Privacy Policy

Kuro Educational Consultancy ("we," "us," or "our") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, store, and protect your personal data when you visit our website (regardless of where you visit it from) and when you use our services.

This policy is aligned with the Cyber and Data Protection Act [Chapter 12:07] of Zimbabwe and other applicable Zimbabwean laws regarding data privacy and protection.

If you are located in the European Union or European Economic Area (EU/EEA), or if we process your personal data in connection with EU/EEA-related services, the General Data Protection Regulation (EU) 2016/679 (“GDPR”) may apply to our processing of your personal data.

We process EU/EEA personal data on the following legal bases where applicable:

• Contract performance: to deliver paid services (e.g., Basic/Premium reports) and support you.
• Legitimate interests: to operate, secure, and improve our website and services.
• Consent: where required (e.g., certain marketing communications or cookie preferences).
• Legal obligation: where required by law (e.g., accounting/tax obligations).

The data controller is Kuro Educational Consultancy, a company registered in Zimbabwe. If you have questions about this privacy policy or want to exercise your rights, contact our privacy contact at:

We may collect, use, store, and transfer different kinds of personal data. We separate this into: (A) data collected through the website and (B) data you may provide later for consultancy/application support.

We do not intentionally collect unnecessary sensitive data. Please avoid submitting irrelevant sensitive information.

We accept payments for certain services directly through this website. Payment processing is handled through third-party payment providers.

• We may store: transaction reference, payment status, purchased service, and basic billing-related records required for support and accounting.
• We do not store: full payment card details on our servers (these are handled by payment providers).

Optional but recommended: name your payment provider(s) here once finalized (e.g., Stripe/PayNow/PayPal) for maximum transparency.

We will only use your personal data when the law allows us to. We commonly use your personal data to:

• Provide services: readiness checks, reports, consulting support, customer support.
• Process payments: confirm and fulfil purchased services.
• Comply with legal obligations: including tax/accounting obligations (e.g., ZIMRA reporting, where applicable).
• Improve the site: analytics, performance, and security monitoring.
• Marketing (where permitted): communications about our services; you can opt out at any time.

We may share your personal data with:

• Universities and educational institutions you are applying to (local or international), where necessary.
• Service providers acting as processors who provide hosting, IT, and system administration services.
• Professional advisers (lawyers, auditors, insurers) where necessary.
• Regulators and authorities where reporting is required by law.
• Payment providers to process transactions.

Our website uses cookies and similar technologies to distinguish you from other users and to improve your experience.

We use Google Analytics 4 (GA4) to understand how users interact with our website (for example: page views, session events, device/browser details, and interaction events). This helps us improve performance and content.

You can control cookies through your browser settings. If you prefer to opt out of analytics tracking, you may also use browser-based tools or Google’s analytics opt-out mechanisms where available.

Due to the nature of our business (international education consultancy), your data may be transferred to universities and institutions outside Zimbabwe and may be accessed by us while operating internationally.

Where required, we take reasonable steps to ensure appropriate safeguards are applied for cross-border transfers in line with applicable law, including the Cyber and Data Protection Act [Chapter 12:07] and GDPR where applicable.

We have appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. Access is limited to employees/agents/contractors who need it for business purposes and who are subject to confidentiality obligations.

We retain personal data only for as long as necessary to fulfil the purposes we collected it for, including legal, accounting, or reporting requirements.

Where required by Zimbabwean law and accounting practices, we may retain certain customer and transaction records for a reasonable period for tax and compliance purposes.

Under the Cyber and Data Protection Act [Chapter 12:07], you have rights in relation to your personal data, including:

• Request access to your personal data.
• Request correction of your personal data.
• Request erasure of your personal data (where applicable).
• Object to processing of your personal data.
• Request restriction of processing your personal data.
• Request data portability (where applicable).

EU/EEA users (GDPR): You may also have the right to withdraw consent at any time (where processing is based on consent) and to lodge a complaint with a supervisory authority.

To exercise your rights, contact: support@kuroeduconsultancy.com