Effective Date: August 11, 2025
Last Updated: August 11, 2025
The Besanamail (“we,” “us,” “our”) operates http://www.thebesanamail.com (the “Website”). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Website or services.
1. Information We Collect
- Personal Data: When you register, place an order, or contact us, we may collect:
- Name
- Email address
- Billing/shipping address
- Phone number
- Payment information (processed securely by our third-party payment gateways; we do not store full credit card numbers)
- Account credentials
- Automatically Collected Data: When you visit our Website, we may collect:
- IP address
- Browser type and version
- Device type and operating system
- Referring URLs
- Pages viewed, time spent, and navigation patterns
- Cookies and usage data (see Section 5)
- Data from Third Parties: We may receive information from:
- Payment processors (transaction status)
- Social media platforms (if you interact with us or log in via social media)
- Advertising partners (e.g., Google AdSense – see Section 6)
2. How We Use Your Information
We use your information for the following purposes:
- To provide, operate, and maintain our Website and Services
- To process and fulfill your orders, including payment processing and delivery
- To manage your account and provide customer support
- To send you administrative information (order confirmations, policy updates, security alerts)
- To send marketing and promotional communications (only with your explicit consent – you can opt-out anytime)
- To personalize your experience on our Website
- To analyze Website usage, trends, and performance to improve our Services
- To prevent fraud, enhance security, and protect our rights
- To comply with legal obligations
- To display relevant advertising (see Section 6)
3. Legal Basis for Processing (GDPR/International Compliance)
We process your personal data based on:
- Your Consent: For sending marketing communications or using certain non-essential cookies.
- Contractual Necessity: To fulfill orders and provide services you request.
- Legitimate Interests: For Website analytics, security, fraud prevention, and improving our Services (balanced against your rights).
- Legal Compliance: To meet regulatory or legal obligations.
4. How We Share Your Information
We may share your information with:
- Service Providers: Trusted third parties who assist us (payment processing, order fulfillment, email delivery, hosting, analytics, marketing). They access data only to perform tasks on our behalf under strict confidentiality agreements.
- Advertising Partners: Including Google AdSense, to serve personalized ads. These partners use cookies and similar technologies to collect information about your activity across different websites (see Sections 5 & 6). We do not sell your personal information.
- Legal Requirements: If required by law, subpoena, court order, or to protect our rights, safety, or property, or that of others.
- Business Transfers: In connection with a merger, acquisition, restructuring, or sale of assets (you will be notified via email and/or Website notice).
5. Cookies and Tracking Technologies
- What We Use: We use Cookies, web beacons, pixels, and similar technologies.
- Why We Use Them:
- Essential: Necessary for core functionality (login, shopping cart, security).
- Functionality: Enhance performance and remember preferences.
- Analytics: Understand how users interact with our Website (e.g., Google Analytics).
- Advertising: To display relevant ads, measure ad effectiveness, and personalize content (e.g., Google AdSense). This includes interest-based advertising.
- Third-Party Cookies: Advertising partners (like Google) use cookies to collect data about your visits to our site and others to show you ads. We do not control these cookies.
- Your Control: You can manage cookie preferences via your browser settings
- We use cookies (especially advertising/analytics) upon your first visit, complying with GDPR, CCPA, and other regulations.
6. Advertising (Google AdSense)
- We use Google AdSense to display ads on our Website.
- Google uses cookies and device identifiers to serve personalized ads based on your visits to our site and other sites on the internet.
- Google collects data according to its own Privacy Policy: https://policies.google.com/privacy
- You can opt-out of personalized advertising by visiting Google’s Ad Settings or using the opt-out mechanisms listed in Section 5.
7. Data Security
We implement reasonable technical and organizational security measures (e.g., SSL encryption, secure servers, access controls) to protect your personal data from unauthorized access, disclosure, alteration, or destruction. However, no internet transmission or electronic storage is 100% secure. We cannot guarantee absolute security.
8. International Data Transfers
Your information may be transferred to, stored, and processed in countries other than Zimbabwe (e.g., where our service providers operate), which may have different data protection laws. We ensure appropriate safeguards are in place (e.g., contractual clauses like Standard Contractual Clauses – SCCs) for such transfers.
9. Data Retention
We retain your personal data only as long as necessary for the purposes outlined in this policy, including legal, accounting, or reporting requirements. Retention periods vary based on data type and purpose (e.g., order data is kept for tax/accounting purposes for 7 years; inactive account data may be deleted after 2 years).
10. Your Data Protection Rights
Depending on your location (e.g., EEA, UK, California), you may have rights under data protection laws, including:
- Access: Request a copy of your personal data.
- Rectification: Request correction of inaccurate data.
- Erasure (“Right to be Forgotten”): Request deletion of your data under certain conditions.
- Restriction: Request restriction of processing under certain conditions.
- Data Portability: Request transfer of your data to another service provider.
- Objection: Object to processing based on legitimate interests or for direct marketing.
- Withdraw Consent: Withdraw consent at any time (where processing relies on consent).
- Opt-Out of Sale/Sharing (CCPA/CPRA): We do not “sell” personal information as traditionally defined, but you can opt-out of sharing for targeted advertising (see Section 5).
- Non-Discrimination (CCPA/CPRA): We will not discriminate against you for exercising your rights.
To exercise these rights, please contact us at Info@thebesanamail.com. We may need to verify your identity before responding. We aim to respond within one month.
11. Children’s Privacy
Our Website and Services are not intended for individuals under the age of 16 (“Children”). We do not knowingly collect personal data from Children. If you become aware a Child has provided us with data, please contact us. We will take steps to delete such information.
12. Links to Other Websites
Our Website may contain links to third-party sites not operated by us. We have no control over their content or privacy practices. We strongly advise you to review their Privacy Policies.
13. Changes to This Privacy Policy
We may update this Privacy Policy periodically. We will notify you of material changes via email (if available) and/or a prominent notice on our Website at least 3 days before the changes take effect. The “Effective Date” and “Last Updated” date at the top will indicate the latest version. Your continued use after changes signifies acceptance.
14. Contact Us
If you have questions, concerns, or wish to exercise your data rights, please contact us:
- Email: Info@thebesanamail.com
15. Governing Law and Jurisdiction
This Privacy Policy shall be governed by the laws of Zimbabwe. Any disputes shall be subject to the jurisdiction of the courts of Zimbabwe, without prejudice to your rights under applicable data protection laws
