Privacy policy

Data controller: [Registered legal entity name — configure in Admin → Settings]
Registration no.: [Company registration number — configure in Admin → Settings]
Physical address: Rumbavu Drive, Glen Lorne, Harare, Zimbabwe
POTRAZ licence: [POTRAZ data controller licence — configure when available]
Data protection officer: [DPO name — configure in Admin → Settings]
General support: support@zimoraglobal.com · +263 78 791 5638
Privacy requests: support@zimoraglobal.com
Effective date: [Publication date — configure in Admin → Settings] · Version 1.0

This Policy is issued under the Cyber and Data Protection Act [Chapter 12:07] and the Cyber and Data Protection (Licensing of Data Controllers and Appointment of Data Protection Officers) Regulations, SI 155 of 2024. It applies to everyone who visits zimoraglobal.com, creates an account, requests a quotation, places an order, sells as a Vendor or contacts us.

1. Summary

• What we collect: details needed to run your account, quote, deliver and support your orders, plus basic website usage data.
• Do we sell your data? No. We never sell or rent personal information.
• Who we share with: only those who help complete your order — Vendors, overseas suppliers, freight and courier companies, clearing agents, ZIMRA, payment providers and our IT providers.
• Does it leave Zimbabwe? For international orders, limited details may be sent to suppliers and carriers abroad, only as needed (section 7).
• Your rights: to be informed, access, correct, object, delete false or misleading data, withdraw consent and complain to POTRAZ (section 10).

2. Information we collect

• Identity & contact: name, phone, email, delivery and billing addresses.
• Account: login details (password stored encrypted), preferences, wishlist, saved addresses.
• Order & quotation: products, product links you submit, sizes/colours, quantities, quotations, order history, delivery notes.
• Customs information: national ID or passport number, and tax number (BP/TIN) for businesses, only when legally required for an import.
• Payment: payment reference, amount, status, last four card digits. Full card details are entered on our payment provider’s secure page and never stored by Zimora.
• Business (Zimora Business): company name, contact person, job role, RFQ specifications and files.
• Vendor: business registration documents, owner/director details, bank or mobile-money payout details.
• Communications: messages, calls, WhatsApp chats, complaints, reviews.
• Delivery & tracking: shipment status, proof of delivery, carrier tracking numbers.
• Technical: IP address, device and browser type, pages visited, cookies (section 9).

We do not intentionally collect sensitive personal information (such as health, religious, political or biometric data). Please do not include it in messages or product requests.

3. Why we use your information

• Creating and running your account — performance of contract.
• Preparing quotations, buying goods, shipping, customs clearance and delivery — performance of contract.
• Taking payments, issuing refunds and preventing fraud — contract / legitimate interest.
• Customer support, complaints and disputes — contract / legal obligation (Consumer Protection Act).
• Customs declarations, tax records and invoices — legal obligation.
• Vendor verification and payouts — contract / legitimate interest.
• Website security and fixing errors — legitimate interest.
• Service messages (order updates, quotation expiry, delivery) — performance of contract.
• Promotional emails, SMS and WhatsApp — your consent (you can withdraw at any time).
• Analytics and advertising cookies — your consent.

4. Automated decisions

We do not make decisions that have legal or similarly significant effects on you based solely on automated processing. Fraud checks that flag an order are always reviewed by a person.

5. Who we share information with

• Marketplace Vendors (Zimbabwe): name, phone and delivery address for the order they fulfil.
• Overseas suppliers & marketplaces: usually only Zimora’s details; where a supplier needs a recipient name, your name and city only.
• Freight forwarders, couriers & local delivery partners: name, phone, delivery address, parcel contents and value.
• Clearing agents & ZIMRA: information required for customs declarations.
• Payment providers & banks: payment amount, reference and details needed to process or refund it.
• IT, hosting, email & messaging providers: data stored on or passing through their systems.
• Professional advisers and authorities: where required by law, court order or to protect rights and safety.

Service providers may only use your information to provide services to us, under written agreements that require confidentiality and security.

6. Third-party marketplaces and websites

When you send us a link from Amazon, Alibaba, eBay, Temu, SHEIN, AliExpress, Etsy, Checkers or any other store, we use it only to check the product and prepare your quotation. Zimora is not affiliated with these companies. If you visit their websites, their own privacy policies apply.

7. Transfers outside Zimbabwe

International orders cannot be completed without sending some information abroad. We transfer personal information outside Zimbabwe only where the recipient country provides an adequate level of protection; or the transfer is necessary to perform your contract or take steps you requested before the contract (for example preparing a quotation); or you have given clear consent. We send the minimum information needed.

8. How long we keep information

• Account details: while active, and up to 2 years after last activity.
• Orders, invoices, payment records: 6 years from the order date.
• Customs and import records: as required by the Customs and Excise Act and ZIMRA.
• Quotation requests that did not become orders: 12 months.
• Complaints and disputes: 3 years after closure.
• Marketing preferences: until you withdraw consent.
• Website logs: 90 days.

9. Cookies

• Essential (no consent needed): login, cart, checkout, security.
• Preferences (no consent needed): remember your delivery city and currency.
• Analytics (consent required): understand how the site is used (e.g. Google Analytics), if enabled.
• Advertising (consent required): measure and show relevant ads (e.g. Google Ads, Meta), if enabled.

You can accept or reject non-essential cookies in our cookie banner and change your choice at any time through the Cookie settings link in the footer, or in your browser settings. Analytics and advertising scripts (if any) are only loaded after you accept non-essential cookies.

10. Your rights

You may ask to be informed, access a copy of your data, object to processing (including marketing), correct false or misleading information, delete false or misleading information, withdraw consent, ask the source of marketing contacts, and complain to POTRAZ.

How to make a request: email support@zimoraglobal.com, use the contact form with topic “Privacy / data request”, or write to our DPO at the address above. We may ask you to confirm your identity. We will respond within 30 days and free of charge, unless a request is clearly excessive.

11. Marketing

We send promotional messages only with your consent. Every email includes an unsubscribe link. You will still receive messages about your orders.

12. How we protect your information

• Encrypted connections (HTTPS/TLS) across the website.
• Passwords stored using one-way hashing; card payments handled by a secure payment provider.
• Access limited to staff who need it, with confidentiality obligations.
• Regular backups, security updates and risk assessments.
• Written security and confidentiality terms with service providers.

Data breaches: if a breach affects personal information, we will notify POTRAZ within 24 hours of becoming aware of it and, where there is a high risk to you, inform you without undue delay (within 72 hours).

13. Children

Our services are intended for adults. We do not knowingly collect information from anyone under 18 without the consent of a parent or guardian.

14. Changes to this Policy

We may update this Policy when our services or the law change. The updated version will be posted on this page with a new effective date. Where changes are significant, we will also notify you by email or a notice on the website.

15. Contact us

Data Protection Officer, Zimora
Email: support@zimoraglobal.com · Phone: +263 78 791 5638
Website: zimoraglobal.com

Placeholders in brackets must be completed with verified legal details in Admin → Settings before treating this page as final legal copy. This page implements the client Privacy Policy requirements and is not a substitute for legal advice.