1. Responsible person
Tendayi Mapondera trading as SocialTag is responsible for SocialTag’s own site operation and enquiries. Address: 31 Bath Road, Belgravia, Harare, Zimbabwe. Contact: SocialTag.zw@gmail.com. This contact is not a claim of certified DPO appointment. Organisers remain responsible for their own separately collected information and promotional use.
2. Camera, photos and logos
Camera access is requested after a camera control is tapped. The demos request video for still capture with audio disabled; they do not request microphone access. Photos and selected logos are processed in browser memory to create the overlay and preview. No photo or logo upload to SocialTag, an organiser or a gallery occurs. There are no accounts or registration forms on these current pages. Closing or reloading the page normally discards its in-memory media; copies you download or share remain under your device or chosen recipient’s control.
3. Device storage
Moments Lab saves a public URL only when Save link is used, under the local-storage entry stUrl. The saved link remains in that browser on that device until Clear saved link is used or browser site data is removed. This is an exception to the 30-day business-record policy: SocialTag cannot remotely delete your browser’s saved link. The clear button removes only this entry, resets the QR to the online page address, and does not delete photos or browsing history. This link is not uploaded or synchronised by the demo. Do not save private information in a URL.
4. Hosting and other providers
Vercel hosts the sites. Vercel is a US provider and describes technical traffic processing including visitor IP addresses, approximate location and system/request information in its Privacy Notice. This information may be processed outside Zimbabwe under Vercel’s hosting infrastructure and provider arrangements; US incorporation does not establish a single storage country. Its technical logs and provider records are distinct from SocialTag’s enquiry records and are not subject to a promise of deletion by SocialTag in 30 days.
The main site requests Google Fonts; Google receives the request information needed to serve them. Moments Lab bundles its QR library, so it makes no cdnjs request. No optional analytics scripts are present in these supplied pages, and the organiser dashboard uses sample figures. Any later analytics integration needs an updated notice.
Email links open your chosen email app. Messages use Google Gmail and any provider you choose. The person you contact receives the information you send. A third-party destination reached by scanning a QR also handles its own traffic.
5. Purposes and lawful processing
Technical processing supports delivery and security. Contact information is used to answer enquiries, quote, administer accepted bookings, provide support and meet legal obligations. We use an applicable lawful basis for each activity, including consent where required by Zimbabwean law, and do not treat browser camera permission as consent for unrelated uploads or marketing. Local capture does not authorise promotional reuse. This notice is not blanket consent to every future data use. Required cross-border safeguards, notifications and licensing matters must be resolved for the actual processing before commercial activation.
6. Retention: up to 30 days for ordinary records
Ordinary enquiry correspondence and working copies of client materials are retained while needed for an active enquiry or engagement and for no more than 30 days after the last substantive enquiry contact, completion, cancellation or subscription closure, as applicable. Records still needed for an active subscription are not deleted merely because 30 days have passed since creation. We delete or anonymise ordinary records at the end of the applicable period and ask relevant providers to delete copies we control where available.
Invoices, payment evidence, accepted contract records and records reasonably needed for legal obligations or a specific dispute may be retained beyond 30 days for the applicable legal period or until that matter is resolved. Access is restricted and these records are not kept for unrelated marketing. We do not promise that provider-controlled backups, security logs, recipients’ copies or downloaded media disappear within 30 days.
7. Choices, rights and complaints
You can decline camera access, revoke it in browser settings, avoid sharing, clear the saved link, and contact us about access, correction, objection or deletion of information we control. We may request proportionate identity verification and explain any legal reason preventing deletion. You may raise a Zimbabwean data-protection complaint with POTRAZ acting as the Data Protection Authority. This notice makes no claim that SocialTag holds a licence or has been granted an exemption.
8. Security, children and changes
We apply proportionate safeguards, minimise collection and address incidents under applicable notification requirements. A parent or guardian should supervise children and authorise processing where legally required. No hosted child-media collection is enabled by these current pages. Before adding uploads, accounts, galleries, new providers or tracking, we will update the notice and complete the required safeguards and permissions.