Privacy Policy

1. Who we are

Fulcrum Safety Wear ("Fulcrum", "we", "us" or "our") is an industrial workwear and personal protective equipment (PPE) retailer based in Harare, Zimbabwe. We operate the website at https://fulcrumindustrial.co.zw and sell workwear, safety clothing and PPE to customers in Zimbabwe.

We are responsible for the personal information collected through this website. If you have questions about this policy or want to exercise your privacy rights, contact us at sales@fulcrumindustrial.co.zw, +263 78 573 7355, or Fulcrum Safety Wear, Harare, Zimbabwe.

2. Scope of this policy

This policy applies to personal information we collect when you browse our website, create an account, sign in with Google, add items to your cart, place an order, make a payment, contact us, or otherwise interact with our store.

It does not apply to Google, Paynow or other third-party websites and services. Those services have their own privacy policies, and we encourage you to read them. This policy is provided in English.

3. Information we collect

We collect only the information we need to run the store, fulfil orders and keep your account secure. The information we collect falls into the categories below.

3.1 Information you give us

• Account details: your name, email address, password and account preferences. Your password is stored by our authentication provider as a salted hash; we do not see your plain-text password.
• Order and delivery details: your name, phone number, city, delivery address, the items you order, order history, returns and delivery notes.
• Communications: emails, WhatsApp messages, phone calls and other messages you send to us, including support requests and order enquiries.

3.2 Information from Google Sign-In

If you choose "Continue with Google", Google shares certain information with us so we can create or sign you into your account. This may include your name, email address, profile image URL and a Google account identifier. We do not receive your Google password, and we do not access Gmail, Google Drive, Google Calendar, Google Contacts or any other Google service.

3.3 Order and payment information

When you place an order, we collect the order details, amount, payment method, payment status, the phone number used for mobile money and the payment reference returned by Paynow. Payments are processed by Paynow. We do not receive or store your full card number, CVV, mobile money PIN or other payment credentials on this website.

3.4 Cart, device and usage information

• Cart information: the items, quantities and prices in your cart. Your cart is kept in your browser's local storage and, when you are signed in, linked to your account so it can sync across devices.
• Technical information: IP address, browser and device type, operating system, pages requested, timestamps, error logs, security logs and general location derived from your IP address.
• Cookie data: authentication cookies and similar technologies needed to keep you signed in and protect your account. See section 7 below.

3.5 Information from other sources

We may receive information from Google when you sign in, from Paynow when a payment is confirmed or fails, from delivery partners about delivery status, and from service providers that help us prevent fraud and secure the site. We do not buy personal information from data brokers.

4. How we use your information

We use personal information to:

• create, authenticate and manage your account;
• process orders, take payments, arrange delivery and handle returns or exchanges;
• send you order updates, receipts, delivery information and responses to your questions;
• detect and prevent fraud, abuse, unauthorised access and other security risks;
• maintain, troubleshoot and improve the website, its features and performance;
• enforce our Terms of Service;
• meet our legal, tax, accounting and regulatory obligations; and
• establish, exercise or defend legal claims where necessary.

We do not use your personal information for third-party advertising, we do not sell it, and we do not use Google user data to build advertising profiles.

5. Legal bases for processing

Where required by applicable law, we rely on one or more of the following legal bases:

• Performance of a contract: to create your account, process your order and provide the products and services you request.
• Legitimate interests: to secure the site, prevent fraud, improve our store and respond to enquiries, where those interests are not overridden by your rights.
• Legal obligation: to keep records for tax, accounting, consumer-protection and regulatory purposes.
• Consent: where we ask for your consent for a specific use, such as optional communications. You can withdraw consent at any time.

6. Google user data and Limited Use

We use information received from Google only to authenticate you, create and manage your account, and display your name and email address in your account and in communications with you. We do not use Google user data for advertising, profiling, resale or any purpose unrelated to providing our store and account services.

We do not share Google user data with third parties except with service providers that help us operate the website (such as our authentication and database provider, Supabase), or where required by law. Those providers are only permitted to use the data to provide services to us.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. You can revoke our access to your Google account at any time in your Google Account permissions, and you can ask us to delete your account as described in section 13.

7. Cookies and local storage

We use cookies and browser storage to keep the site working and secure. Specifically:

• Authentication cookies: set by our authentication provider, Supabase, to keep you signed in and protect your session.
• Local storage for your cart: we store your cart items in your browser under the key "fw-cart" so your cart survives page reloads. When you sign in, your cart can also be linked to your account.
• Security and load-balancing: our hosting provider may use technical cookies or similar mechanisms needed to deliver and secure the site.

We do not currently use advertising cookies or third-party analytics cookies. You can clear or block cookies and local storage in your browser settings, but parts of the site that depend on them, such as sign-in and checkout, may not work properly.

8. Sharing your information

We share personal information only where needed to run our store and only with parties who are required to protect it. We share information with:

• Supabase, which provides authentication, database and file storage services;
• Paynow, which processes EcoCash, InnBucks and Zimswitch payments and returns payment status to us;
• Vercel, which hosts and delivers the website;
• Delivery partners and couriers, so we can deliver your order;
• Professional advisers, authorities or courts where we are required by law, or where needed to establish, exercise or defend legal claims; and
• A successor or buyer if our business or assets are transferred, subject to this policy continuing to apply.

We do not sell, rent or trade your personal information. Our service providers are only allowed to use your information to provide services to us.

9. International transfers

Some of our service providers, including Supabase and Vercel, may store or process information in countries other than Zimbabwe. Where information is transferred across borders, we take reasonable steps to ensure it receives an appropriate level of protection, including through contractual protections and the security measures described in this policy.

10. How long we keep information

We keep personal information only for as long as we need it for the purposes described in this policy:

• Account information: while your account is active and for a reasonable period after account deletion to handle disputes, security issues and legal obligations.
• Order and payment records: for up to 7 years after your order, or longer where required by tax, accounting, consumer-protection or other applicable law.
• Cart information: until you clear your cart, clear your browser storage, or ask us to delete your account.
• Support communications: for as long as needed to resolve your enquiry and for a reasonable period afterwards for quality and legal purposes.
• Technical and security logs: for a limited period, typically no longer than 30 days, unless we need to keep them longer to investigate a security incident.

When information is no longer needed, we delete it or anonymise it so that it can no longer identify you.

11. Keeping your information safe

We use HTTPS encryption in transit, hashed passwords, access controls, database row-level security and reputable service providers to protect your information. Access to personal information is limited to people and systems that need it to operate the store.

No method of transmission or storage is completely secure. Please use a strong, unique password for your account, keep it private and tell us promptly if you believe your account has been compromised.

12. Your rights and choices

Subject to applicable law, you have the right to:

• access the personal information we hold about you;
• ask us to correct information that is inaccurate or incomplete;
• ask us to delete your personal information;
• ask us to restrict or object to certain processing, including processing based on legitimate interests;
• receive a copy of information you provided to us in a portable format where technically feasible;
• withdraw consent where processing is based on consent; and
• complain to a data protection authority.

To exercise a right, email sales@fulcrumindustrial.co.zw from the email address associated with your account. We may need to verify your identity before acting on a request. We will respond within a reasonable time, normally within 30 days. We may keep information where we are required to do so by law, or where we need it to establish, exercise or defend legal claims.

If you are not satisfied with our response, you may contact the relevant data protection authority in Zimbabwe.

13. Deleting your account

You can ask us to delete your account and the personal information associated with it by emailing sales@fulcrumindustrial.co.zw with the subject "Delete my account" from your registered email address. We will verify the request and delete or anonymise your account information, except for records we must keep for legal, tax, accounting, fraud-prevention or dispute-resolution purposes.

If you signed in with Google, you can also remove our access in your Google Account permissions. Deleting your account does not automatically delete information held by Google, Paynow or other third parties; please use their privacy controls for that.

14. Children

This store is intended for adults buying workwear and PPE. We do not knowingly collect personal information from children under 18. If you believe a child has given us personal information, contact us and we will take reasonable steps to delete it.

15. Third-party links

Our website may link to third-party sites or services, including Google, Paynow and social media platforms. We are not responsible for their privacy practices. Please review their privacy policies before providing them with personal information.

16. Changes to this policy

We may update this policy from time to time to reflect changes in our services, technology or legal requirements. The latest version will always be available on this page and the "Last updated" date will change. If we make a material change, we will take reasonable steps to notify you, such as by email or a notice on the website.

17. How to contact us

For any question, concern or request about this policy or your personal information, contact:

Fulcrum Safety Wear
Harare, Zimbabwe
Email: sales@fulcrumindustrial.co.zw
Phone / WhatsApp: +263 78 573 7355

You can also read our Terms of Service.