Global Privacy Notice

TD & Partners Global is an advisory, technology and implementation firm operating across Zimbabwe and the United Kingdom. We are committed to handling personal information responsibly, transparently and in accordance with applicable data-protection law. This Global Privacy Notice explains how we collect, use, share, protect and retain personal information, and the rights individuals have in relation to it.

In this notice, "TD & Partners Global", "we", "us" and "our" refer to the TD & Partners Global group and its operating entities. The specific legal entity that acts as data controller for a particular activity depends on the nature of that activity and the jurisdiction in which it takes place. The registered details of the relevant legal entities are confirmed on request and are published on this page once formally verified.

This notice applies to personal information processed in connection with this website, enquiries made to TD & Partners Global, prospective and existing client communications, careers and recruitment activity, and our general operations. It applies to individuals in Zimbabwe, the United Kingdom and other jurisdictions who interact with us. It does not apply to personal information we process purely as a processor on behalf of a client under a separate written agreement, which is governed by that agreement.

Where TD & Partners Global acts as a data controller, the relevant controller is the operating legal entity responsible for the activity in question. For United Kingdom activities, the controller is the relevant United Kingdom legal entity; for Zimbabwe activities, the relevant Zimbabwean legal entity. Where activities span both jurisdictions, we will identify the lead controller on request. We do not state a registration number with any authority unless that registration has been verified and supplied through our LegalConfiguration record.

You can contact us about privacy using the details in our LegalConfiguration record, or by writing to our privacy contact mailbox. General privacy questions can be directed to our privacy contact; formal requests and complaints should be submitted through our Data Protection Rights and Complaints Procedure. We will not require you to use a specific form to exercise a right, but using our request process helps us respond more quickly.

We collect information that individuals provide to us directly, information collected automatically when they use our website, and information we receive from third parties where relevant and lawful. The categories we process are described in the following sections. We only collect information that is adequate, relevant and limited to what is necessary for the purposes for which it is processed.

When you submit an enquiry through our Work With Us form, contact us by email, or otherwise correspond with us, we collect the information you choose to provide, such as your name, work email, organisation, country or market, capability of interest, the content of your message, and your preferred contact method. Providing this information is voluntary, but some fields are necessary for us to respond.

When you visit our website we may automatically collect technical information such as your internet protocol address, browser type, device information, referring pages, the pages you visit and approximate location derived from your IP address. We may also collect information through cookies and similar technologies, as described in our Cookie Policy. The technologies used are subject to your consent choices.

We may receive limited information from third parties where relevant and lawful — for example, professional advisers, referees provided by candidates, or recruitment partners acting on a candidate's behalf. We only use such information for the purpose for which it was shared and in accordance with applicable law.

Information collected through contact and enquiry channels is used to respond to your message, assess whether we can assist, and manage any resulting professional relationship. Where an enquiry does not lead to an engagement, we retain the information for a reasonable period to respond to follow-up and for legitimate record-keeping, then delete or anonymise it.

Information collected from job applicants and Talent Network participants is described in detail in our Recruitment Privacy Notice. In summary, this includes application details, CVs and supporting documents, interview and assessment records, and equal-opportunity monitoring information where collected. We do not use candidate information for marketing without separate consent.

We use analytics and similar technologies to understand how the website is used and to improve it. Analytics technologies are treated as non-essential and are only loaded where you have consented. We do not use analytics to identify individuals personally where we can avoid it.

Where you opt in to receive marketing or newsletter communications, we use your contact details to send that content. You can withdraw consent or unsubscribe at any time, and we will act on your choice without undue delay. Where no marketing consent has been given, we do not send marketing communications.

We collect technical and security logs necessary to operate, protect and monitor the website and our systems. This includes information relevant to preventing fraud, detecting security incidents and maintaining availability. We process this information on the legal basis of our legitimate interests and applicable legal obligations.

We process personal information for the following purposes: responding to enquiries and communications; assessing and delivering professional engagements; managing careers and recruitment; operating, securing and improving the website; communicating with individuals who have consented; meeting legal, regulatory and accounting obligations; and maintaining governance and internal records.

Under UK GDPR and equivalent principles, our lawful bases are: performance of a contract or steps at your request (for enquiries and engagements); legal obligation (for record-keeping and regulatory duties); legitimate interests (for website operation, security, analytics and business development, balanced against your interests and rights); and consent (for marketing and non-essential cookies). For Zimbabwe, we rely on the corresponding lawful conditions under the Cyber and Data Protection Act [Chapter 12:07] and applicable regulations.

The following table summarises our main processing activities and their lawful bases. Enquiries and contact: contract/legitimate interests. Client engagement: contract. Recruitment: legitimate interests/contract, with consent for monitoring. Website operation and security: legitimate interests/legal obligation. Analytics (non-essential): consent. Marketing: consent. Legal and regulatory compliance: legal obligation.

We do not routinely collect special-category personal information. Where we collect equal-opportunity monitoring information in recruitment, we do so on the basis of consent and keep it separate from assessment decisions. If you provide special-category information voluntarily, we will only process it where we have a lawful basis and your explicit consent where required, and we will minimise what we hold.

Our website and services are intended for organisations and professionals. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

We use cookies and similar technologies as described in our Cookie Policy. Strictly necessary technologies operate without consent; non-essential technologies only operate with your consent. You can manage your preferences at any time via Cookie Settings in the footer.

We share personal information with service providers and sub-processors who help us operate, host and secure our website and systems, and deliver our services. We use contracts that require appropriate confidentiality and security, and we limit sharing to what is necessary. A statement of our processing and sub-processor arrangements is available in our Data Processing and Subprocessor Statement.

We may share personal information with professional advisers (such as legal and accounting advisers) and with competent authorities where we are legally required to do so or where it is necessary to establish, exercise or defend legal rights. We share only what is necessary and lawful.

Because we operate across Zimbabwe and the United Kingdom, personal information may be transferred between these jurisdictions and to service providers in other countries. We only transfer personal information where appropriate safeguards are in place, such as standard contractual clauses or other lawful transfer mechanisms, and we will inform individuals of available safeguards on request.

We take appropriate technical and organisational measures to protect personal information, including access controls, encryption in transit, secure hosting, and regular review of our security practices. Further detail is available in our Information Security Statement. No system can be guaranteed secure, but we work to reduce risk to a level appropriate to the information we hold.

We retain personal information only for as long as necessary for the purposes for which it was collected, to meet legal or regulatory obligations, and to establish, exercise or defend legal rights. Our specific retention periods are set out in our LegalConfiguration retention settings and include periods for contact submissions, unsuccessful and successful candidate records, analytics and security logs. When information is no longer needed, we delete or anonymise it.

Depending on your jurisdiction, you may have rights in relation to your personal information, including access, correction, deletion, restriction, objection, portability and withdrawal of consent. You also have the right to lodge a complaint with a supervisory authority. You can exercise these rights through our Data Protection Rights and Complaints Procedure.

Under the UK GDPR and the Data Protection Act 2018, individuals in the United Kingdom have rights of access, rectification, erasure, restriction, objection, portability, and rights in relation to automated decision-making. The Data (Use and Access) Act 2025 may affect how certain provisions apply. We respond to valid requests without undue delay and within the statutory timeframe.

Under the Cyber and Data Protection Act [Chapter 12:07] and applicable regulations administered by POTRAZ as the Data Protection Authority, individuals in Zimbabwe have rights in relation to their personal information, including access, correction and objection. We respond to valid requests in accordance with the timelines set out in the Act and applicable regulations.

We do not use automated decision-making that produces legal or similarly significant effects on individuals. We do not carry out profiling for marketing without consent. If we introduce such processing in future, we will update this notice and ensure appropriate safeguards and human review are in place.

You can opt out of marketing at any time by using the unsubscribe link in our communications or by contacting us. We will process your opt-out without undue delay. We do not send marketing communications without consent where consent is required.

If you have a concern about how we handle your personal information, please contact us using our privacy contact details. You can also submit a formal request through our Data Protection Rights and Complaints Procedure. We aim to acknowledge complaints within 30 days and respond without undue delay. You also have the right to complain to the relevant supervisory authority.

In the United Kingdom, the supervisory authority is the Information Commissioner’s Office (ICO). In Zimbabwe, the relevant authority is the Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ), which administers data-protection regulation. We do not state a registration number with any authority unless that registration has been verified and supplied.

We may update this notice from time to time to reflect changes in our practices, technologies or legal requirements. We will indicate the effective date and version below and, where changes are material, we will draw attention to them. We encourage you to review this notice periodically.

This notice is effective from the effective date shown on the policy page and is scheduled for review by the review date shown. The current version is shown on the policy page. Earlier versions are retained internally for governance purposes.