SahwiGate Cookie Policy
This Cookie Policy explains how SahwiGate ("we", "our", or "us"), in partnership with the Nyaradzo Group, uses cookies, web beacons, and related local tracking technologies across our event ticketing, funeral transport manifests, and web portals under the Cyber and Data Protection Act [Chapter 12:07] of Zimbabwe.
Essential Checkout Security
Strictly necessary cookies protect your ticket transactions against fraud and preserve your checkout seat reservations.
Promoter & Source Tracking
Organizers use privacy-compliant 30-day referral cookies (sahwi_trk_code) to track marketing campaigns and promoter sales.
You Remain In Control
Accept, reject, or fine-tune non-essential marketing and analytics cookies at any time via our interactive consent manager.
Table of Contents
Preference Center
Customize Your Choices
You can inspect or adjust your cookie consent settings for SahwiGate at any time:
What Are Cookies & Local Identifiers?
Cookies are small alphanumeric text files stored on your computer, smartphone, or tablet when you visit a website. They allow the website to recognize your terminal device across page requests and browsing sessions.
In addition to HTTP cookies, this Policy covers related local storage technologies including HTML5 LocalStorage, session storage, and web beacons / pixels used to maintain checkout states, securely verify authentication, and capture referral performance.
Statutory Framework (POTRAZ & Zimbabwe Law)
Our use of cookies and user terminal equipment storage strictly complies with:
- Cyber and Data Protection Act [Chapter 12:07] (Act No. 5 of 2021), Sections 11–14 governing data subject consent, lawful processing, and transparency.
- Regulatory directives and guidance issued by the Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ) in its capacity as the national Data Protection Authority.
- Consumer Protection Act [Chapter 14:14] concerning consumer disclosure, fairness, and deceptive tracking avoidance.
We guarantee that cookies deployed by SahwiGate are never used to harvest unauthorized surveillance data or surreptitiously intercept confidential communications.
Categories of Cookies Deployed on SahwiGate
We classify all cookies into four distinct operational categories:
These cookies are indispensable for core platform functionality, security, and checkout execution. Without these cookies, services like shopping cart seat reservations, secure payments, and Cross-Site Request Forgery (CSRF) protection cannot be provided. Under Section 11(2) of [Chapter 12:07], these are processed under legitimate operational necessity.
Used to attribute ticket sales and event registrations to specific marketing channels (e.g. Instagram Bio, TikTok campaigns, Facebook Ads, street flyer QR codes) and individual promoters or brand ambassadors. Contains an encrypted referral code with a 30-day attribution window.
Allow event organizers and our platform team to monitor inbound page visits, ticket inventory demand, and checkout abandonment patterns. When configured by an organizer, Meta Pixel tags track conversion efficiency.
Remembers your cookie consent selections across page visits and ensures you are not repeatedly prompted with modal notifications once dismissed.
Comprehensive Cookie Schedule
Below is an exhaustive inventory of cookies utilized on the SahwiGate platform:
| Cookie / Token Identifier | Category | Provider | Purpose & Data Stored | Duration |
|---|---|---|---|---|
sahwigate_session / laravel_session |
Essential | SahwiGate (First-party) | Encrypted user session identifier, ticket cart hold, active login status, and flash notifications. | Session / 2 hours |
XSRF-TOKEN |
Essential | SahwiGate (First-party) | Protects ticket purchases and form submissions against malicious Cross-Site Request Forgery attacks. | Session |
mfa_verified |
Essential | SahwiGate (First-party) | Verifies multi-factor authentication tokens for administrators, event organizers, and helpdesk tellers. | Session |
remember_web_* |
Functional | SahwiGate (First-party) | Maintains persistent login when the user explicitly checks "Remember Me" during authentication. | 5 years |
sahwi_trk_code |
Marketing | SahwiGate (First-party) | Stores the tracking code of the promoter, social media link (Instagram, Facebook, TikTok), or flyer QR code. | 30 days |
sahwi_cookie_consent |
Functional | SahwiGate (First-party) | Stores the user's granular cookie preference choices (Essential, Marketing, Analytics) to prevent banner re-prompting. | 365 days |
seenNewsletterModal |
Functional | LocalStorage | Flag indicating whether the user has viewed or dismissed the promotional newsletter subscription modal. | Persistent |
_fbp / _fbc |
Analytics | Meta / Facebook | Tracks visitor page views and ticket conversions on behalf of event organizers configuring Meta Pixels. | 90 days |
Promoter & Multi-Source Tracking Links
SahwiGate provides event organizers and brand ambassadors with custom tracking links (e.g. sahwigate.com/t/summer-ig or ?ref=promoter26).
- No Personal Snooping: Click logs hash IP addresses using cryptographic SHA-256 one-way hashing to safeguard personal privacy.
- 30-Day Expiry Window: Tracking attribution automatically expires after 30 days.
- First-Party Only: Tracking is maintained directly on SahwiGate without selling data to data brokers or advertising networks.
Third-Party Payment Gateways
When completing ticket purchases, you may be redirected to or interact with certified financial payment service providers, including:
- PayNow Zimbabwe & ZimSwitch
- EcoCash & InnBucks
- SmilePay
- Stripe (for International Card Processing)
These payment processors deploy their own strictly necessary fraud detection and payment session cookies. These transactions are governed by the respective provider's PCI-DSS compliant privacy policies and the National Payment Systems Act [Chapter 24:23].
Managing & Withdrawing Consent
Under Section 14 of the Cyber and Data Protection Act [Chapter 12:07], you have the unqualified right to withdraw or modify your consent to non-essential cookies at any time.
Browser-Level Controls
Most internet browsers automatically accept cookies by default, but provide configuration menus enabling you to block, restrict, or purge cookies:
Please note: Completely disabling essential cookies will prevent ticket checkouts, account logins, and seat reservations from completing successfully.
Contact DPO & POTRAZ Escalation
For questions regarding this Cookie Policy, your privacy preferences, or our data practices:
If you believe your electronic privacy rights have been infringed, you have the right to lodge a complaint with the Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ) at potraz.gov.zw.