Privacy Policy

1. Introduction

Modern Digital Labs (“MDL”, “we”, “our”, or “us”) respects your privacy and is committed to protecting the personal information you share with us.

This Privacy Policy explains how we collect, use, store, protect, and share information when you interact with us through our website, WhatsApp Business channels, and related digital communication platforms.

Our website mainly works as a landing page that directs customers to communicate with us through WhatsApp. Most service discussions, lead generation, ordering, consultation, document sharing, project communication, and service fulfilment happen directly inside WhatsApp chat threads.

By using our website, clicking our WhatsApp links, contacting us through WhatsApp, or requesting our services, you agree to the practices described in this Privacy Policy.

2. Information We Collect

We collect information in two main ways: automatically through our website and directly from you through WhatsApp or other communication channels.

2.1 Automatically Collected Website Data

When you visit our website, our systems or hosting provider may automatically collect basic technical information, including:

• IP address
• Browser type and version
• Device type
• Operating system
• Pages visited
• Date and time of access
• Basic server log information
• General website usage metrics

This information helps us maintain website security, detect technical issues, understand visitor activity, and improve website performance.

2.2 Information You Provide Through WhatsApp Chat

Because most of our work is handled through WhatsApp Business, we may collect personal and business information that you voluntarily send to us in chat. This may include:

• Full name
• Phone number
• Email address
• Business name
• Physical address
• Billing details
• Project requirements
• Domain name preferences
• Hosting requirements
• Login credentials that you choose to share with us
• Documents, images, files, screenshots, or other attachments
• Technical specifications for applications, websites, or systems
• Business ideas, branding material, and development assets

2.3 Information Required for Domain Registration

When you request domain registration services, we may need to collect and process information required by official domain registrars or registry operators. This may include:

• Full legal name
• Physical address
• Email address
• Phone number
• Organisation or business name
• Administrative and technical contact details

Some domain registration information may be required for WHOIS, registry, verification, ownership, or compliance purposes, depending on the domain extension and registrar rules.

2.4 Information Required for Hosting Services

When you request hosting setup or hosting acquisition, we may collect information needed to create, configure, secure, or manage hosting environments. This may include:

• Hosting account details
• Domain information
• Server configuration requirements
• Email hosting requirements
• Database details
• Login credentials
• Security settings
• Website files or application files

2.5 Information Required for Application Development

When you request website, software, or application development services, we may collect project-related information such as:

• Business requirements
• Technical specifications
• User interface ideas
• Branding assets
• Content
• Images
• Design references
• Database structures
• API credentials
• Testing information
• Deployment requirements

Some of this information may be confidential or commercially sensitive. We treat such information with care and only use it for the purpose of providing the requested service.

3. How We Use Your Information

We use your information only for legitimate business and service delivery purposes, including:

• Responding to enquiries sent through WhatsApp or our website
• Preparing quotations, invoices, and service proposals
• Registering domain names through authorised domain registrars
• Submitting required domain ownership and contact information
• Acquiring, setting up, and configuring hosting services
• Creating and managing hosting accounts
• Developing websites, applications, systems, and digital tools
• Communicating project updates
• Providing technical support
• Troubleshooting service issues
• Securing websites, applications, hosting accounts, and server environments
• Maintaining internal business records
• Preventing fraud, abuse, unauthorised access, or misuse of our services
• Complying with legal, regulatory, registrar, hosting provider, or platform requirements

We do not use your personal information for unrelated purposes without your permission.

4. Payment Information

Payments may be handled through external billing links, bank transfer instructions, mobile money instructions, or other payment methods communicated to you directly through WhatsApp or official business channels.

We do not intentionally collect or store full payment card details inside WhatsApp chats. If a third-party payment provider is used, that provider is responsible for processing payment information according to its own privacy policy and security standards.

5. Third-Party Data Sharing

We do not sell your personal information.

However, in order to provide certain services, we may need to share relevant information with trusted third parties, including:

• Domain registrars
• Domain registry operators
• Cloud hosting providers
• Server infrastructure providers
• Email hosting providers
• Payment processors
• Security service providers
• Technical contractors or developers assisting with your project
• Legal or regulatory authorities where required by law

For example, domain registration often requires us to submit your name, email address, phone number, physical address, and administrative contact information to a registrar or registry. Hosting setup may require us to create accounts or configure services with third-party hosting providers.

We only share the information reasonably necessary to complete the requested service.

6. WhatsApp and Chat-Based Data Security

Most client communication with MDL takes place through WhatsApp Business.

WhatsApp provides encryption for message transmission between users. However, once messages, files, credentials, or documents are received on our business devices or systems, we are responsible for handling them securely.

To protect your data after we receive it, we use reasonable internal security measures, including:

• Limiting access to client information
• Using password protection on business devices where practical
• Avoiding unnecessary forwarding of client files or credentials
• Storing sensitive information only where needed for service delivery
• Deleting unnecessary project files when they are no longer required
• Taking reasonable steps to prevent unauthorised access, loss, misuse, or disclosure

You should avoid sending highly sensitive information through chat unless it is necessary for the service requested.

7. Login Credentials and Access Details

For some hosting, website, or application services, you may choose to provide login credentials, API keys, server access, domain registrar access, or administrative account details.

We use such credentials only for the purpose of completing the requested work. You remain responsible for changing passwords, rotating keys, and securing accounts after handover or project completion.

Where possible, we recommend creating temporary access accounts rather than sharing permanent master passwords.

8. Data Retention

We keep personal information only for as long as reasonably necessary to:

• Provide the requested services
• Maintain business and project records
• Resolve disputes
• Provide after-service support
• Comply with legal, tax, accounting, registrar, hosting, or contractual requirements
• Protect our rights and prevent misuse of our services

WhatsApp chats, project files, invoices, and service records may be retained for operational and legal record-keeping purposes unless you request deletion and we are legally or contractually able to comply.

9. User Rights

Depending on your location and applicable privacy laws, you may have the right to:

• Request access to the personal information we hold about you
• Request correction of inaccurate or outdated information
• Request deletion of your personal data or WhatsApp chat records
• Request restriction of certain processing activities
• Object to certain uses of your information
• Request information about how your data has been shared
• Withdraw consent where processing is based on consent

To exercise these rights, contact us through our official WhatsApp Business channel or by email.

We may need to verify your identity before processing your request. Some information may not be deleted immediately where we are required to keep it for legal, tax, registrar, hosting, security, or dispute-resolution reasons.

10. Data Deletion Requests

You may request that we delete your personal information, project files, or WhatsApp chat records.

Where possible, we will delete the requested information from our active systems and business devices. However, deletion may be limited where information is required for:

• Domain ownership records
• Registrar compliance
• Hosting account administration
• Tax or accounting records
• Legal obligations
• Security logs
• Ongoing disputes
• Completed transaction records

If deletion is not fully possible, we will explain the reason where appropriate.

11. International Data Transfers

Some third-party services we use, such as domain registrars, hosting providers, payment processors, or cloud infrastructure providers, may operate outside Zimbabwe.

By requesting services from us, you understand that your information may be processed or stored in other countries where such providers operate.

We take reasonable steps to work with reputable service providers that maintain appropriate security and privacy practices.

12. Confidential Business Information

During application development, website development, hosting setup, or consulting, you may share confidential business ideas, project details, designs, technical information, or commercial plans.

We will not intentionally disclose your confidential project information to unrelated third parties unless:

• It is necessary to provide the requested service
• You give us permission
• Disclosure is required by law
• Disclosure is required to protect our rights, systems, or users

13. Children’s Privacy

Our services are intended for businesses, organisations, and individuals capable of entering into service agreements. We do not knowingly collect personal information from children for marketing or service fulfilment purposes.

If we become aware that we have collected personal information from a child without appropriate permission, we will take reasonable steps to delete it.

14. Cookies and Tracking

Our website may use basic cookies, analytics tools, or server logs to improve functionality, monitor performance, and understand visitor activity.

You may disable cookies in your browser settings, although some website features may not function properly.

15. Security Disclaimer

We take reasonable steps to protect personal information, but no website, chat platform, server, internet transmission, or electronic storage method is completely secure.

You are responsible for ensuring that the information you send to us is accurate and that any credentials or administrative details shared with us are changed or secured after service completion.

16. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, platform rules, or business practices.

The latest version will be made available through our website or official communication channels.

17. Contact Us

For privacy questions, access requests, correction requests, deletion requests, or complaints, contact: