The fine print

Privacy, plainly.

Version 0.2 (draft) · Version 0.1 published 1 September 2026 · pending review by a Zimbabwean lawyer, whose review may amend this page. Everything below describes what the system actually does — nothing more.

Side A

What we collect, and why

Browsing this site is nearly anonymous. We use Zoho PageSense to see which pages are read and where visitors get stuck; it sets a cookie and records page interactions, never what you type into a form. The live-chat button loads from Zoho SalesIQ only when a page shows it, and the fonts come from Google Fonts. Nothing else watches you, and none of it is sold or shared beyond those processors.

If you buy a ticket or use the studio portal, we hold your name and phone number, and a hashed password — never the password itself. If you keep an order in an account, we also hold the email you give us (used only to send you a password-reset link) and, if you set one, a display name. Your phone number is never shown to anyone but you and the studio.

Which orders are "yours" is decided only by two things: you were signed in when you placed the order, or you proved the order's retrieval code. We never attach an order to an account because the phone numbers match, so nobody can put an order in your account — or see one — by knowing your number.

Your ticket order is a record: the event, the ticket class, and the payment reference you give us in your own words — an EcoCash reference, a transfer reference. Naming a channel is not integrating with it.

If you pay through Paynow (when it is offered), you pay on Paynow's own pages and Paynow tells us the result. Card and wallet details are entered there, never here — we have no column to store a card number in, and never will.

Side B

Who sees what

You see your own orders and tickets. The studio sees the orders for its own events — that is how a reference gets verified and a ticket issued.

A password-reset link is sent only to the email on the account, works once, and expires after thirty minutes. Requesting one tells the requester nothing about whether the email is on an account.

We do not sell or share personal data with anyone. Our server logs are scrubbed of secrets by design.

Liner notes

Keeping, deleting, asking

Orders and payment records are business records and are kept as such — they are your proof of purchase as much as ours.

To ask what we hold about you, correct it, or ask for your account to be removed, write to info@lemongroovebrands.co.zw. Complaints may be escalated to POTRAZ, Zimbabwe's data protection authority.

The data controller is Lemongroove Brands, Harare, Zimbabwe.