Privacy policy.

Last updated: 20 October 2026 · Zimbabwe

1. Who is responsible for your information

Adrenalin Advertising & Design Consultants (Pvt) Ltd, registration number 10637/98, is the data controller for personal information it processes through this website and related Zimbabwe office enquiries. Our address is 57 Van Praagh Avenue, Milton Park, Harare, Zimbabwe. Address privacy requests to The Data Protection Officer / Privacy Contact at info@adrenalin.agency.

This notice concerns the Zimbabwe company under Zimbabwe’s Cyber and Data Protection Act and applicable regulations. Our South African company has a separate notice. Selecting a country helps you find the relevant office; it does not determine which laws apply or restrict your rights under any applicable law. Separate notices may apply to client work, recruitment, productions and independent Mina Lawe services.

2. Information, sources and purposes

Website operation. Afrihost hosts this website in South Africa. Ordinary technical requests may contain IP addresses, requested pages, timestamps, browser and device information, referring pages and error records. These support delivery, troubleshooting, security and the prevention of misuse.

Enquiries. When you contact us, we receive your name, email address, organisation and project details if provided, your message and subsequent correspondence. We obtain these directly from you or an authorised representative. We use them to respond, understand your requirements and take requested steps towards a contract. Depending on the processing, the lawful ground may be consent, contractual necessity, compliance with law or a legitimate interest recognised by the Act, subject to your rights. We may also need records to establish, exercise or defend legal claims.

Online enquiries. The form sends your name, email, selected office, enquiry area, optional production project and message to info@adrenalin.agency through Google Workspace. Enquiries and subsequent correspondence are held in our company mailbox. We use your address to reply and do not subscribe you to marketing merely because you enquire.

Please do not include identity documents, health or financial information, children’s information or other sensitive data in a general enquiry. We do not intentionally collect children’s personal information through this general business website.

3. Providing information is voluntary

No law requires you to send a general enquiry. You can browse without contacting us. If you choose to enquire, we need enough context and a contact address to respond; without these we may be unable to assist. Necessary technical requests occur when you browse. Choosing not to load a video does not prevent you from reading the site.

4. Country selection, cookies and video players

The legal pages can use approximate IP-based country information from a local country-mapping database or the hosting server, to suggest South Africa or Zimbabwe. We do not request precise device location or send your IP address to a separate geolocation service for this feature. You can switch countries at any time. An explicit choice is remembered in this browser tab’s session storage until the session ends. Where detection is unavailable, the country links remain available.

The website has no analytics or advertising pixels of its own. A necessary, secure session cookie protects the enquiry form. Temporary hashed network identifiers and counts limit abuse; records expire from active use after one hour and are removed during subsequent submissions. Enquiry contents are not saved in a separate website database. Fonts and artwork are served with the site. Hosting and security services process connection information. Videos use Vimeo: its player loads only when you choose Play. This connects your browser to Vimeo, which may receive your IP address, device/browser information, referring page and playback activity, and use cookies or similar technology. See Vimeo’s privacy policy. Your browser may separately retain history, cache and autofill data.

5. Recipients and service providers

Information may be handled by authorised Adrenalin personnel who need it for the stated purposes, hosting, IT, security and email service providers, and professional advisers where necessary. Disclosure may also be required by law, a competent authority or the exercise or defence of legal rights. We do not sell enquiry information or treat an enquiry as agreement to receive marketing. Where a provider processes data on our behalf, the Act requires appropriate confidentiality and security arrangements, including a written contract or other legal instrument.

6. Processing outside Zimbabwe

Website hosting in South Africa and Vimeo’s international infrastructure involve processing outside Zimbabwe. Email and collaboration arrangements may also involve overseas processing. A transfer for which we are responsible must meet sections 28 and 29 of the Act and applicable Data Protection Authority requirements. These address adequate protection and permitted exceptions, including specified contractual grounds or unambiguous consent where applicable. We do not treat use of this policy or a country selection as blanket consent to overseas transfers. Contact our privacy contact for information about the recipients and safeguards relevant to your information.

7. Retention

Ordinary enquiries are retained for 12 months after the last contact, unless a client relationship, contract, legal obligation or legitimate need to resolve a dispute justifies longer. We retain identifiable information no longer than necessary for its lawful purposes, then delete, destroy or de-identify it. Technical logs and backups have service-specific retention cycles subject to those limits; residual backup copies remain restricted until replaced.

8. Security and incidents

The Act requires appropriate technical and organisational measures against loss, destruction, alteration, unauthorised access and other unlawful processing, taking account of the data and risks. No internet service offers absolute security. We will assess incidents and comply with applicable notification obligations. Section 19 requires notification to the Data Protection Authority within 24 hours of a security breach affecting data processed by the controller. We will also communicate with affected people where applicable law or the Authority requires it.

9. Your rights and complaints

Subject to applicable conditions and exceptions, you may be informed about the use of your information, request access, object to processing, and request correction or deletion of false or misleading information. Where processing relies on consent, you may withdraw it without invalidating earlier lawful processing. You may object to use of your information for direct marketing free of charge. This website does not make decisions with legal or substantial effects about you solely by automated processing.

Write to info@adrenalin.agency, addressed to The Data Protection Officer / Privacy Contact. We may request proportionate verification of identity or authority. We will explain the applicable process and any lawful limitation.

You may complain directly to POTRAZ, Zimbabwe’s Data Protection Authority. Consult POTRAZ’s official website for its current complaint channels. You do not need to complete an internal complaint before approaching the Authority. We also welcome the opportunity to resolve concerns.

10. Changes and applicable notices

We will update this notice when our processing changes. An update does not authorise an incompatible new purpose or substitute for consent where required. Our South African notice remains available. The responsible company and applicable law depend on the actual processing and relationship, not simply your browsing location.