Last updated: 2 November 2026
1. Introduction
Madzima & Company Law Chambers (“the firm”, “we”, “us”) respects your privacy. Confidentiality is the foundation of the relationship between a legal practitioner and a client, and we apply the same care to every piece of personal information entrusted to us, whether by a client, a prospective client or a visitor to our website.
This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and the rights you have under the Cyber and Data Protection Act [Chapter 12:07] and its regulations. It applies to information collected through our website madzimalaw.com, our WhatsApp Business line, our social media pages, email, telephone and our offices.
2. Who We Are
Madzima & Company Law Chambers is a firm of registered legal practitioners and a full member of the Law Society of Zimbabwe. For the purposes of the Act, the firm is the data controller of the personal information described in this Policy.
Contact details
- Address: 2nd Floor, South Wing, Silundika House, 22 George Silundika Avenue, Harare, Zimbabwe
- Telephone: +263 242 706725
- Email: admin@madzimalaw.com
- Data Protection Officer: Mr Amos Jakarasi, amos@madzimalaw.com
3. The Information We Collect
Information you give us
- When you contact us through the website form, WhatsApp, email, telephone or social media: your name, telephone number, email address and the content of your message.
- When you become a client: identification details (such as your national ID or passport number), postal and residential address, contact details, and the information about your matter needed to advise and represent you. Depending on the matter, this may include sensitive information, such as health information, family circumstances, financial information or details of criminal proceedings.
- When you comment on an article on our website: your name, email address and comment.
- When you apply to work with us: your CV and the information it contains.
Information collected automatically
When you visit our website, our hosting provider and website tools may record technical information such as your IP address, browser type, the pages you visit and the time of your visit. Some of this information is collected through cookies (see section 8).
Information from others
In the course of a matter we may receive personal information about you from courts, opposing parties, other legal practitioners, public registries, and the persons who referred you to us.
4. How We Use Your Information, and Why
We process personal information only where we have a lawful basis for doing so.
| Purpose | Lawful basis |
|---|---|
| Responding to your enquiry and arranging a consultation | Your consent, and steps taken at your request before engaging us |
| Advising and representing you, and managing your matter | Performance of our mandate (contract) with you |
| Verifying identity, keeping records and meeting regulatory, professional and statutory obligations | Compliance with legal obligations |
| Billing, collecting fees and keeping accounts | Performance of our mandate, and legal obligations |
| Sending legal updates or articles you have asked to receive | Your consent, which you may withdraw at any time |
| Running, securing and improving our website | Our legitimate interest in a safe, functional website |
| Publishing comments you choose to post on our articles | Your consent |
Sensitive information is processed only where it is necessary for your matter, with your express consent or as otherwise permitted by law.
We do not sell personal information. We do not use it for automated decision-making that produces legal effects concerning you.
5. Confidentiality and Legal Professional Privilege
Information you share with us for the purpose of obtaining legal advice is confidential and, where applicable, protected by legal professional privilege. Our legal practitioners and staff are bound by the professional duties of confidentiality that govern legal practitioners in Zimbabwe, and we will not disclose client information except as described below, with your instructions, or where the law requires it.
Please do not post details of your own legal matter in comments on our website or on our social media pages. Those spaces are public. Contact us privately instead.
6. Who We Share Information With
We share personal information only where necessary, and only with:
- courts, tribunals and arbitrators, and the legal practitioners of other parties, in the conduct of your matter;
- advocates, experts, correspondents and other professionals we instruct on your behalf;
- service providers who support our practice, such as our website host, email and IT providers, and backup services, each bound to keep the information confidential and secure;
- regulators and authorities, including the Law Society of Zimbabwe, where we are legally required to do so; and
- anyone else with your consent.
7. Transfers Outside Zimbabwe
Some of the services we use to run our website and communicate with you, including our website host, WordPress plugins, WhatsApp (Meta) and email services, may store or process information on servers outside Zimbabwe. Where personal information is transferred outside Zimbabwe, we take reasonable steps to ensure that it receives a level of protection consistent with the Cyber and Data Protection Act.
8. Cookies and Website Analytics
Our website uses cookies, small files stored on your device, to make the site work, to remember your preferences and to understand how visitors use it. Tools that may set cookies include our website statistics, the WhatsApp chat button, embedded social media content and our comment system.
You can block or delete cookies in your browser settings. Some parts of the website may not work as intended if you do.
9. How Long We Keep Information
- Enquiries that do not become matters: for up to [12 months], then deleted.
- Client files and accounting records: for as long as the matter is active, and thereafter for the period required by law and by the professional rules governing legal practitioners.
- Website comments: until you ask us to remove them or the article is taken down.
- Technical website data: for up to [12 months].
When information is no longer needed, it is securely deleted or destroyed.
10. How We Protect Your Information
We take appropriate technical and organisational measures to protect personal information against loss, misuse and unauthorised access, including access controls, password protection, regular backups and staff confidentiality obligations.
If a breach of personal data occurs, we will notify the Data Protection Authority, and where required the persons affected, within the time limits set by law.
No method of transmission over the internet is entirely secure. Please do not send highly sensitive documents through social media; ask us for a secure method instead.
11. Your Rights
Subject to the law and to our professional obligations, you have the right to:
- be informed about how your personal information is used, which is the purpose of this Policy;
- access the personal information we hold about you;
- ask us to correct information that is inaccurate or incomplete;
- ask us to delete information that we no longer have a lawful reason to keep;
- object to the processing of your information, including for direct marketing;
- withdraw your consent at any time, where we rely on consent; and
- lodge a complaint with the Data Protection Authority.
Some rights may be limited where we are required to keep information by law, or where it is protected by legal professional privilege or relates to ongoing proceedings.
To exercise any of these rights, contact our Data Protection Officer using the details in section 2. We may ask you to verify your identity before acting on your request.
12. Complaints
If you are concerned about how we have handled your personal information, please contact us first so that we can try to resolve it. You may also complain to the Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ), which is the Data Protection Authority under the Cyber and Data Protection Act.
13. Children
Our website is not directed at children. Where we act in matters involving minors, we process their information only as necessary for the matter, with the consent of a parent or guardian where required.
14. Links to Other Websites
Our website contains links to other sites, such as Facebook, Instagram and WhatsApp. We are not responsible for the privacy practices of those sites and encourage you to read their policies.
15. Changes to This Policy
We may update this Policy from time to time. The current version will always be available on this page, with the date of the latest update shown at the top.