Data Governance and Privacy Mandate

1.1 Mandatory Professional and Identity Data

To maintain the integrity of the Propertyzone marketplace, we collect specific identifiers required for account authentication and statutory vetting. This includes full legal names, active email addresses, verified phone numbers, and encrypted credentials.

For Practitioners, collection extends to National ID/Passport details and EAC registration credentials. This data is not optional; it is the primary mechanical filter used to purge unregulated "briefcase agents" from our ecosystem.

1.2 Asset and Infrastructure Metadata

We aggregate comprehensive data points for every property listing to satisfy seeker due diligence. This includes precise GPS coordinates, property dimensions, and high-fidelity media.

Crucially, we capture Utility Sovereignty Data—specifically the functional status of boreholes, solar backup capacity, and ZESA grid reliability. We also store digital copies of Council-approved plans and mandate agreements to verify the legitimacy of the listing.

1.3 Automated Technical Intelligence

Our infrastructure automatically logs IP addresses, device identifiers, and mobile network metadata. This is used for session management, fraud detection, and optimizing the performance of our search algorithms across varying Zimbabwean ISP speeds. We utilize first-party cookies to maintain professional preferences and secure authenticated states.

1.4 Transactional Communication Logs

Propertyzone archives all inquiries, chat logs, and lead progression data generated through the Platform. These records serve as a verifiable audit trail for dispute resolution, commission verification, and professional conduct reviews.

2.1 Marketplace Integrity and Verification

The primary use of your data is the mechanical operation of the marketplace. We utilize identity and professional credentials to execute real-time verification against the Estate Agents Council (EAC)registry. This ensures that every lead generated through Propertyzone is routed to a legitimate, accountable practitioner, thereby mitigating the risk of title fraud.

2.2 Infrastructure Optimization and Market Intelligence

Usage patterns are analyzed to refine our search hierarchy and lead-delivery systems. We aggregate anonymized data to generate localized market insights (e.g., utility reliability heatmaps for Harare North), providing Practitioners and Seekers with decisive data for valuation and investment decisions.

2.3 Lead Progression and Alert Systems

Contact data is used to facilitate high-conversion interactions. This includes automated property alerts based on precise seeker filters and the routing of qualified leads to registered Agents. All marketing communications are performance-driven and can be calibrated via account settings to prevent inbox fatigue.

2.4 Statutory Compliance and Security Enforcement

We process information to detect and neutralize fraudulent listings, unauthorized "briefcase" activity, and security threats. Data is retained and disclosed only when mandated by the Cyber Security and Data Protection Act [Chapter 12:07] or other relevant Zimbabwean statutory bodies to resolve disputes or investigate malpractice.

3.1 User-Held Ownership

Sparkline Labs recognizes your primary ownership of the original intellectual property you provide. This includes personal identifying information, specific property descriptions, high-resolution media, and private professional communications.

3.2 Functional Operating License

To execute the digital distribution and syndication required for a high-liquidity marketplace, you grant Sparkline Labs an irrevocable, worldwide, royalty-free license to:

• Display and synchronize Content across Propertyzone’s multi-platform infrastructure.
• Generate technical derivative works (e.g., automated metadata tagging, image optimization, and CDN caching).
• Utilize anonymized listing data for market volatility reports and sectoral analysis.
• Integrate content into cross-channel marketing campaigns to drive distribution to verified seekers.

Note: This license terminates upon Account closure, except where data is retained for statutory audit purposes or exists in historical transaction logs required for market transparency.

3.3 Mandatory Rights under Zimbabwean Law

In strict adherence to the Cyber Security and Data Protection Act [Chapter 12:07], you possess the following enforceable rights:

4.1 Visual Verification Standards

All media uploaded to Propertyzone must satisfy our **Marketplace Authenticity Mandate**. By uploading, you warrant that:

• You hold the legal copyright or explicit written authorization for commercial use.
• The media is a factual representation of the asset; stock photography or deceptive structural alterations are prohibited.
• Images do not contain identifiable persons or sensitive third-party proprietary data.

4.2 Technical Processing and Protection

Sparkline Labs utilizes automated processing to protect and optimize your assets:

• Watermarking: We append digital trust markers to protect against unauthorized "scraping" by unregulated brokers.
• EXIF Scrubbing: We automatically remove sensitive geolocation metadata from images to protect the physical security of property owners.
• Optimization: Media is compressed for high-speed delivery across low-bandwidth mobile networks in Zimbabwe.

4.3 Media Removal Protocol

Upon a removal request, Sparkline Labs will purge the media from all active Platform indices. While we will notify our syndication partners to do the same, we cannot guarantee the immediate removal of data cached by third-party search engines or localized offline backups.

5.1 Public Transparency and Marketplace Visibility

To fulfill the Platform's core utility, property specifications and Professional Profiles—including EAC registration numbers and verified contact details—are designated as public information. This data is designed to be accessible by any User to facilitate trust-based transactions.

5.2 Infrastructure and Transactional Partners

We disclose specific data points to essential technical partners to maintain Platform functionality:

5.3 Statutory and Regulatory Disclosure

Sparkline Labs will disclose User information to government authorities or law enforcement strictly when compelled by a valid court order or a direct mandate from the **Financial Intelligence Unit (FIU)** or **Estate Agents Council (EAC)**. We do not sell personal identifying data to third-party marketing brokers.

6.1 The Verification Lifecycle

Onboarding requires the submission of official EAC registration numbers. Our compliance team performs real-time validation of these credentials before an Account is activated. This vetting process is not a one-time event; Sparkline Labs performs regular re-verification audits to ensure that any practitioner who has been suspended or decertified by the Council is immediately removed from the digital marketplace.

6.2 Regulatory Transparency

Sparkline Labs operates in full cooperation with the EAC. We reserve the right to share specific operational data with the Council upon receipt of a valid regulatory inquiry. This data sharing is restricted to:

• Verification of practitioner standing and firm registration.
• Transaction records and listing history relevant to professional conduct investigations.
• Documented User complaints regarding unethical marketing or mandate disputes.
• Evidence of unregulated brokerage activity ("briefcase agents") for enforcement actions.

7.1 Cryptographic and Physical Protections

We secure data using high-grade industry standards to mitigate the risk of interception. Data in transit is protected via SSL/TLS 1.3 encryption, while sensitive identifiers and credentials at rest utilize AES-256 encryption.

Access to our production environments is restricted to essential technical staff through role-based access controls (RBAC) and mandatory multi-factor authentication (MFA). Our database infrastructure is geographically distributed to ensure resilience against localized power disruptions or infrastructure failures.

7.2 Breach Notification Protocol

In accordance with the Cyber Security and Data Protection Act, Sparkline Labs maintains an active incident response plan. In the event of a verified data compromise, we will notify affected Users and the relevant Zimbabwean regulatory authorities within 72 hours of discovery.

8.1 Statutory Retention Periods

We do not retain personal data indefinitely. Our retention schedules are governed by the necessity of service and Zimbabwean statutory requirements:

8.2 Account Termination and Erasure

Upon a formal account deletion request, public-facing data—including active listings and agent profiles—is scrubbed from the live marketplace within 48 hours. Internal metadata is moved to a secure archive for the remainder of the statutory retention period. Once this period expires, the data is permanently purged from our primary servers and secondary backups.

8.3 Stale Data Management

To maintain the high-signal quality of our database, accounts that remain inactive for more than 24 consecutive months are subject to automatic deactivation. Users will receive a notification 30 days prior to deactivation, allowing for the preservation of their professional history through a simple login action.

9.1 Functional Necessity of Tracking

Propertyzone utilizes technical tracking identifiers (Cookies and local storage) strictly to optimize Platform performance and secure session persistence. We categorize these into two functional tiers:Essential Infrastructure (required for authentication, lead progression, and security) and Performance Intelligence (used to analyze search patterns and improve the accuracy of our utility sovereignty data).

9.2 Third-Party Analytics and Pixels

We leverage professional-grade analytics tools—including Google Analytics and industry-standard conversion pixels—to measure the efficiency of our lead generation for Agencies. These tools aggregate anonymized data regarding link interaction patterns and search queries, allowing Sparkline Labs to refine the marketplace for higher commercial liquidity.

Statutory Protection Standards

Any cross-border data transfer is executed strictly under the protections of the Cyber Security and Data Protection Act [Chapter 12:07]. Sparkline Labs enforces rigorous technical and contractual safeguards with all infrastructure providers to ensure that your data is treated with a level of protection equivalent to Zimbabwean law. We utilize end-to-end encryption for all data in transit between localized Zimbabwean networks and our global server nodes.

12.1 Internal Administrative Settings

You maintain granular control over your professional persona and data visibility through the Account Dashboard. These controls allow you to:

• Modify personal identifiers and verified contact credentials in real-time.
• Calibrate the public visibility of your professional profile and agency markers.
• Toggle notification thresholds for high-intent property alerts and lead routing.
• Manage precise location service permissions for suburb-specific search results.
• Audit and delete saved search histories and comparative property indices.

12.2 Marketing Opt-Out and Transactional Persistence

While we provide clear mechanisms to opt out of non-essential marketing communications—via unsubscribe links, SMS "STOP" commands, or dashboard toggles—certain technical communications are mandatory.

12.3 Data Portability and Termination

You have the right to request a machine-readable export of your personal data for migration purposes. Furthermore, Account Deletion requests are processed within 30 days. As previously stated, deletion from the live marketplace is immediate, though archival retention for statutory audit compliance remains in effect for the required 7-year period.