Privacy Policy

Cyber and Data Protection Act – Privacy Policy

Last Updated: June 2026

1. Introduction

Your privacy is of paramount importance to the National Employment Council for the Engineering, Iron and Steel Industry (NEC). As the statutory body governing employment and industry standards within the engineering, iron, and steel sectors, we are committed to protecting and respecting the privacy of our stakeholders, including employers, employees, trade unions, service providers, and visitors to our digital platforms.

This Privacy Policy explains how we collect, use, store, and protect your personal data in compliance with the Cyber and Data Protection Act [Chapter 12:07] of Zimbabwe. By accessing www.necengineering.co.zw or utilizing our online portals and services, you acknowledge the processing practices outlined in this policy.

2. Data Controller

The Data Controller responsible for your personal data is:

National Employment Council for the Engineering, Iron and Steel Industry (NEC)

Harare, Zimbabwe

Website: www.necengineering.co.zw

Email: [email protected]

This policy applies to all personal data collected across all departments, web portals, and online services operated by NEC.

3. Information We Collect

We collect and process personal data to fulfill our statutory functions, manage industry returns, and provide Services.

     3.1 Information You Provide Directly

• Identification & Business Details: Full names, national identity numbers, job titles, business names, physical/postal addresses, contact phone numbers, and email addresses.
• Employment & Industry Data: Employee returns data, payroll details for contribution assessments, trade union registration details, and dispute resolution records.
• Commercial & Financial Information: Banking details, payment transactions, and receipting information.
• Enquiry & Support Data: Information provided when submitting online contact forms, registration portals, or corresponding with our office.

 

     3.2 Information Collected Automatically

• Technical & Usage Data: IP addresses, browser types and versions, operating systems, referring URLs, session lengths, and page navigation patterns collected when visiting www.necengineering.co.zw.

4. How We Use Your Data

     We process personal data strictly for statutory, regulatory, and administrative purposes, including:

• Statutory Compliance & Collections: Processing council returns, levies, and contributions under established collective bargaining agreements and industry regulations.
• Dispute Resolution & Operations: Managing conciliation, arbitration, and labor administration procedures within the industry.
• Stakeholder Management: Communicating policy updates, industry announcements, circulars, and responding to direct inquiries.
• Platform Security: Monitoring site access, preventing fraud, and protecting our digital infrastructure from unauthorized access or cyber threats.
• Service Improvement: Analyzing website performance to improve user experience and portal navigation.

5. Legal Basis for Processing

We process personal data under one or more of the following lawful bases established by the Cyber and Data Protection Act [Chapter 12:07]:

1. Legal Obligation: To fulfill statutory duties mandated under Zimbabwean labor law and council agreements.
2. Contract Performance: To perform agreements and manage operational relationships with registered employers and stakeholders.
3. Legitimate Interest: To maintain secure operations, manage dispute resolutions, and administer council activities.
4. Consent: Where explicit consent has been granted for specific non-statutory communications.

6. Cookies and Tracking

Our website uses cookies (small text files stored on your device) to facilitate site functionality, session management, and access to secure portals.

• Essential Cookies: Necessary for website operation and securing portal login areas.
• Analytical/Performance Cookies: Help us aggregate anonymized traffic data to improve site performance.

You can adjust your browser settings to block or disable cookies, though certain portal features may not function properly as a result. We do not engage in third-party targeted advertising cookies.

7. Data Sharing and Disclosures

NEC does not sell, rent, or trade your personal data. We only share information under strict conditions:

• Regulatory & Statutory Authorities: Government ministries, statutory enforcement bodies, or judicial entities where required by law.
• Third-Party Service Providers: Vetted IT infrastructure providers, secure cloud hosts, or payment gateway providers operating under strict confidentiality and data protection agreements.
• Legal Requirements: When required to protect legal rights, enforce council compliance, or respond to court orders.

8. Data Security & Storage

We maintain appropriate administrative, physical, and technical security measures to protect your personal data against unauthorized access, loss, or alteration, including:

• TLS/SSL encryption for all web transmission and data in transit.
• Secure storage infrastructures with encryption at rest.
• Role-based access controls for internal systems.
• Regular security assessments and system backups.

9. Data Retention

Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected, including compliance with statutory labor record-keeping obligations, financial auditing rules, and legal dispute resolutions. Detailed retention schedules are maintained internally by our Data Protection Officer.

10. Your Rights Under the Cyber and Data Protection Act

Subject to applicable legal limits regarding statutory labor records, you have the following rights regarding your personal data:

• Right of Access: Request copies of your personal data held by NEC.
• Right to Rectification: Request corrections to inaccurate or incomplete information.
• Right to Erasure: Request deletion of personal data where legal grounds for retention no longer apply.
• Right to Restrict Processing: Limit how we process your personal data under specific conditions.
• Right to Object: Object to processing based on legitimate interests.
• Lodge a Complaint: Contact the National Data Protection Authority (POTRAZ) if you believe your data rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer.

11. Third-Party Links

Our website (www.necengineering.co.zw) may contain links to external websites (such as government portals or legal repositories). NEC is not responsible for the privacy practices or content of third-party websites. We encourage you to review their respective privacy notices.

12. Updates to This Policy

We reserve the right to update this Privacy Policy to reflect changes in legal, regulatory, or technical environments. Any updates will be posted on this page with a revised “Last Updated” date.

13. Contact Us & Data Protection Officer

For any queries, requests, or concerns regarding this Privacy Policy or our data protection practices, please contact our Data Protection Officer:

Data Protection Officer

National Employment Council for the Engineering, Iron and Steel Industry

Harare, Zimbabwe

Website: www.necengineering.co.zw

Email: [email protected] / [email protected]