Privacy Policy

Who we are

This site is operated by DZiVaGuRu Studios (“we”, “us”), a Zimbabwean music and film production studio based in Harare, Zimbabwe. This policy explains what personal information we collect through dzivagurustudios.app, why we collect it, and what rights you have over it.

What we collect

• Ticket purchases and contributions. Your name, email address, and — if you provide one — your phone number and totem (mutupo). Card details are entered on Stripe’s own hosted checkout and are never seen, handled, or stored by us.
• Contact form. Your name, email address, subject, and message.
• Premiere access. The email address associated with an access code, so we can confirm the code belongs to you.
• Staff accounts. If you are given an administrator or editor account, we store your email address and role.

We do not use advertising trackers, analytics pixels, or profiling of any kind, and we do not collect data about you beyond what is listed above.

Why we collect it

To fulfil your ticket purchase or contribution and send you the confirmation and access details for it; to answer messages you send us; to confirm access codes; and to keep the site secure and working. Our lawful bases are performance of a contract (fulfilling your purchase), legitimate interests (responding to your enquiries, site security), and consent where you have given it.

Cookies

We use strictly necessary cookies only. If you sign in to a staff account, our authentication provider sets a session cookie so you stay signed in. Visiting the public site as a normal visitor sets no cookies at all. We use no analytics, advertising, or tracking cookies, so there is nothing here to opt out of.

Who we share it with

We do not sell or rent your personal information, and we do not share it for advertising. We use a small number of service providers who process data on our behalf:

• Stripe — payment processing. Stripe collects and holds your payment details directly under its own privacy policy.
• Supabase — database, authentication, and media storage.
• Resend — sending transactional email such as order confirmations.
• Vercel — website hosting and delivery.

These providers operate internationally, so your information may be processed outside your country, including in the United States and the European Union. We may also disclose information where we are legally required to.

How long we keep it

Purchase and contribution records are kept for as long as needed to provide the service and to meet our financial and legal record-keeping obligations. Contact form messages are kept only as long as needed to deal with your enquiry. You can ask us to delete your information sooner — see below.

Your rights

Depending on where you live, you may have the right to request a copy of the personal information we hold about you; to have it corrected or deleted; to restrict or object to how we use it; and to receive it in a portable format.

If you are in California, you additionally have the right to know what we collect and to request deletion. We do not sell or share personal information as those terms are defined under the CCPA/CPRA, so there is no “Do Not Sell or Share My Personal Information” process to offer.

You will never be treated differently for exercising any of these rights.

Contact us

To make a request about your information, or to ask anything about this policy, email us at dzivaguruhre@gmail.com. We aim to respond within 30 days. If you believe we have handled your information improperly, you may also complain to your local data protection authority.

Changes

If we change this policy we will update the date at the top of this page.