Privacy Policy

1. Information We Collect

We collect information you provide directly to us, and limited technical information collected automatically as you browse.

Information you provide

• Contact & enquiry form — name, email address, phone number, matter/practice area, and the content of your message.
• Legal Health Check tool — your answers to the diagnostic questionnaire, used to generate an indicative risk assessment.
• Koshy AI chat assistant — the messages you type into the chat widget.
• Client billing portal — login credentials and matter/billing information for existing clients, provided directly by the Firm.
• WhatsApp & direct correspondence — any information you share when you contact us by WhatsApp, phone, or email.

Information collected automatically

• Standard web log data (IP address, browser type, device type, pages visited, referring URL) collected by our hosting provider.
• Cookie-consent preference, stored locally in your browser (see Section 3).

2. How We Use Information

We use the information we collect to:

• Respond to enquiries and provide requested legal services or information;
• Assess and respond to Legal Health Check submissions and Koshy AI chat questions;
• Administer the client billing portal and manage existing client matters;
• Maintain the security, performance, and functionality of the website;
• Comply with our professional, regulatory, and legal obligations as legal practitioners regulated by the Law Society of Zimbabwe.

We do not sell, rent, or trade personal information to third parties for marketing purposes.

3. Cookies & Local Storage

This website uses your browser's local storage to remember a single preference: whether you accepted or declined the cookie-consent banner. The site itself does not set tracking or advertising cookies, and does not run third-party analytics by default.

If analytics or advertising tools are added in future, they will only load after you have given consent via the cookie banner, and this Policy will be updated accordingly.

4. Koshy AI Assistant

Koshy is an AI legal-information assistant. Messages you send to Koshy are transmitted to Anthropic's Claude API via a secure Cloudflare Worker proxy to generate a response. Conversations with Koshy:

• Are provided for general informational purposes only and do not constitute legal advice;
• Do not create a solicitor-client relationship or attract attorney-client privilege;
• Should not include sensitive case details, confidential documents, or information you would not want processed by a third-party AI service.

For advice on an actual legal matter, please contact us directly through the consultation form or by phone.

5. Data Retention

We retain personal information only for as long as reasonably necessary to fulfil the purposes described in this Policy, including:

• Enquiry and contact-form data — retained while we are following up your enquiry, and thereafter as required for record-keeping;
• Client matter and billing records — retained in accordance with our professional obligations under the Law Society of Zimbabwe's rules and applicable statutory limitation periods;
• Koshy chat content — not stored by the Firm beyond the active session; any retention by our AI infrastructure provider is governed by that provider's own data-handling terms.

6. Data Security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure, or destruction, including restricted access to the client billing portal, encrypted transmission (HTTPS) across the site, and API credentials that are never exposed in the browser. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your Rights

Under Zimbabwe's Cyber and Data Protection Act [Chapter 12:07] and general data-protection principles, you have the right to:

• Request confirmation of whether we hold personal information about you, and access to that information;
• Request correction of inaccurate or incomplete information;
• Request deletion of information we no longer have a lawful basis to retain;
• Withdraw consent for optional processing (such as the cookie banner) at any time;
• Lodge a complaint with the relevant data protection authority if you believe your information has been mishandled.

To exercise any of these rights, contact us using the details in Section 11.

8. Client Confidentiality & Professional Obligations

Where you become a client of the Firm, information relating to your matter is additionally protected by attorney-client privilege and the confidentiality obligations owed by every legal practitioner under the Law Society of Zimbabwe's rules of conduct. Those professional obligations sit alongside, and generally exceed, the protections described in this Policy.

9. Children's Privacy

This website is intended for adults seeking legal services and is not directed at children. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, tools, or legal obligations. The "last updated" date at the top of this page will always reflect the most recent revision. Continued use of the website after an update constitutes acceptance of the revised Policy.

11. Contact Us

If you have questions about this Privacy Policy, or wish to exercise any of the rights described in Section 7, please contact us: