Privacy Policy

Onilaz Professional Services ("we", "us", "our") collects information when you use our services, visit our website, or communicate with us.

Personal Information

• Full name and contact details (email, phone number, physical address)
• National identification or passport details (for company registration services)
• Business information (company name, registration numbers, tax details)
• Financial information (for accounting and payroll services)
• Educational records (for academy enrollment)
• Employment history (for career services)

Automatically Collected Information

• IP address and browser type
• Pages visited and time spent on our website
• Device information and operating system
• Referral source

We use your personal information to:

• Provide and improve our services (registration, compliance, accounting, training)
• Process your enrollment in Onilaz Academy programmes
• Communicate with you about your services, appointments, and deadlines
• Submit filings and registrations on your behalf to regulatory bodies (ZIMRA, NSSA, Companies Office, PRAZ)
• Send important service updates and compliance reminders
• Respond to your enquiries and provide customer support
• Comply with legal and regulatory obligations

Our website uses cookies and similar technologies. We operate a consent-based system — non-essential cookies are only loaded after you actively accept them.

Cookie Categories

Cookie Disclosure

You can update your cookie preferences at any time using the Cookie Preferences button in the footer or mobile menu.

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These include:

• Encrypted data transmission (SSL/TLS)
• Secure storage of physical and digital records
• Access controls limiting data access to authorised personnel
• Regular security assessments and updates
• Confidentiality agreements with all staff and contractors

We may share your information with third parties only when necessary to provide our services:

Onilaz operates under the Zimbabwe Cyber and Data Protection Act (CDPA) [Chapter 12:07], enacted in December 2021. We voluntarily align our practices with international standards, including:

• Zimbabwe Cyber and Data Protection Act (CDPA) [Chapter 12:07], 2021
• General Data Protection Regulation (GDPR) — for EU/UK data subjects
• Protection of Personal Information Act (POPIA) — for South African data subjects

Your Rights

You have the right to:

• Request access to your personal information
• Request correction of inaccurate information
• Request deletion of your information (subject to legal retention requirements)
• Object to processing of your information
• Withdraw consent at any time
• Data portability — receive a copy of your data in a machine-readable format (applicable to EU/UK data subjects under GDPR Article 20)

We retain your personal information for as long as necessary to provide our services and comply with legal obligations. Retention periods by category:

To deliver our services, we use third-party providers that may process your data outside Zimbabwe. These include:

All third-party providers are required to maintain appropriate safeguards (Standard Contractual Clauses or equivalent) for international transfers under GDPR and the Zimbabwe CDPA.

With your consent (given at time of enquiry or enrolment), we may contact you with relevant information including:

• Service updates, new offerings, and promotions via email
• Educational content and exam tips via WhatsApp broadcast
• Appointment reminders and deadline alerts via SMS

You may opt out at any time by replying STOP to any message, clicking the unsubscribe link in any email, or emailing info@onilaz.co.zw. Opting out of marketing does not affect transactional service communications.

In the event of a personal data breach likely to risk your rights and freedoms, we will notify you without undue delay.

Your notification will include: the nature of the breach, the categories of data affected, and the steps we are taking to address it.

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us: