1. Our commitment
RIC Development Botswana is committed to handling personal data responsibly, transparently and securely in connection with Sarona City.
Our approach is designed to support applicable Botswana data-protection requirements and recognised principles of responsible information management.
Personal data should be collected for a clear purpose, protected appropriately and retained only while it remains reasonably necessary.
2. Our data-protection principles
We aim to ensure that personal data is:
- Processed lawfully, fairly and transparently
- Collected for specific and legitimate purposes
- Limited to information reasonably necessary for those purposes
- Kept accurate and corrected when necessary
- Retained only for an appropriate period
- Protected against unauthorised access, loss, alteration and disclosure
- Accessible only to authorised individuals with a legitimate operational requirement
3. Data collection and minimisation
The Sarona City website collects information required to respond to property enquiries, provide requested information and arrange site visits.
This may include:
- Name and contact details
- Property and development interests
- Preferred visit dates and times
- Messages submitted through the enquiry form
- Consent and submission records
- Limited technical information used for security and diagnostics
The general enquiry form should not be used to submit identity documents, payment-card information, passwords or banking credentials.
4. Purpose, fairness and consent
Personal data is used for purposes communicated at collection, including responding to enquiries, arranging visits, providing property information and protecting website operations.
Consent obtained through the enquiry form authorises the Sarona City sales team to use the submitted information to respond to that enquiry.
Information should not be repurposed for unrelated activities without an appropriate lawful basis and, where required, further notice or consent.
5. Accuracy and correction
We take reasonable steps to maintain accurate and relevant records. Individuals may request correction of information that is inaccurate or incomplete.
Visitors are encouraged to provide accurate contact details and notify the sales team if submitted information changes.
6. Access and security controls
Access to personal data is restricted according to operational responsibility. Safeguards include:
- Authenticated administrative access
- Secure HTTPS connections
- Protected browser sessions
- Input validation and database protections
- Role-appropriate access controls
- Restricted access to configuration files
- Secure error handling
More information is available on our Security page .
7. Retention and secure disposal
Personal data is retained only for as long as reasonably necessary to:
- Manage and follow up on enquiries
- Maintain appropriate business records
- Resolve disputes or complaints
- Protect legal rights
- Meet applicable regulatory obligations
When data is no longer required, it should be securely deleted, anonymised or archived in accordance with applicable retention requirements.
8. Service providers
Approved service providers may support website hosting, infrastructure, maintenance or other operational services.
Providers should receive only the information reasonably necessary to deliver the relevant service and should be subject to suitable confidentiality and security requirements.
9. International data transfers
Some technology or hosting providers may process information in jurisdictions outside Botswana.
Where an international transfer occurs, reasonable steps should be taken to assess the provider and apply appropriate contractual, organisational and technical safeguards.
10. Data-security incidents
Suspected loss, unauthorised access or disclosure of personal data should be reported and investigated promptly.
Response actions may include containment, risk assessment, preservation of relevant evidence, corrective measures and legally required notifications.
11. Individual rights
Subject to applicable law, individuals may request:
- Information about how their data is processed
- Access to personal data held about them
- Correction of inaccurate information
- Deletion where retention is no longer justified
- Restriction of certain processing
- Withdrawal of consent for future communication
- Review of a concern about the handling of their personal data
Identity verification may be required before a request is completed.
13. Contact us
To submit a data-protection question, correction request or privacy concern, contact: