GALZ is committed to protecting the privacy, dignity, and safety of everyone who interacts with our website, services, and digital platforms. This Privacy Policy explains what information we collect, why we collect it, how we use it, and the safeguards we apply to protect your data. It also outlines your rights and how you may exercise them.

GALZ works with communities that face discrimination and risk, so privacy and data protection are central to how we operate.

​

1. Who We Are

GALZ is a voluntary membership-based association that protects, promotes and represents the rights of LGBTI persons in Zimbabwe. Our website exists to provide information, resources, support, community engagement, and organizational updates.

​

2. Scope of This Policy

This policy applies to:

• All visitors to the GALZ website
• People who interact with our tools, contact forms, newsletters, or online services
• All digital data collected through GALZ-managed platforms

It does not apply to third-party websites linked on our site. Those platforms have their own privacy policies.

​

3. Information We Collect

We may collect information in the following ways:

​

3.1 Information You Provide Directly

This includes:

• Contact form submissions
• Newsletter sign-ups
• Event registrations
• Support requests or referrals
• Donations, membership applications, or volunteer submissions
• Uploaded documents or messages

​

The data typically includes:

• Name (real or preferred)
• Email address
• Phone number
• Location (optional)
• Message content
• Any additional information you choose to provide

​

GALZ does not require sensitive personal data unless explicitly relevant to the service you request. We avoid collecting national identity information unless necessary for donor or legal compliance.

​

4. Sensitive Information

Given the nature of our work, we treat all information with heightened sensitivity. We will never request:

• Sexual orientation details unless voluntarily shared
• Medical information unless part of a confidential support request
• Financial information apart from secure donation processing

​

We strongly encourage users to use pseudonyms or minimal information if safety is a concern.

​

5. Information Collected Automatically

When you visit our website, we may automatically collect:

• IP address (anonymized where possible)
• Browser type and version
• Device information
• Referring website
• Time spent on pages
• Click paths and browsing behaviour
• Cookies (see Section 10)

​

This information helps us improve user experience, troubleshoot issues, and ensure the security of our digital platforms.

 

6. How We Use Your Information

We use your data for the following purposes:

​

6.1 Service Delivery

• Responding to enquiries
• Providing resources or information requested
• Processing support requests
• Managing event participation
• Contacting you when necessary

​

6.2 Website Improvements

• Monitoring site performance
• Enhancing usability and accessibility
• Analysing usage trends to improve services

​

6.3 Communication

• Sending newsletters if you opt in
• Sharing organisational updates, opportunities, or events
• Providing follow-up communication

You may unsubscribe from newsletters at any time.

​

6.4 Safety and Security

• Detecting and preventing suspicious or harmful activity
• Protecting the confidentiality of users who engage with GALZ
• Ensuring compliance with data protection rules

​

7. Legal Basis for Processing Data

We process your information under the following legal grounds:

• Consent: When you submit forms or sign up for newsletters
• Legitimate interest: For website analytics, organisational improvement, and security
• Contractual necessity: When providing services or fulfilling event participation
• Legal obligation: When required by law or audits

 

We only process sensitive data when you provide explicit consent or when essential to the service you request.

 

8. How We Store and Protect Information

GALZ applies strong safety protocols to protect your privacy:

• Encrypted data storage
• Restricted staff access
• Secure servers and password management
• Regular security audits
• Encrypted communication channels
• Internal training on data protection and confidentiality

Technical and organisational safeguards are reviewed regularly to respond to emerging risks.

 

9. Information Sharing and Disclosure

GALZ will never sell, rent, or trade your information.

We may share information only in these limited cases:

​

9.1 With Your Explicit Consent

For example, referring you to a partner organisation or service provider.

​

9.2 Trusted Service Providers

Third-party providers may assist with:

• Website hosting
• Email newsletter distribution
• Cloud storage
• Donation processing

These providers must comply with strict confidentiality obligations.

​

9.3 Legal Requirements

We may disclose data only when required by law, court order, or regulatory obligations. GALZ will challenge any request that risks user safety or privacy.

 

10. Cookies and Tracking Technologies

The GALZ website uses cookies to improve user experience. Cookies may:

• Remember your preferences
• Help us understand site usage
• Enhance security and stability

 

You may disable cookies in your browser settings. Some website features may not function fully if cookies are blocked.

GALZ does not use invasive tracking or targeted advertising tools.

​

11. International Data Transfers

Although GALZ operates in Zimbabwe, our website hosting or email providers may store data in other jurisdictions. We work only with service providers that apply strict international data protection standards.

 

12. Data Retention

We retain your information only for as long as is necessary for:

• The purpose for which it was collected
• Legal, financial, or audit requirements
• Ongoing support services you request

 

You can ask us to delete your information at any time.

​

13. Your Rights

You have the following rights under this policy:

• Access your data
• Request correction of inaccurate information
• Request deletion of your data
• Withdraw consent at any time
• Object to certain types of processing
• Request limits on how we use your data

​

To exercise any of these rights, contact us using the details in Section 15.

​

14. Children’s Privacy

Our website is not intended for individuals under 18 unless interacting through approved youth programmes. GALZ does not knowingly collect information from minors without verified consent.

​

15. Contact Details

If you have questions or concerns about this policy, or if you want to exercise your privacy rights, contact: comms@galz.org