Privacy Notice
Last updated: 28 July 2026
Who is responsible for your data
The University of Zimbabwe ("the University", "we") is the data controller for the personal information held in this alumni portal. Our registered address is 630 Churchill Avenue, Mount Pleasant, Harare, Zimbabwe.
Questions about your data, or requests to exercise the rights described below, should go to alumni@uz.ac.zw. [UNIVERSITY OF ZIMBABWE TO CONFIRM] the University must appoint and name a Data Protection Officer, as required under the Data Protection Act [Chapter 11:12], and publish their contact details here.
What we collect
When you register and use your account, we hold:
- Identity and contact details — name, email address, telephone number, date of birth, gender, city and country, and a profile photograph if you upload one.
- National identification number, where you provide it, used to confirm you are the graduate you say you are.
- Academic records — student number, programme, faculty, start and graduation years, degree classification, and any further qualifications you add.
- Employment and business information — employers, job titles, sector, industry, country of work, and any business you tell us you run.
- Your activity in the portal — event attendance responses, survey responses, job applications and any curriculum vitae you upload, connection requests, and success stories you submit.
- Giving records — the amount, currency, method and status of each gift, and any proof-of-payment document you upload.
- Technical records — the IP address and time of actions that change data, kept as an audit trail.
Why we hold it, and on what basis
| Purpose | Basis |
|---|---|
| Confirming you are a University of Zimbabwe graduate and running your account | Performance of our agreement with you |
| Reporting graduate outcomes to the Zimbabwe Council for Higher Education (ZIMCHE) and other regulators | Legal obligation / public interest |
| Alumni communications, events and fundraising | Legitimate interests of the University, and your consent for marketing email |
| Processing gifts and event ticket payments, and issuing receipts | Performance of our agreement with you, and legal obligation for financial records |
| Keeping the service secure and accountable | Legitimate interests |
Statistics published in reports are aggregated — they describe groups, not identifiable individuals.
Who sees your information
- Other alumni see your name, faculty, programme and graduation year in the directory. Your contact details are never shown in the directory — they are visible only to alumni you have accepted a connection with, and only for the fields you have switched on in your settings.
- University staff with an administrative role see the records their role permits. Access is tiered, and staff without an administrative tier have no access to personal records.
- Employers who post a job see only the applications submitted to that job, including any curriculum vitae you attached to it.
- Event organisers see the full attendee list. Other alumni see only attendees who have chosen to be listed — you can turn this off in your settings.
- Payment processing is carried out by Paynow (Webdev (Private) Limited, Zimbabwe). Your card details are entered on Paynow's own pages and are never seen by or stored on this system.
- Regulators receive aggregated statistics, not individual records.
We do not sell your personal information, and we do not use it for advertising.
How long we keep it
Alumni records are retained for as long as you hold an account, and afterwards where we must keep them — financial records in particular are retained for the period required by Zimbabwean tax and audit law. Routine activity logs are deleted after 180 days. [UNIVERSITY OF ZIMBABWE TO CONFIRM] the retention period for alumni records after an account is closed.
Your rights
Under the Data Protection Act [Chapter 11:12] you may ask us to:
- give you a copy of the information we hold about you;
- correct anything that is wrong — most of it you can edit yourself in your profile;
- delete your account and the information in it, except where we must keep it by law;
- stop sending you alumni communications — you can switch these off in your settings at any time;
- object to a particular use of your information.
Write to alumni@uz.ac.zw. We will respond within 30 days. If you are unhappy with our response you may complain to the Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ), which supervises data protection.
Security
Traffic is encrypted in transit. Passwords are stored hashed and are not readable by anyone, including University staff. Administrative access is tiered and changes to records are logged. No system is perfectly secure; if a breach occurs that puts you at risk, we will tell you and notify the regulator.
Cookies
We use only what the site needs to work: a session cookie that keeps you signed in, and a security cookie that protects forms against cross-site attacks. There are no advertising or third-party tracking cookies. Fonts and stylesheets are loaded from Google Fonts and jsDelivr, which will see your IP address as part of serving those files.
Changes
If we change this notice materially we will tell account holders by email before the change takes effect.
See also our Terms of Use.