Privacy Policy

UPNEXT Careers (UPNEXT, we, us) is a website at upnext.co.zw that lists jobs, internships, graduate programmes, scholarships, tenders and grants in Zimbabwe. It is operated by Zentrik Solutions (Pvt) Ltd, Zimbabwe, which decides how and why the personal information described here is used and is the “data controller” for it.

This policy applies to everyone who uses the website: visitors who only browse, jobseekers with an account, employers and their authorised representatives, people who report a listing, and people who write to us. It does not cover other websites that a listing links to; their owners are responsible for those.

To ask a question about this policy or to use any of your rights, write to support@upnext.co.zw. For general enquiries, corrections to listings and anything else, write to info@upnext.co.zw. See also Contact.

We collect only what the features you use need. We do not collect your date of birth, gender, national identity number, photograph, CV or other uploaded documents, payment details or precise location.

Please do not include other people’s personal details in a report or a message. Staff who read it can see everything you write.

We do not sell your personal information, we do not use it for advertising, and we do not send marketing messages. We do not use it to train artificial-intelligence systems. Nothing about you is made public: listing and company text is about organisations, not about site users.

The grounds above reflect our understanding of the Cyber and Data Protection Act [Chapter 12:07] and are reviewed whenever our processing changes.

If you create a profile, UPNEXT can put the opportunities that fit it first. The ordering follows fixed, published rules: it compares your profile choices (category, place, qualification, experience level, employment type, work arrangement and skills) with what each listing states. For every listing it shows you, in plain words, which of your choices matched and which could not be compared because the listing does not say.

• It is not artificial intelligence, and no one makes a decision about you. It only changes the order in which public listings appear to you. It does not rate you, reject you, or tell any employer anything.
• Employers cannot see your profile. There is no employer search of jobseekers and no employer access to profiles on UPNEXT.
• The ordering is worked out when you open the page and is not stored.
• You are in control. You can leave the profile empty, change or clear any field, reset the whole profile, or delete your account, which deletes the profile.

Service messages. When it is needed we send you messages about your account: confirming your e-mail address, resetting a password, security notices, and confirming that a deletion has been completed. Employer account holders also receive notices about their organisation claim and their listings (submitted, published, returned for changes, closing soon). These are not marketing and are not optional while you have the account.

Job alerts are optional and off by default. We send an alert only if you have a confirmed e-mail address, you have switched alerts on in your account, and you have ticked the separate box agreeing to receive them. Creating an account or accepting the Terms of Service never switches alerts on. You choose the categories, places and frequency (daily or weekly). Each alert lists new matching listings only, up to ten, and never repeats one. Every alert contains a link that switches alerts off in one step without signing in, and e-mail programs that support one-click unsubscribe will offer it. You can also change or stop alerts in your account at any time. We keep a record of when you agreed and to which version of the wording so that we can show your choice was respected.

Delivery. We send e-mail through a delivery provider (section 7) and only once e-mail sending has been switched on and tested. If an address is permanently refused (for example it does not exist), we remember a one-way code of it so that we do not try again; the address itself is not kept for that purpose. Mail messages contain no tracking images.

We use only what the service needs to work. We do not use advertising, tracking or analytics cookies, and we do not use an analytics service or any third-party script that tracks you across sites. Because of that, there is no cookie banner with choices to make. If that ever changes, we will update this section and section 6A first.

Current status. UPNEXT Careers does not currently show advertisements, does not load Google’s advertising scripts and does not set advertising cookies. We may apply to use Google AdSense to help pay for the service. This section explains how that would work, so that you can see it in advance. We will change this section, and ask for your permission as described below, before any advertising is switched on.

How Google may use cookies and similar technologies. When advertising is shown, Google and the companies it works with may use cookies, device identifiers and similar technologies to deliver, measure and limit advertisements, to detect fraud and abuse, and to show advertisements that are based on your earlier visits to this and other websites (personalised advertising) or only on the page you are viewing and general information such as your approximate location (non-personalised advertising). Non-personalised advertisements can still involve cookies, for example to count how often an advertisement is shown.

What Google may receive. To show and measure an advertisement, Google may receive your network (IP) address, browser and device details, the address of the page you are viewing, cookie or device identifiers, and how you interact with the advertisement. Google handles that information under its own policies, not ours: Google’s Privacy Policy, how Google uses cookies in advertising and how Google uses information from sites that use its services. Google may process it outside Zimbabwe (see section 8). Advertisers may also see aggregated results from Google.

What we do not pass to Google. UPNEXT does not give Google your account details, profile, saved listings, job-alert choices or anything you type into the site for advertising purposes. Advertisements are not chosen from them, and the advertising choice you make (below) stays in your browser.

Where advertisements may appear. Only on public, read-only content pages: an individual opportunity page and the guides. Advertisements are labelled, are kept apart from the page text, and are placed so that they are not mistaken for UPNEXT’s own buttons or links.

People in the European Economic Area, the United Kingdom and Switzerland. Under the laws that apply there, advertising cookies and similar technologies generally need your prior consent. We do not locate visitors, so we apply the same rule to everyone: when advertising is on, Google’s advertising technologies load only after you choose “Allow advertisements”, and if you choose “No advertisements” (or do nothing) none is loaded and no advertisement is shown. You can change your mind at any time using the control in the advertisement box on any page that can show advertisements (an opportunity page or a guide).

• Your choice on UPNEXT. Use the control in the advertisement box (“Allow advertisements” or “Stop advertisements”) on any opportunity page or guide. It is remembered in this browser only, in local storage under the name upnext-ad-consent; it is not a cookie and it is never sent to us. Clearing your browser data resets it.
• Personalised advertising. You can manage or switch off personalised advertising from Google at Google Ad Settings.
• Industry opt-out tools. You can also use Your Online Choices (Europe), the Digital Advertising Alliance (United States) or the Network Advertising Initiative, and your browser’s settings to block or delete cookies. Blocking cookies in your browser can stop advertisements from working and does not affect the rest of UPNEXT.
• Your other rights over information that we hold are in section 12. Information that Google holds is governed by Google’s own policy, linked above.

We share personal information only with organisations that help us run the service, and only what they need. They may act only on our instructions.

• E-mail delivery: Resend. Our selected e-mail delivery provider. When we send you a message it receives your e-mail address and the message text. We have not made any statement that delivery works until it has been tested with real mailboxes.
• Sign in with Google (only if you choose it). Google learns that you are signing in to UPNEXT and handles that under its own privacy policy. We receive only the name, verified e-mail address and account identifier described above.
• Hosting. The service runs on a server that we administer, supplied by a hosting provider. It holds everything described in this policy.
• Backup storage. Encrypted copies of the database may be held by a separate storage provider. Such a provider receives only encrypted files that it cannot read.
• Professional advisers and authorities. Where the law requires it, or to establish, exercise or defend legal claims, we may disclose information to the competent authority or our advisers.

Employers never receive your personal information through UPNEXT. When you follow an apply link you leave UPNEXT and the employer’s or source’s own website and privacy rules apply. The only thing an employer sees is an anonymous daily total of views and apply-link clicks for its own listings.

Some of the providers in section 7, in particular the e-mail delivery provider, are based or process data outside Zimbabwe, so personal information in the messages we send through them can leave the country. The Cyber and Data Protection Act [Chapter 12:07] allows such transfers only where an adequate level of protection is ensured or another lawful route applies. We choose providers that commit to protecting the data they handle, limit what we send to what is necessary, and encrypt backups. Ask us at support@upnext.co.zw if you want to know which providers currently handle your information and where.

No system is perfectly secure and we cannot promise that, but we take these steps:

• Pages are served over HTTPS, and browsers are told to use HTTPS for our site.
• Passwords are stored only as one-way hashes. Sign-in, e-mail-link and form requests are rate limited, and repeated failures are recorded.
• The session cookie cannot be read by scripts on the page and is sent only over HTTPS.
• Staff accounts require a second step at sign-in, have short sessions, and have only the permissions their role needs. Staff actions are written to an audit record. Nobody can approve their own submission.
• The application’s database account cannot change the structure of the database or alter its audit records.
• Logs are scrubbed of passwords, links, session identifiers and e-mail addresses.
• Backups are encrypted and authenticated before they are stored.

If we become aware of a breach that affects your personal information, we will act promptly and notify the authority and affected people as the law requires.

Where we say no fixed date has been set, we are telling you plainly what is true today. We will decide the periods and publish them here.

1. Sign in and ask for deletion on your account page. You will be asked for your password.
2. Your request waits 14 days so that you can change your mind. You can cancel at any time during that period.
3. After that, your name and e-mail address are replaced with a non-identifying placeholder, your saved listings, optional profile, job-alert settings and delivery list, sessions, unused links and two-step devices are deleted, and you can no longer sign in. The address becomes free to register again.
4. We send one final message to the address to confirm, which is removed from our outbox like other sent messages.

What remains. A blank placeholder row for the account (other records refer to it), audit records that carry only an opaque number, and the history of decisions on any organisation you represented. If your account held staff access, an administrator must remove that access first. Backups: deleted data can remain in an encrypted backup until that backup’s turn to be deleted, up to about three months. A backup is used only to restore the service after a failure, and if one is ever restored we carry out completed deletions again before the service reopens.

If you cannot sign in, write to support@upnext.co.zw from the address on the account and we will help after checking it is you.

Under the Cyber and Data Protection Act [Chapter 12:07] you have rights over your personal information, including the rights to access it, to have inaccurate information corrected and to have it deleted. We also let you object to our use of it, as set out below. In practice:

• Access. Write to support@upnext.co.zw from your account’s address. We will send you a copy of what we hold about you in a readable form after checking it is you. There is no self-service download yet.
• Correction. Change your name and profile yourself in your account; for anything else, write to us.
• Deletion. As described in section 11.
• Objection and withdrawal. You can object to processing based on our legitimate interests by writing to us, and withdraw your consent to job alerts at any time in your account or with the link in any alert.
• Complaints. Please contact us first so that we can put things right. You may also complain to the Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ), which is the data protection authority under the Act.

We answer requests without undue delay and will tell you if we need more time or cannot do what you ask, and why. We may need to confirm your identity first, and we will not give your information to anyone else.

Accounts are for people aged 18 or over. Anyone can read public listings without an account, but we do not knowingly create accounts for, or collect profile information from, anyone under 18. If you believe a child has an account, write to us and we will delete it.

When we change this policy we change the version number and the dates at the top of the page and add a line to the version history below. For a material change that affects how we use account holders’ information, we will also give notice on the site and, where e-mail sending is operating, by e-mail before the change takes effect. Earlier versions are available on request.

Zentrik Solutions (Pvt) Ltd, Zimbabwe. Privacy requests and support: support@upnext.co.zw. General enquiries and corrections: info@upnext.co.zw. Website: upnext.co.zw.