Data Protection Notice

Prevsol Digital processes personal information both as a data controller, in respect of our own clients and enquiries, and as a data processor, where we host or manage systems on behalf of client organisations.

We have appointed a Data Protection Officer, maintain Records of Processing Activities, and operate a documented breach response procedure.

Where we host your website, manage your systems or provide DPO services, you remain the data controller for the personal information involved, and we act on your documented instructions.

Our standard Data Processing Agreement sets out the subject matter, duration, nature and purpose of processing, the categories of data and data subjects, and the security measures we apply. It is available on request and forms part of your service agreement.

Encryption in transit for all services, and at rest where the service supports it.

Role-based access control, with access granted on a need-to-know basis and reviewed periodically.

Daily backups with tested restore procedures.

Monitoring and logging, with alerting on anomalous activity.

Privacy awareness training for all staff with access to personal information.

If we become aware of a personal data breach affecting information we process on your behalf, we will notify you without undue delay, with the information you need to meet your own notification obligations.

Where we are the controller, we will notify the supervisory authority and affected individuals as required by the Act.

We use a limited number of sub-processors for infrastructure, payment processing and domain registration. A current list is available on request, and we will give you notice of any intended change so you can object.

Data protection queries should be directed to our Data Protection Officer at sales@prevsoldigital.com or +263 78 640 6989. You also have the right to complain to POTRAZ as the supervisory authority.