Privacy Notice — NetCore Ops
This notice explains how NetCore Solutions ("NetCore", "we"), headquartered at Harare Office, Harare, Zimbabwe and serving clients across Africa, handles personal information in NetCore Ops (the "Platform"). We follow the Cyber and Data Protection Act [Chapter 12:07] of Zimbabwe and, where they apply to a client or person, the data protection laws of the other African countries where our clients operate — for example South Africa's Protection of Personal Information Act (POPIA), Kenya's Data Protection Act, Nigeria's Data Protection Act, Zambia's Data Protection Act and Botswana's Data Protection Act. Contact us about privacy at info@netcore.co.zw.
1. Our role
- For the people who use the Platform (NetCore staff and our clients' staff), NetCore is the data controller.
- For information on our clients' networks and systems that we monitor or manage (logs, alerts, device data, files and messages on those systems), NetCore processes data on behalf of the client, under the client's instructions and its service agreement. The client is responsible for its own notices to its staff and customers.
2. What we collect
- Account details: name, work email, phone or WhatsApp number, organisation, role and access level, site preferences.
- Security information: password hashes (never the password itself), multi-factor settings, sign-in times, IP addresses, browser and device type, sessions and the audit log of actions taken.
- Service records: tickets, comments, chat messages, files you upload, requests and approvals, time logged, satisfaction ratings, call and remote-session records.
- Technical data from monitored systems: device names and addresses, performance, logs, security alerts and configuration backups. Some of this can identify people (for example user names in logs).
- Information you give us about other people, such as contacts for a VPN or a site; please make sure you are allowed to share it.
3. Why we use it
- To provide the services in the client's agreement: monitoring, support, security operations, changes, reporting and billing.
- To secure the Platform and our clients: authentication, MFA, detecting misuse, audit trails and investigations.
- To contact you about tickets, alerts, approvals, invoices and service changes.
- To meet legal, regulatory, tax and contractual obligations, and to establish or defend legal claims.
We rely on the performance of our contracts with clients, our legitimate interest in running and securing the services, legal obligations, and, where needed, your consent.
4. Who we share it with
- Your own organisation's administrators can see their organisation's information and activity.
- NetCore staff who need it to deliver the services, under confidentiality duties.
- Service providers who host or support the Platform (for example cloud hosting, email and messaging delivery), under contracts requiring them to protect it.
- Authorities where the law requires, or to protect people, systems or our legal rights.
We do not sell personal information and do not use it for advertising.
5. Where it is stored
The Platform is hosted with a cloud provider whose data centres may be outside the country where you are based, and our teams may support you from another African country. Where personal information is transferred across borders we do so only with the safeguards required by the applicable data protection law (such as contracts that protect the information, or the consent of the person where the law requires it).
6. How long we keep it
- Accounts: while active, then removed or anonymised; names are kept on historic records (tickets, approvals, audit entries) where needed.
- Audit and security logs: as long as needed for security and compliance, normally up to 7 years.
- Monitoring data: according to the retention set for each kind of data and the client's agreement.
- Billing records: as required by tax law.
7. Security
Encryption in transit, encrypted secrets, MFA, role-based access separating each client's data, session time-outs, login lock-outs and a full audit trail. No system is perfectly secure; tell us at once if you suspect a problem. We will notify the data protection authority concerned and affected people of a breach where the law requires.
8. Your rights
You may ask to see the personal information we hold about you, have it corrected, object to certain uses, or have it deleted where the law allows. Write to info@netcore.co.zw. If you are not satisfied with our answer you may complain to the data protection authority in your country — in Zimbabwe, POTRAZ (the Data Protection Authority); in South Africa, the Information Regulator; in Kenya, the Office of the Data Protection Commissioner; in Nigeria, the Nigeria Data Protection Commission. Requests about information held for a client may be passed to that client.
9. Cookies and browser storage
The Platform uses your browser's storage only to keep you signed in and remember display preferences. We do not use advertising or tracking cookies.
10. Changes
We may update this notice. The current version is always at /privacy, and you will be asked to accept a new version at your next sign-in.