Legal

Privacy Policy

Your privacy matters to us. This policy explains how nhakaCPD collects, uses, and protects your personal information.

Last updated: 5 March 2026

1.Information We Collect

We collect the following types of information when you use nhakaCPD:

  • Account information: name, email address, phone number, professional registration number, and council affiliation when you create an account.
  • Professional details: qualifications, specialty, practice type, province, and CPD activity records required for compliance tracking.
  • Usage data: course enrolments, lesson completions, quiz attempts, and learning progress to track your CPD journey.
  • Payment information: transaction records processed through our payment partners (Paynow, EcoCash, OneMoney). We do not store full payment credentials.
  • Device and access data: IP address, browser type, and access timestamps for security and platform improvement.

2.How We Use Your Information

Your information is used to:

  • Provide and maintain the nhakaCPD platform and your account.
  • Track and report CPD compliance to your registered health professional council.
  • Issue certificates and maintain your CPD points ledger.
  • Process course enrolments and payments.
  • Send notifications about deadlines, course completions, and account activity.
  • Improve platform performance, content, and user experience.

3.Data Sharing

We share your information only in the following circumstances:

  • Your health professional council: CPD compliance data, registration status, and completed activities are shared with the council you are registered under, as required for regulatory compliance.
  • CPD providers: Providers can view enrolment and completion data for their courses only.
  • Payment processors: Transaction details are shared with our payment partners to process your payments.
  • Legal requirements: We may disclose information if required by Zimbabwean law or a valid legal process.

We do not sell your personal information to third parties.

4.Data Security

We implement industry-standard security measures to protect your data, including encrypted connections (HTTPS), secure password hashing, and role-based access controls. Multi-tenant data isolation ensures that each council's data is kept separate and accessible only to authorised personnel.

5.Data Retention

Your CPD records, certificates, and compliance history are retained for as long as your professional registration is active with your council. Account data may be retained for a minimum of 7 years after account closure to meet regulatory record-keeping requirements.

6.Your Rights

You have the right to:

  • Access and download your personal data and CPD records.
  • Request correction of inaccurate information.
  • Request deletion of your account, subject to regulatory retention requirements.
  • Opt out of non-essential notifications.

To exercise any of these rights, contact us at privacy@nhakacpd.co.zw.

7.Cookies

nhakaCPD uses essential cookies to maintain your session and security tokens. We do not use third-party advertising or tracking cookies. Analytics cookies may be used to understand platform usage patterns and improve the service.

8.Changes to This Policy

We may update this privacy policy from time to time. Significant changes will be communicated via email or platform notification. Continued use of nhakaCPD after changes constitutes acceptance of the updated policy.

9.Contact

For privacy-related enquiries, contact us at privacy@nhakacpd.co.zw or write to: nhakaCPD, Harare, Zimbabwe.