Privacy Policy

Last updated: October 2026

Caring for people means handling personal and often sensitive information. We take that responsibility seriously. This policy explains what information we collect, why we collect it, how we keep it safe and the choices you have.

1. Who we are

This website, care4u.co.zw, is operated by Care4You Zimbabwe, a home-care provider based in Harare, Zimbabwe ("we", "us", "our"). We are the data controller for the personal information described in this policy, and we process it in line with the Cyber and Data Protection Act [Chapter 12:07] and its regulations. The Data Protection Authority in Zimbabwe is the Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ).

2. Information we collect

When you request care

• The name and age group of the person who needs care, and where care is needed (city and suburb).
• Your name, relationship to that person, phone and WhatsApp numbers, email address, and whether you live outside Zimbabwe.
• The type and amount of care needed, when it should start, and any details you choose to share about the situation.
• Your preferred contact method and time, and how you heard about us.

When you apply for a job

• Your name, phone and WhatsApp numbers, email address and area of residence.
• Your qualifications, experience, availability, languages, driver's licence status and anything you tell us about yourself.
• Your CV and any certificates you upload, and your confirmation that you are 18 or older.

When you contact us

Your name, phone number, email address and message.

Automatically

When a form is submitted we record the date, time and the device's IP address to help prevent spam and misuse. We use one essential security cookie; see our Cookie Policy. We do not use advertising or tracking cookies.

3. Health information

Details about health, disability, memory, mobility or care needs are sensitive personal information. We ask only for what we need to understand and plan care. This information is seen only by staff who need it to respond to your enquiry, carry out an assessment or deliver care. If care goes ahead, we will ask for further information during the home assessment and explain how it is recorded in the care plan.

If you share information about someone else, such as a parent, please make sure they know you are contacting us, or that you are entitled to act on their behalf.

4. How we use information

• To contact you about your care enquiry, arrange a free assessment, prepare a care plan and quotation, and deliver care.
• To assess job applications, arrange interviews, check references and qualifications, and onboard new staff.
• To answer messages and keep a record of our communications.
• To keep our website and systems secure and prevent fraud or misuse.
• To meet our legal and regulatory obligations.

We do not sell personal information, and we do not use it for marketing unless you have asked us to.

5. Our legal basis

We process personal information because you have given your consent when submitting a form, because it is needed to take steps towards or perform an agreement with you (such as a care agreement or employment contract), because we have a legal obligation, or because it is necessary to protect someone's vital interests in an emergency. You can withdraw consent at any time (see section 10). Withdrawing consent does not affect processing that has already taken place.

6. Who we share it with

We only share information where necessary:

• Our team: care coordinators, nurses, carers and HR staff who need it for their role.
• Health professionals: doctors, nurses, hospitals or hospices involved in the client's care, with consent or where it is needed to protect the client.
• Family members you name: for example, relatives abroad who have arranged the care, if the client agrees.
• Service providers: our website host and email provider, who process information on our behalf under confidentiality obligations.
• Authorities: the police, courts or regulators when the law requires it, or to report a safeguarding concern (see our Safeguarding Statement).

7. Storage and transfers

Website submissions are stored in our password-protected administration system and sent to our company email accounts. Uploaded CVs are kept in a private folder that cannot be opened from the public website. Some of our service providers, such as email or hosting services, may store data on servers outside Zimbabwe, and we may communicate with family members who live abroad. When information leaves Zimbabwe we take reasonable steps to make sure it remains protected to a standard consistent with Zimbabwean law.

8. How long we keep it

9. Security

We use secure connections (HTTPS), individual staff logins with strong passwords, role-based access so staff see only what they need, protection against automated spam, and regular backups. No system is completely secure. If a breach affects your information and is likely to put you at risk, we will notify POTRAZ and the people affected as the law requires.

10. Your rights

Under the Cyber and Data Protection Act you may:

• ask whether we hold information about you and request a copy;
• ask us to correct information that is inaccurate or incomplete;
• ask us to delete information we no longer need or have no right to keep;
• object to, or ask us to restrict, how we use your information;
• withdraw your consent at any time;
• complain to POTRAZ if you are unhappy with how we have handled your information.

To make a request, contact us using the details below. We may need to confirm your identity before we respond, and we aim to reply within 30 days.

11. Children

Our job application form is for people aged 18 and over. When we provide care or support to a child, we collect information about the child from a parent or legal guardian, with their consent.

12. Changes and contact

We may update this policy from time to time. The date at the top shows when it was last changed. For questions about privacy or to exercise your rights, contact: