Privacy & Data Protection Notice
How MASC Forensic Investigations Academy collects, processes, and safeguards your personal data.
Our Commitment
MASC Forensic Investigations Academy (MASC , we , us ) is committed to protecting the privacy, security, and integrity of your personal data. This notice explains how we collect, process, store, and safeguard personal information obtained from students, prospective applicants, corporate clients, and website visitors in accordance with the Cyber and Data Protection Act [Chapter 12:07] and S.I. 155 of 2024.
1 Information We Collect
Depending on your interaction with MASC, we may collect and process the following categories of personal data:
- Identity Data: Full names, national ID/passport numbers, date of birth, and photographs.
- Contact Information: Physical address, email address, phone numbers.
- Academic & Professional Data: Prior qualifications, transcripts, employment history, CFE/CISA certification details, and HEXCO registration records.
- Financial & Billing Data: Payment references, bank details, proof of fee deposits, and corporate sponsor billing info.
- Technical & Web Data: IP addresses, browser types, and usage data captured when visiting masc.co.zw.
2 Legal Basis & Purpose
We process personal data only when authorized by law under Section 18 of the Cyber and Data Protection Act:
- Academic Admission & Enrollment: Performance of a Contract / Statutory Obligations (HEXCO & Ministry)
- Corporate Training & Advisory Delivery: Performance of a Contract
- Fee Processing & Invoicing: Contractual & Legal Obligation
- Enquiries & Course Downloads: Explicit Consent (Web Form Intake)
- System Security & Audit Logging: Legitimate Interest & Cybersecurity Mandates
3 Data Protection Safeguards
Given our domain focus in digital forensics and IT governance, MASC implements technical and organizational measures to prevent unauthorized access, loss, or misuse of your data:
- Access controls restricted to authorized administration personnel.
- Secure digital archiving for student academic transcripts and records.
- Compliance with POTRAZ security guidelines for data transmission and hosting.
4 Third-Party Sharing & Transfers
We do not sell, rent, or trade your personal information. We only share data under the following circumstances:
- Regulatory Bodies: Ministry of Higher and Tertiary Education, HEXCO, and POTRAZ as mandated by law.
- Sponsoring Organizations: Where corporate employers fund student training, academic performance reports may be shared with written authorization.
- Cross-Border Transfers: Data transferred outside Zimbabwe (e.g., cloud backup nodes) adheres strictly to Section 25 of the Act.
5 Your Rights
Under Sections 20 24 of the Cyber and Data Protection Act, you have the following rights regarding your personal data:
- Right to be Informed: To know why and how your data is processed.
- Right of Access: To request copies of your personal data held by MASC.
- Right to Rectification: To request correction of inaccurate or incomplete details.
- Right to Erasure: To request deletion of data where legal retention periods do not override the request.
- Right to Withdraw Consent: To revoke permission for processing where consent was the sole basis.
6 Consent & Contact
By submitting an application, contacting us via masc.co.zw, or enrolling in any MASC program, you confirm that you have read this notice and consent to the collection and processing of your personal data as outlined.
- Data Protection Office: MASC Forensic Investigations Academy
- Email: privacy@masc.co.zw / info@masc.co.zw
- Regulatory Oversight: You have the right to lodge a complaint with the Data Protection Authority of Zimbabwe (POTRAZ).
Ready to Start Your Journey?
Your data is protected. Take the next step with Masc Forensic Investigations Academy.