send newsletter mailers, and manage database clusters, personal data may be stored or processed outside the borders of South Africa or Zimbabwe (typically on secure cloud infrastructure located in Europe, South Africa, or the USA). We ensure our cloud vendors provide privacy safeguards that align with the requirements of POPIA and the Cyber and Data Protection Act.

5. Your Statutory Rights

Depending on your location, you hold the following rights under POPIA (South Africa) and the Cyber and Data Protection Act (Zimbabwe):

• Right to Access: Request a copy of the personal information we hold about you.
• Right to Correction: Request that we correct inaccurate, incomplete, or out-of-date records.
• Right to Deletion (Objection): Request the erasure of your personal data or object to marketing/processing activities.
• Right to Withdraw Consent: Unsubscribe from mailing lists at any time using the link in our footer.
• Right to Complain: Lodging complaints with the respective authorities:
  • In South Africa: **The Information Regulator (South Africa)** (inforeg@justice.gov.za).
  • In Zimbabwe: **The Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ)** as the designated Data Protection Authority.

6. Contact Information

For queries related to your data privacy, to request data removal, or to contact our designated Information Officer, please reach out to us at:
Email: admin@orbitrevolution.tech
Office (ZW): Office 8, Bata Building, Victoria Falls, Zimbabwe
Office (ZA): 320 Dr Pixley Kaseme St, 6th Floor Office 6T, Durban, South Africa