Privacy Policy

This Privacy Policy explains how Pavwell Hosting ("Pavwell", "we", "us", or "our") processes personal information when you visit my.pavwell.co.zw, create an account, buy or manage a service, contact support, or use a Pavwell hosted website or mailbox.

For privacy questions, requests, or complaints, contact privacy@techinn.co.zw. General support is available at support@my.pavwell.co.zw.

Account and contact information: name, email address, phone number, business name, password credentials in protected form, OTP records, notification choices, and account security events.

Billing and order information: services selected, domain names, invoice and payment references, currency, amount, payment status, renewal periods, billing and postal addresses, and limited payment-provider response data. We do not store full card numbers or mobile-money PINs.

Domain and hosting information: registrant details required for a domain, nameservers, DNS records, Cloudflare zone details, hosting username, website and mailbox configuration, storage usage, service status, preview URLs, and provisioning logs.

Support and communications: messages, attachments, requests, feedback, and records of support, service, and transactional emails.

Technical information: IP address, browser and device data, access times, security logs, pages or API endpoints requested, cookies, and diagnostic information needed to secure and operate the portal.

We do not intentionally collect sensitive personal information unless it is necessary for a specific request and you provide it lawfully. Do not place passwords, payment secrets, API keys, or sensitive personal information in support messages.

We collect information directly from you when you register, sign in, complete checkout, submit a domain or DNS request, configure hosting or email, contact support, or update your account.

We receive limited information from payment, domain-registration, DNS, hosting, email, identity, and security providers when it is necessary to complete your requested transaction or protect the service. We may also receive information from a team member who grants you access to a service.

Some information is generated automatically by the portal, mail systems, hosting systems, security controls, and payment callbacks.

We process information to:

• create and secure accounts, authenticate sign-ins, deliver OTPs, and prevent abuse;
• provide domains, DNS, hosting, websites, mailboxes, webmail, certificates, previews, and support;
• process orders, invoices, deposits, payments, refunds, renewals, and service periods;
• submit and monitor domain registrations or transfers where requested;
• communicate service status, provisioning results, payment confirmations, expiry reminders, suspension notices, and security events;
• operate, troubleshoot, back up, monitor, and improve our systems;
• comply with legal obligations, lawful requests, accounting requirements, and dispute resolution; and
• send optional product news only when permitted and where your notification choices allow it.

Depending on the activity, our lawful basis may be performance of a contract, steps requested before a contract, compliance with a legal obligation, our legitimate interest in securing and operating the service, or your consent. You may withdraw consent for optional communications at any time.

We use essential cookies and browser storage for authentication, session continuity, cart contents, security controls, preferences, and payment-return handling. These technologies are necessary for the portal to function.

With your separate permission, Pavwell may load Meta measurement technology on public pages to measure campaign performance and understand how visitors use our services. This may involve Meta receiving device, browser, page, referrer, IP address, and cookie or similar identifiers. It is optional and remains disabled unless you accept advertising or measurement cookies through our consent control.

You can reject or withdraw optional consent at any time through the Cookie settings control. Changing this choice does not affect essential site functions. Meta may process information outside Zimbabwe; see Meta's privacy information for its handling of data after disclosure.

We disclose only the information needed for a stated purpose to:

• payment providers and financial institutions to initiate, confirm, reconcile, or refund payments;
• domain registries, registrars, ZISPA or other relevant registry channels to register, transfer, verify, or manage a domain;
• DNS and infrastructure providers such as Cloudflare where you connect an account or choose managed DNS;
• hosting, mail, certificate, monitoring, backup, and communications providers that deliver the service;
• our staff, contractors, and professional advisers who are bound by confidentiality and access controls; and
• public authorities, courts, regulators, or other persons where disclosure is required or permitted by law.

We do not sell personal information. We do not allow providers to use your information for their own unrelated marketing.

Some providers may process information outside Zimbabwe. Before using a provider, we take reasonable steps to select a suitable provider, limit the information shared, require appropriate confidentiality and security, and use a lawful transfer mechanism where required. By using a service that depends on an external provider, you acknowledge that provider processing may occur in the countries where that provider operates.

Contact us if you need details about a particular provider or transfer used for your account.

We keep account, order, invoice, payment, domain, and service records for as long as needed to provide the service, comply with tax, accounting, legal, security, and dispute obligations, and enforce our agreements. We retain security and audit logs only for a period proportionate to security and operational needs.

When information is no longer required, we delete it, anonymise it, or securely restrict it unless a longer period is required by law or a legitimate dispute.

We use access controls, encrypted transport, protected credentials, authentication safeguards, audit records, backups, provider controls, and operational monitoring appropriate to the information and risk. No online service can guarantee absolute security. You must keep passwords, OTPs, API tokens, payment prompts, and team invitations confidential and tell us promptly about suspected unauthorised access.

Subject to applicable law and reasonable verification, you may request access to personal information we hold about you, correction of inaccurate information, deletion where retention is no longer required, restriction or objection to certain processing, withdrawal of consent for optional processing, and a copy of information you provided in a usable format.

Some requests cannot be completed where information must be retained for law, fraud prevention, security, another person’s rights, or an active transaction. We will explain any limitation. Send requests to privacy@techinn.co.zw from the account email where possible. We aim to acknowledge requests promptly and respond within the period required by applicable law.

Our services are intended for businesses and adults. We do not knowingly collect personal information from a child who cannot lawfully consent. If you believe a child has provided information, contact us so we can investigate and delete it where appropriate.

If we identify a security incident involving personal information, we will assess it, contain it, keep appropriate records, and notify affected people and the relevant authority where required by law.

Contact us first so we can investigate and resolve your concern. You may also contact the Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ), the data-protection authority, through its current official channels if you are not satisfied with our response.

We may update this policy when our services, providers, or legal obligations change. We will publish the revised version with a new effective date and, where a change materially affects your rights, provide additional notice where required.