Privacy Policy | Gold Bar Consultancy

1. Introduction

Gold Bar Consultancy Services ("Company," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, process, and safeguard your information when you visit our website, use our services, or interact with us.

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our website or services.

2. Information We Collect

2.1 Information You Provide Directly

We collect information you voluntarily provide to us, including:

Contact Form Data: Name, email address, organization, phone number, and message content
Account Information: If you create an account, we collect username, password, and profile information
Communication Data: Email communications, chat messages, and feedback you send to us
Service Requests: Details about consulting services or products you request
Payment Information: Billing address and payment details (processed securely through third-party providers)

2.2 Information Collected Automatically

When you visit our website, we automatically collect certain information, including:

Device Information: Device type, operating system, browser type, and IP address
Usage Data: Pages visited, time spent on pages, links clicked, and referral source
Cookies & Similar Technologies: See our Cookie Policy for details
Location Data: General geographic location based on IP address (not precise location)
Log Files: Server logs recording your interactions with our website

2.3 Information from Third Parties

We may receive information about you from:

Google Analytics and other analytics providers
Social media platforms (if you interact with our accounts)
Referral partners and business associates
Publicly available sources for verification purposes

3. How We Use Your Information

We use the information we collect for the following purposes:

Service Delivery: To provide, maintain, and improve our consulting services and website
Communication: To respond to inquiries, send service updates, and maintain correspondence
Marketing: To send promotional content, newsletters, and service announcements (with your consent)
Analytics: To understand user behavior, optimize website performance, and improve user experience
Security: To detect, prevent, and address fraud, abuse, and security issues
Legal Compliance: To comply with laws, regulations, and legal processes
Business Operations: To manage our business operations, conduct research, and generate insights
Personalization: To customize content and recommendations based on your interests

4. Legal Basis for Processing (GDPR Compliance)

Under GDPR and similar regulations, we process your personal data based on:

Consent: Your explicit consent for marketing communications and certain data uses
Contractual Necessity: Processing necessary to provide our services and fulfill requests
Legitimate Interest: Our legitimate business interests in improving services and understanding user behavior
Legal Obligation: Compliance with applicable laws and regulations
Vital Interest: Protection of vital interests (security, fraud prevention)

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your data with:

Service Providers: Third-party vendors assisting with website hosting, analytics, email delivery, and payment processing
Business Partners: With your consent, we may share information with consulting partners to deliver services
Legal Authorities: When required by law, court order, or to protect our rights and safety
Business Transfers: In the event of merger, acquisition, or asset sale, your data may be transferred
Publicly Available Information: Aggregated, de-identified data may be used for research or analytics

6. International Data Transfers

Your information may be transferred, stored, and processed in countries other than Zimbabwe. These countries may have data protection laws that differ from your home country. When we transfer personal data internationally, we implement appropriate safeguards, including:

Standard Contractual Clauses (SCCs) approved by the European Commission
Data Processing Agreements (DPAs) with service providers
Your explicit consent for international transfers

7. Data Retention

We retain your personal information for as long as necessary to:

Provide our services and fulfill our contractual obligations
Comply with legal and regulatory requirements
Resolve disputes and enforce agreements

When data is no longer needed, we securely delete or anonymize it. Specific retention periods are:

Contact Form Data: 1 year after last interaction
Account Information: Until account deletion + 30 days
Analytics Data: 26 months (Google Analytics default)
Marketing Communications: Until opt-out

8. Your Rights and Choices

You have the following rights regarding your personal information:

8.1 GDPR Rights (EU Residents)

Right of Access: Request a copy of your personal data
Right to Rectification: Correct inaccurate or incomplete data
Right to Erasure: Request deletion of your data ("Right to be Forgotten")
Right to Restrict Processing: Limit how we process your data
Right to Data Portability: Request your data in a machine-readable format
Right to Object: Object to processing of your data for certain purposes
Right to Withdraw Consent: Withdraw consent for specific data processing at any time

8.2 CCPA Rights (California Residents)

Right to Know: Request what personal information we collect
Right to Delete: Request deletion of your information
Right to Opt-Out: Opt out of "sale" of personal information
Right to Non-Discrimination: No discrimination for exercising your rights

8.3 How to Exercise Your Rights

To exercise any of these rights, please contact us at:

Email: goldbarinvestments56@gmail.com
Phone: +263 775 195 853
Mailing Address: 3 Trent Crescent, Marlborough, Harare, Zimbabwe

We will respond to your request within 30 days (or as required by applicable law).

9. Children's Privacy

Our website and services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child without parental consent, we will take steps to delete such information promptly.

10. Security Measures

We implement comprehensive security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction:

SSL/TLS encryption for data in transit
Secure password storage and hashing algorithms
Limited access to personal data (employee access controls)
Regular security audits and vulnerability assessments
Incident response procedures

However, no security system is impenetrable. While we strive to protect your information, we cannot guarantee absolute security.

11. Third-Party Links

Our website may contain links to third-party websites and services. This Privacy Policy applies only to our website. We are not responsible for the privacy practices of external websites. Please review their privacy policies before providing personal information.

12. Do Not Track Signals

Some browsers include a "Do Not Track" feature. We respect Do Not Track signals and will not track users for targeted advertising if they have enabled this feature. However, we may still use analytics to improve our website functionality.

13. Privacy Policy Updates

We may update this Privacy Policy periodically to reflect changes in our practices or for legal and regulatory reasons. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of our website after updates constitutes acceptance of the revised policy.

14. Data Protection Officer

For privacy inquiries, data subject requests, or concerns about our privacy practices, please contact:

Email: goldbarinvestments56@gmail.com
Phone: +263 775 195 853
Address: 3 Trent Crescent, Marlborough, Harare, Zimbabwe

15. Jurisdictional Notice

This Privacy Policy is compliant with:

General Data Protection Regulation (GDPR) - EU/EEA
California Consumer Privacy Act (CCPA) - USA
Personal Information Protection and Electronic Documents Act (PIPEDA) - Canada
Zimbabwe Data Protection Act
Other applicable international data protection standards