1. Your right to deletion
Under the Cyber & Data Protection Act 2021 (Zimbabwe) and equivalent international frameworks (GDPR Art. 17, POPIA), you have the right to request deletion of personal data we hold about you, subject to legal retention obligations.
2. Who to contact first
If you are a learner, parent, staff member or alumnus of a school using NalieTech, the school is the data controller and NalieTech is the data processor. Please contact your school first — they hold the deletion decision. We assist them in fulfilling the request.
3. How to request deletion
- Email tichremias@nalietech.com with the subject line "Data Deletion Request".
- Include: full name, the school you are associated with, your role (learner / parent / staff / other), and the data you want deleted.
- Attach proof of identity (national ID or passport) so we can verify you are the data subject. We delete this proof within 30 days of closing the request.
4. Account self-deletion
Signed-in users can also request account deletion from App → Settings → Account → Delete account. Initiating this from inside the app pre-fills verification and shortens response time.
5. Timeline
- Acknowledgement: within 5 working days.
- Resolution: within 30 days (extendable once by 30 days for complex requests, with notice).
- Backup purge: within 180 days from production deletion.
6. What we cannot delete
We are legally required to retain certain records even after a deletion request:
- Financial records — 10 years (ZIMRA / Income Tax Act).
- Statutory academic records — as required by MoPSE and ZIMSEC.
- Audit logs — 7 years, hash-chained and immutable (Data Protection Act).
- Records relevant to active legal proceedings — until proceedings conclude.
Where we cannot delete, we restrict processing to legal retention only and we tell you which exception applies.
7. Children's data
For learners under 16, the deletion request must be made by a parent or legal guardian. We may contact the school to verify guardianship.
8. Right to complain
If you are not satisfied with our response, you may lodge a complaint with the Postal & Telecommunications Regulatory Authority of Zimbabwe (POTRAZ), the supervisory authority under the Cyber & Data Protection Act 2021.
9. Contact
Data Protection Officer: tichremias@nalietech.com