Last updated: 14 May 2026
Noah Dara
Founder, Daarah Tech Solutions
We are committed to protecting your data. This policy explains what we collect, how we use it, and the rights you hold over your information.
Daarah Tech Solutions ("we", "us", "our") operates the DaarahSuite Enterprise Resource Planning platform, accessible at daarahtech.com and all tenant subdomains (e.g. orgname.daarahtech.com).
This Privacy Policy explains what personal data we collect when you register an organisation or use the platform, how we process that data, and the rights you hold as a data subject under the Cyber and Data Protection Act [Chapter 12:07] of Zimbabwe.
Collected when you register your organisation on the main platform:
| Data field | Why we collect it |
|---|---|
| Organisation name & domain | To provision your dedicated tenant subdomain |
| Industry | To pre-configure relevant defaults in your portal |
| Subscriber name & email | Account identity and platform communications |
| Phone number | Billing and account recovery |
| Payment references | Subscription billing records (not full card numbers) |
All data entered by Subscribers and Users into their Tenant environment — including customer records, quotations, invoices, payment proofs, employee profiles, stock entries, asset records, and financial data — constitutes Tenant Data. This data belongs exclusively to the Subscriber.
Automatically collected when you use the platform:
| Data type | Purpose |
|---|---|
| IP address & device info | Security monitoring and fraud detection |
| Login timestamps & session data | Authentication and audit trail |
| Feature usage patterns | Improving platform performance |
| Audit trail (field-level history) | Full change history via django-simple-history |
| Purpose | Legal basis |
|---|---|
| Provisioning and operating your Tenant environment | Performance of contract |
| Billing and payment processing | Performance of contract |
| Sending service and security notifications | Legitimate interest |
| Improving platform features and performance | Legitimate interest |
| Maintaining audit trails and change history | Legitimate interest / Legal obligation |
| Complying with Zimbabwean law | Legal obligation |
DaarahSuite uses a shared-codebase, isolated-database multi-tenancy architecture. Every organisation that registers receives their own dedicated database — no Tenant can access another Tenant's data through the platform, by design.
Daarah Tech Solutions staff may access Tenant Data only when strictly necessary for technical support, maintenance, or legal compliance, and only with appropriate internal authorisation. All such access is logged.
| Data type | Retention period |
|---|---|
| Active Tenant Data | Retained for the lifetime of the active subscription |
| Post-cancellation Tenant Data | 30 days after account termination, then permanently deleted |
| Account and billing records | 7 years (Zimbabwean legal and tax compliance) |
| System and access logs | 90 days |
| Audit trail (change history) | Duration of subscription, deleted with Tenant Data |
We implement technical and organisational measures to protect your data at every layer of the platform:
While we take all reasonable precautions, no system is entirely secure. In the event of a confirmed data breach affecting your personal data, we will notify affected Subscribers as required by the Cyber and Data Protection Act.
DaarahSuite uses session cookies only — strictly necessary for authentication and platform functionality. We do not use advertising cookies, tracking pixels, or third-party analytics cookies.
| Cookie | Purpose | Duration |
|---|---|---|
| sessionid | Maintains your authenticated session | Session / 2 weeks |
| csrftoken | Protects against cross-site request forgery | 1 year |
The platform may use third-party providers for infrastructure and hosting. These providers are contractually bound to process data only as instructed and in compliance with applicable law.
No personal data is shared with third parties beyond what is strictly necessary to operate the service. We do not share data with advertisers or data brokers.
Under the Cyber and Data Protection Act [Chapter 12:07] of Zimbabwe, you have the following rights regarding your personal data:
Right to access
Request a copy of the personal data we hold about you.
Right to rectification
Correct inaccurate or incomplete personal data.
Right to erasure
Request deletion of your data, subject to legal retention requirements.
Right to object
Object to processing based on legitimate interest.
Right to portability
Receive a copy of your Tenant Data in a machine-readable format.
Right to restriction
Request that we limit how we process your personal data.
To exercise any of these rights, contact us using the details in Section 13. We will respond within 30 days.
DaarahSuite is a business platform intended for organisations and adults aged 18 and over. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that a minor has provided personal data, we will delete it promptly.
We may update this Privacy Policy from time to time to reflect changes in our practices or in Zimbabwean law. Material changes will be communicated to Subscribers at least 14 days before they take effect, via email or an in-platform notice.
The current version of this policy will always be available at daarahtech.com/privacy-policy. Continued use of the platform after the effective date of any changes constitutes acceptance of the updated policy.
For any privacy-related queries, to exercise your rights, or to report a data concern, please contact our team:
Daarah Tech Solutions
noahadara2004@gmail.com
+263 781 454 395
Last updated: 14 May 2026
Noah Dara
Founder, Daarah Tech Solutions