Privacy Notice

Privacy Notice
Created: January 2026

National Handling Services (“NHS”, “we”, “us”, or “our”) are committed to protecting the privacy and personal data of our clients, customers, employees, partners, contractors, and other stakeholders. This Privacy Notice explains how we collect, use, store, share, and protect personal data in accordance with the Cyber and Data Protection Act [Chapter 12:07] of Zimbabwe and other applicable laws. By engaging with our services or interacting with us, you acknowledge that you have read and understood this Privacy Notice.

Who We Are

National Handling Services provides ground handling and related aviation services, including passenger handling, baggage handling, cargo operations, and support services at airports within Zimbabwe.

 Consent

By using our Services, you consent to our Privacy Policy and agree to its terms.

Personal Data We Collect

We may collect and process the following categories of personal data:

Passengers and Customers

 -Full names
 -National ID or passport details
 -Contact details (phone number, email address)
 -Travel and flight information
 -Baggage and cargo details
 -Special service requests
 -CCTV Footages

Employees and Job Applicants

 -Identification details
 -Contact and residential information
 -Employment history and qualifications
 -Payroll and banking details
 -Performance, training, and disciplinary records

Business Partners and Service Providers

 -Names and contact details
 -Company and contractual information
 -Billing and payment information

How We Collect Personal Data

We collect personal data through:
 -Direct interactions (check-in, cargo handling, employment applications) Airline partners and regulatory authorities
 -CCTV and access control systems within our facilities
 -Electronic systems, forms, and correspondence

Purpose of Processing

We process personal data for the following purposes:
 -Provision of ground handling and aviation support services
 -Passenger check-in, baggage, and cargo processing
 -Compliance with aviation, safety, and security regulations
 -Employment administration and human resources management
 -Billing, invoicing, and financial management
 -Customer service, communication, and complaint handling
 -Security monitoring and fraud prevention

Legal Basis for Processing

We process personal data where:
 -It is necessary for the performance of a contract
 -It is required to comply with legal or regulatory obligations
 -It is necessary for our legitimate business interests

 -Consent has been provided, where applicable

Data Sharing and Disclosure

We may share personal data with:
 -Airline partners and aviation authorities
 -Government and regulatory bodies
 -Service providers and contractors acting on our instructions
 -Law enforcement agencies, where required by law
We do not sell personal data to third parties.

Cross-Border Data Transfers

Where personal data is transferred outside Zimbabwe, we ensure that appropriate safeguards are in place in line with the Cyber and Data Protection Act to protect your personal data.

Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures include access controls, secure systems, and staff awareness.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was
collected or to comply with legal and regulatory requirements.

Your Rights

Under Zimbabwean data protection law, you have the right to:
 -Access your personal data
 -Request correction of inaccurate or incomplete data
 -Object to or restrict processing in certain circumstances
 -Request deletion of personal data, where legally permissible
 -Lodge a complaint with the relevant data protection authority

Children’s Information

We process children’s personal information only for aviation, safety, security, and travel related purposes and strictly in compliance with the Cyber and Data Protection Act [Chapter 12:07] of Zimbabwe. Such information is collected and processed with the consent of a parent or legal guardian, except where required by law or aviation security regulations. Appropriate safeguards are applied to protect children’s data at all times.

Cookies and Website Use

Where applicable, our website may use cookies or similar technologies to enhance user experience and monitor performance. Details will be provided on the website where relevant.

Changes to This Privacy Notice

We may update this Privacy Notice from time to time. Any changes will be communicated through appropriate channels and updated on our official platforms.

Data Controller Contact Details

For questions, requests, or concerns regarding this Privacy Notice or the handling of
personal data, please contact:

Organisation Name: National Handling Services

Registered Address: Robert Gabriel Mugabe International Airport, Harare, Zimbabwe

Telephone: +263 8677575138

Email: dpo@nhszim.com

Data Protection Officer: A Chipunza

This Privacy Notice forms part of NHS’s commitment to lawful, fair, and transparent processing of personal data.