I'm not based in Zimbabwe or the UK but I have users there — do the rules apply?

Here is the free check that answers this for your organisation.

Third-Sector Eligibility Check

Tells you which regulators can reach you, and whether you are genuinely out of scope.

Data Protection Needs Assessment
Your flagship 0-100 privacy exposure score, with a ranked list of what to fix first. 8 to 25 questions, depending on what your organisation actually does.
Open this check
Where should I start?
Answers five questions and tells you which checks you actually need, in what order.
Open this check
POTRAZ Tier & DPO Checker
Works out whether the law treats you as a data controller and which licensing tier your numbers put you in.
Open this check
What will registration cost?
Estimates your licence fee, application fee and DPO certification costs from your data-subject numbers.
Open this check