Privacy Policy

Effective Date: 1 January 2025   ·   Version 1.0

Invarium Business Solutions respects your privacy and is committed to protecting the personal information you share with us. This policy explains what data we collect, how we use it, and your rights in relation to it.

01  Data We Collect

We collect personal information in the following circumstances:

• Enquiries and contact forms: name, email address, company name, and the content of your message.
• Service engagements: business contact details, billing information, and any information necessary to deliver agreed services.
• Website usage: technical data such as IP address, browser type, pages visited, and time spent on site — collected through cookies and analytics tools.
• Recruitment: where you apply for a role with us, we collect CV and application data relevant to that process.

We do not knowingly collect personal data from individuals under the age of 18.

02  How We Use Your Data

We use the information we collect to:

• Respond to enquiries and communicate with prospective and current clients.
• Deliver and manage contracted services.
• Process invoices and manage accounts.
• Improve our website and service offering through aggregated analytics.
• Comply with applicable legal and regulatory obligations.
• Evaluate applications for employment or collaboration.

03  Legal Basis for Processing

We process your personal data on the following legal grounds:

• Contractual necessity: where processing is required to fulfil a service Agreement or pre-contractual steps at your request.
• Legitimate interests: where we have a genuine business reason to process data, such as improving our services or communicating with prospects.
• Legal obligation: where we are required by law to retain or process data.
• Consent: where you have actively opted in, such as subscribing to communications from us.

04  Data Sharing

We do not share your personal data with third parties except in the following limited circumstances:

• Service providers: trusted third-party tools and platforms used to operate our business (e.g. cloud storage, email, accounting software) — all bound by confidentiality obligations.
• Legal requirements: where we are legally compelled to disclose information by a court, regulator, or law enforcement authority.
• Business transfers: in the event of a merger, acquisition, or sale of business assets, data may be transferred as part of that transaction with appropriate safeguards.

All third-party processors are required to handle your data in accordance with applicable privacy laws and our instructions.

05  Data Retention

We retain personal data only for as long as necessary for the purpose for which it was collected, or as required by law. In general:

• Client and billing data is retained for a minimum of 7 years for accounting and legal compliance purposes.
• Enquiry and communication data is retained for up to 2 years from last contact.
• Recruitment data is retained for up to 12 months following the conclusion of a recruitment process, unless a longer period is agreed.
• Website analytics data is retained in aggregated, anonymised form.

06  Security

Invarium Business Solutions takes the security of your personal data seriously. We maintain appropriate technical and organisational measures to protect data against unauthorised access, disclosure, alteration, or loss. These include:

• Encrypted, access-controlled data environments.
• Access controls limiting data to authorised personnel only.
• Regular review of our data handling and security practices.
• Staff training on data protection and confidentiality obligations.

No method of transmission over the internet is completely secure. While we take all reasonable precautions, we cannot guarantee absolute data security.

07  Cookies

Our website uses cookies to improve your browsing experience and understand how visitors use our site. Cookies may include:

• Essential cookies: required for the website to function correctly.
• Analytics cookies: used to understand visitor behaviour in aggregate (e.g. Google Analytics).
• Preference cookies: used to remember your settings and choices.

You may manage or disable cookies through your browser settings. Disabling certain cookies may affect your experience on this website.

08  Your Rights

You have the following rights in relation to your personal data:

• Access: the right to request a copy of the personal data we hold about you.
• Correction: the right to ask us to correct inaccurate or incomplete data.
• Deletion: the right to request that we delete your personal data, subject to legal retention requirements.
• Objection: the right to object to processing based on legitimate interests.
• Withdrawal of consent: where processing is based on your consent, you may withdraw it at any time.
• Portability: the right to receive your data in a structured, machine-readable format where applicable.

To exercise any of these rights, please contact us at the details below. We will respond within 30 days.

09  International Data Transfers

As a BPO company serving global clients, data may be processed or stored across multiple jurisdictions. Where personal data is transferred outside of Zimbabwe, we ensure that appropriate safeguards are in place, including contractual data protection clauses consistent with internationally recognised standards.

Clients in regulated jurisdictions (including the European Union, United Kingdom, or United States) may request details of the specific safeguards applicable to their data.

10  Contact & Complaints

If you have questions about this Privacy Policy or wish to exercise your rights, please contact our Privacy lead:

If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.