ZZim Mall
Sign inSign up

Privacy Policy

Last updated: 22 July 2026

1. Who we are

Zim Mall ("we", "us") operates an online marketplace connecting customers, independent businesses, and delivery transporters in Zimbabwe. This policy explains what information we collect, why, and the choices you have. Questions: contact us via the details on our homepage.

2. Information we collect

  • Account details — name, email address, country, city, and (optionally or where required) phone number.
  • Business details — for sellers: business name, category, location, contact details, and verification documents.
  • Transporter details — for drivers: phone, city, vehicle information, identity and licence documents, and a GPS fix at registration.
  • Orders & delivery — items ordered, delivery address, a GPS delivery pin you set at checkout, and live location pings from a driver during an active delivery only.
  • Messages & calls — messages you exchange on the platform, and call records (who called whom, when, duration — not call audio/video content, which is transmitted peer-to-peer and not stored).
  • Payments — payment method chosen and transaction references. Card/wallet payments are processed by licensed payment gateways; we never see or store your card number or wallet PIN.
  • Technical data — device/browser information, and product-usage events (e.g. searches, pages viewed) used to improve the service.

3. How we use it

To operate the marketplace: create and secure your account, process orders, arrange and track deliveries, enable messaging and calls between order participants, prevent fraud and abuse, provide support, and improve the product. We do not sell your personal information.

4. Who we share it with

  • Order participants — when you place an order, the shop (and the assigned driver) receive the details needed to fulfil it: your name, phone, delivery address and pin. A driver's live location is shared with the customer and shop during an active delivery.
  • Service providers — infrastructure and database hosting (Supabase), and payment gateways, bound by their own security obligations.
  • Legal — where required by Zimbabwean law or to protect users and the platform.

5. Retention

Account data is kept while your account is active. Order, payment, and delivery records are retained as required for business and legal purposes. Messages remain until deleted. You may request deletion of your account and associated personal data (subject to records we must keep by law).

6. Security

Data is stored with access controls enforced at the database level (row-level security), encrypted in transit, and restricted so that participants only see what their role in an order requires. No system is perfectly secure — report concerns to us immediately.

7. Your rights

Subject to Zimbabwe's Cyber and Data Protection Act, you may request access to, correction of, or deletion of your personal information, and you may withdraw optional consents (like marketing) at any time. Contact us to exercise these rights.

8. Changes

We will update this policy as the platform evolves and change the date above. Material changes will be announced in-app.