1Information We Collect

To provide catalog discovery and quote request matching services, Boulderstone (Pvt) Ltd collects:

• Customer Account Information: Name, phone number, email address, and delivery/project location provided during registration or quote submissions.
• Supplier Business Information: Business registration name, trading name, contact details, physical address, product catalog listings, and pricing details.
• Communication & Quote Records: Request parameters, project specifications, and messages sent between users and suppliers on the platform.
• Technical Data: IP address, device browser type, operating system, and mobile access telemetry strictly used for security, error diagnostics, and platform performance.

2Why We Process Your Data

All personal data processing by Boulderstone (Pvt) Ltd is restricted to legitimate marketplace purposes:

• Connecting customers with independent suppliers for quote requests.
• Displaying verified supplier business profiles in the BePart Directory.
• Verifying supplier legitimacy and preventing fraudulent or deceptive listings.
• Sending transaction status updates (e.g. quote response alerts, request approvals).
• Complying with statutory tax, statutory recordkeeping, and legal requirements.

3Data Sharing Between Customers & Suppliers

BePart is a matching directory platform. When a customer submits a quote request to a specific supplier or marketplace category, the customer's contact details (name, phone number, project details) are shared with the relevant independent supplier to enable direct communication and quotation fulfillment.

4Cloud Infrastructure & Data Security

We employ enterprise-grade security protocols to safeguard user information:

• Product imagery and media assets are stored securely on Cloudflare R2 object storage with encrypted HTTPS transport.
• Authentication tokens and identity credentials are secured by Clerk authentication infrastructure.
• Database records are maintained on encrypted database instances with strict role-based access control.

5Your Data Subject Rights Under Cyber & Data Protection Act

Under the Cyber and Data Protection Act of Zimbabwe, you hold the right to:

• Access: Request a copy of the personal information stored about your account.
• Correction: Request correction or updating of inaccurate personal or business details.
• Objection & Deletion: Request account deletion or restriction of data processing, subject to statutory retention obligations.

To exercise your data subject rights or submit a data inquiry, email our Data Officer at privacy@bepart.co.zw.

6Data Breach & Security Notification

In the event of a security incident impacting personal data integrity, Boulderstone (Pvt) Ltd will notify affected users and regulatory authorities in accordance with statutory procedures prescribed by the Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ).