Clear about the information we collect.

Who is responsible for your information?

Morgan & Co Private Limited is the data controller for personal information collected through this website. Our principal contact address is Unit 2 King George Courts, 44 King George Road, Avondale, Harare, Zimbabwe.

We process website information with reference to Zimbabwe’s Cyber and Data Protection Act, 2021 (CDPA) and applicable regulations.

Information we collect

Please do not submit special-category or confidential information unless it is specifically requested through an authorised process.

How and why we use it

• To respond to enquiries and route them to the appropriate Morgan & Co team.
• To process account-opening requests, document access and event registrations.
• To deliver requested research updates and manage subscription preferences.
• To secure, troubleshoot and improve the website and its connected services.
• To meet legal, regulatory, audit and record-keeping obligations.

Where consent is the appropriate basis, we ask for it at the point of collection and record your choice. You may withdraw consent for future processing at any time, without affecting processing already carried out lawfully.

Sharing, transfers and retention

Access is limited to authorised Morgan & Co personnel and service providers that support hosting, communications, document delivery, security or customer relationship workflows. We do not sell personal information.

Where information is processed outside Zimbabwe, we apply contractual, organisational and technical safeguards appropriate to the transfer. We retain information only for as long as needed for the stated purpose, legal obligations, dispute handling and legitimate record keeping, then securely delete or anonymise it.

Your rights

Subject to applicable law, you may ask to be informed about processing, access your personal information, correct inaccurate information, object to certain processing, request deletion where appropriate, or withdraw a consent choice. We may need to verify your identity before acting on a request.

Cookies and similar storage

Essential cookies and local storage support secure sessions, forms, document access and your site preferences. Optional analytics are not enabled unless they are configured and you allow them. Your essential choice does not prevent the website from using storage required for security and core functionality.

Security and account access

We use access controls, secure sessions, validation, audit records and operational safeguards to reduce unauthorised access, loss or misuse. No internet service can guarantee absolute security; please contact us promptly if you suspect an account or privacy incident.