Privacy Policy

1. Who we are

BridgeFort Infrastructure Group Limited ("BridgeFort Infrastructure", "we", "us") is headquartered in Bindura, Zimbabwe, with operations in South Africa. We are a BridgeFort Capital Group portfolio company. We are responsible for the personal information described in this policy, which applies to this website (bridgefort.co.zw), our online shop and the internal tools our staff use to serve customers.

2. Information we collect

Website visitors and enquirers. When you use our contact form (including investor relations, partnership and service enquiries) we collect your full name, email address, phone number, country, enquiry type and message.

Shop customers. When you place an order we collect your first name, surname, phone number, email address, optional company name, whether you will collect or want delivery, your delivery address (if applicable), order notes and the products ordered. We use your phone number to link the order to your customer record.

Customers served by our sites. When you buy from or request work from our sites, our staff record your name, phone number and, where provided, email address and company, together with quotations, sales orders, payments, job cards, delivery notes and invoices relating to you. This lets us track your orders and purchase history.

Investors. If you subscribe for shares, we collect your name, email address, WhatsApp number, country of residence, national ID or passport number, share depository (CSD) account status, how you heard about us, the number of shares and amount, and the status of your payment. We do not receive or store your card or mobile-money details; these are entered directly with our payment processor.

Staff users. For staff who sign in to our internal tools, we hold their email address, an optional display name, their access permissions, and a record of changes they make, for security and accountability.

Technical information. Our hosting provider processes basic technical data such as IP address and browser details to deliver the site and protect it from abuse. Our forms include automatic anti-spam checks and limits on repeated submissions.

3. Why we use it

• To respond to your enquiries and requests.
• To process orders, quotations, deliveries, collections and payments, and to keep records of your purchases.
• To manage investor relations, including share subscriptions and related communications.
• To send emails connected to your enquiry, order or subscription, such as confirmations.
• To meet our legal, tax, accounting and regulatory obligations.
• To keep the website and our systems secure and to improve how they work.

4. Lawful basis and consent

We process personal information where it is necessary to take steps at your request or perform a contract with you (for example, an order or share subscription), to comply with the law, for our legitimate interests in running and securing our business, or with your consent. Where we rely on consent, such as the consent given on our share subscription form, you may withdraw it at any time; this does not affect processing that took place before.

5. Who we share it with

We do not sell your personal information. We share it only where needed with:

• Service providers who act on our behalf, such as website hosting and database providers, email delivery providers and payment processors (including Paynow for online payments);
• Google LLC, which provides Google Analytics, if you accept analytics cookies;
• Delivery partners, where you ask us to deliver an order;
• Other companies within BridgeFort Capital Group, where needed to manage our business and investor relations;
• Our professional advisers, such as auditors, accountants and lawyers;
• Regulators, courts, law enforcement and other authorities where required by law.

6. Cross-border transfers

Because we operate in Zimbabwe and South Africa, and some of our service providers are based in other countries, your information may be transferred between and stored outside these countries. When this happens we take appropriate steps, such as using reputable providers bound by contractual confidentiality and security obligations, so that your information remains protected to a standard consistent with applicable data protection laws.

7. How long we keep it

We keep personal information only for as long as needed for the purposes described above. Records of sales, payments, share subscriptions and other transactions are kept for the periods required by tax, company and financial laws. Enquiries are kept for as long as needed to deal with them and any follow-up. When information is no longer needed, we delete or anonymise it.

8. How we protect it

We use encrypted connections (HTTPS) for this website. Access to our internal tools is limited to approved staff who must sign in, and each person can only see and change the information their role allows; these restrictions are enforced by our systems, not just hidden on screen. Changes to staff access are logged, product photos and documents are stored privately, and payment confirmations are verified directly with our payment processor. No system is completely secure, but we work to protect your information against loss and unauthorised access.

9. Your rights

Subject to applicable law, you have the right to:

• Ask for access to the personal information we hold about you;
• Ask us to correct information that is inaccurate or incomplete;
• Ask us to delete your information, where we are not required to keep it;
• Object to or ask us to restrict certain processing;
• Withdraw your consent where we rely on it.

To use these rights, contact us using the details below. If you are not satisfied with our response, you may complain to the Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ), the data protection authority under the Cyber and Data Protection Act, or, in South Africa, to the Information Regulator under the Protection of Personal Information Act (POPIA).

10. Cookies and browser storage

We do not use advertising cookies.

Analytics: we use Google Analytics, provided by Google LLC, to understand how visitors use the site, such as the pages viewed, device and browser type, approximate location and how visitors arrived. Analytics cookies are set only if you click "Accept" on our cookie banner. We use this information in aggregate to improve the site, not to identify individuals, and we never sell it. Google may process this information outside Zimbabwe and South Africa. You can change your choice at any time using "Cookie settings" in the footer.

The site also uses storage needed for it to work:

• Shopping cart: the items in your cart are saved in your browser's local storage so they remain when you return. They are not sent to us until you check out.
• Order confirmation: after checkout, your order summary is kept in your browser for that session so the confirmation page can show it.
• Staff sign-in: staff who sign in by email link, password or Google have a sign-in session stored in their browser to keep them signed in, plus a temporary marker used during password resets.

You can clear this storage through your browser settings; doing so will empty your cart or sign you out.

11. Children

This website is not intended for anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has given us their information, please contact us so we can delete it.

12. Changes to this policy

We may update this policy from time to time. The latest version will always be published on this page with the date it was last updated.

13. Contact us

For privacy questions or requests, please contact:

BridgeFort Infrastructure Group Limited
331 Railway Avenue, Bindura, Zimbabwe
Email: vhusip@bridgefortcapital.com

You can also reach us through our contact page.