Privacy Policy

Introduction

1.1 Payonify (Pvt) Limited Zimbabwe (hereafter referred to as 'Payonify', 'We', 'Us', 'Our' and 'Ours') acknowledges that information technology should be at the service of every data subject. Information technology shall not violate human identity, human rights, privacy, or individual or public rights.

1.2 Payonify is therefore committed to protecting your privacy, keeping your information safe and ensuring the security of your personal information. In our efforts to provide you with the most effective products and services, your personal information will be collected, processed lawfully, stored securely and not disclosed unlawfully to any third party.

2 Purpose of the Data Protection Policy

2.1 We believe that you should always know the data we collect from you and how we use it, as well as maintain adequate control over both collection and processing. We want to empower you to make the best decisions about your information that is shared with us.

2.2 This Data Protection and Privacy Policy which applies to Payonify and its customers, is based on globally accepted, basic principles on data protection and privacy and ensures adequate level of data protection as prescribed by relevant legal frameworks such as the Cyber and Data Protection Act [Chapter 12:07] and Statutory Instrument 155 of 2024. The policy is applicable to the territorial and material scope provisions of data protection regulations in Zimbabwe.

2.3 Therefore, the purpose Data Protection and Privacy Policy is to give you and our stakeholders guidance and information on how we collect, use, and protect personal information. The privacy statement will tell you:

1. Why we collect your personal information and how we may process it.
2. How and when we share your information with third parties;
3. How we protect your information;
4. How long we hold onto your information;
5. Information on your rights.

3 To whom does the policy apply?

3.1 Payonify Data Protection and Privacy Policy applies to 'You', meaning:

1. All Customers and/or users who are natural persons or living individuals; and
2. All Customers and/or users who are organisations;
3. All Payonify employees and job applicants or prospective employees.
4. All Payonify suppliers, partners, and service providers.

4 Why does Payonify collect and process Personal Information?

4.1 Processing of personal data means any operation or set of operations in relation to such data, whatever the mechanism used, especially the obtaining, recording, organisation, retention, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, blocking, deletion, or destruction.

4.2 Payonify collects and processes your personal information for a variety of business purposes. These include, but are not limited to:

1. Verifying your identity as per KYC legal requirements;
2. Completing transactions effectively and billing for products and services;
3. Responding to your request for service or assistance;
4. Anticipating and resolving issues and concerns related to our products and services;
5. Promoting and marketing our products and services which may benefit you and be related to products and services you are currently enjoying; and
6. Ensuring all payments are directed to the correct bank accounts.
7. Prevent fraud and other financial crimes by obtaining personal information of directors of an entity and correct bank account statements

4.3 Payonify may keep a log of the activities performed by you on our systems, applications, and websites by using various internet techniques such as web cookies, web beacons, server log files, etc. for analytical purposes, for analysis of the agreeableness of various features in accordance with requisite legal requirements. This information may be used to provide you with a better experience on our platforms.

4.4 At any time while you are browsing our websites or accessing our applications, if you do not wish to share information, you may opt out of receiving the cookies from our site by making appropriate changes to your browser privacy or mobile application settings.

4.5 If you do not provide your consent for usage of personal information or later withdraw your consent for use of the personal information so collected, Payonify will not be able to provide its services to you.

5 What Personal information do our customers share with us?

5.1 Payonify and its authorised third parties may collect, store and process Personal Information while providing our products, services and while accessing their accounts and profiles on our website.

5.2 Personal data and/or sensitive information collected and held by us may include:

1. Names of individuals
2. Physical and postal addresses
3. Email addresses
4. Mobile Phone numbers
5. Identity Number
6. Occupation
7. Proof of residence
8. Entity information contained in supporting documents such as proof of business address, bank statements, bank account numbers, tax clearance certificates, CR6/CR14, trading license

6 Principles we adhere to when managing your Personal Data

6.1 The Payonify Data Protection and Privacy Policy comprises the internationally accepted data privacy principles without replacing the existing national laws. It supplements the national data privacy laws. We rely on the following principles in processing your data:

6.2 Payonify also adheres to the principle of fairness and lawfulness. When processing personal data, the individual rights of the data subjects is protected. Personal data will be collected and processed in a legal and fair manner.

Collected data shall be adequate, relevant, and not excessive in relation to the purposes for which they are obtained and their further processing. In this case, the purpose of collecting information is to facilitate payment integrations.

6.3 Individual data should be processed upon voluntary consent of the person concerned. The consent shall be granted electronically upon accepting the conditions of this privacy statement.

7 Restriction to a specific purpose

7.1 Personal will be processed only for the purpose that was defined before the data was collected. Personal data shall be obtained for specified, explicit and legitimate purposes, and shall not subsequently be processed in a manner that is incompatible with those purposes – the purposes are strictly restricted to facilitating payments for merchants and businesses.

8 Transparency

8.1 Customers will be informed of how his/her data handled. When the data is collected, the data they will be made aware of, or informed of the purpose of data processing and any third parties to whom the data might be transmitted.

8.2 Processing of personal data is only done after receiving the consent of the customer.

9 Confidentiality and Data Security

9.1 Personal data is subject to data secrecy. It will be treated as confidential on a personal level and secured with suitable organisational, physical and technical measures to prevent unauthorised access, illegal processing, or distribution, as well as accidental loss, modification, or destruction.

10 Data Retention

10.1 Personal data shall be retained in a form that allows the identification of the data subjects for a period no longer than is necessary for the purposes for which they are obtained and processed. When we dispose of your personal information, we use reasonable procedures to erase it or render it unreadable/anonymised.

All accounts will be suspended after 1 year of inactivity.

An account can also be suspended upon request by the user.

11 Data Integrity

11.1 Personal data on file must be correct, complete, and up to date. Suitable steps are taken to ensure that inaccurate or incomplete data are updated.

Customers have the right and option to update their personal information whenever it changes to ensure it is always accurate.

12 Consent to Data Processing

12.1 Personal information will only be processed upon consent of the person concerned. Declarations of consent must be submitted voluntarily. Transmission of personal data to recipients outside or inside Payonify is subject to the authorisation requirements for processing personal data and requires customer consent.

13 Processing Security

13.1 Personal data will be safeguarded from unauthorised access and unlawful processing or disclosure, as well as accidental loss, modification, or destruction.

14 Processing information of children

14.1 We will only collect and process the personal information of a child with the consent of parents or legal guardian.

14.2 We may also need to process the information of a child where it is necessary to exercise or defend a right or obligation in law, or where the personal information has been made public by the child with the consent of parents or legal guardian.

15 What are your Rights?

1. Right to be informed that we are collecting personal data about you
2. Right to access personal information
3. You have the right to make a request for a copy of the personal information that Payonify holds about you as permitted by law.
4. You have the right to correct information held about you to ensure it is accurate, relevant, complete, and not excessive.
5. Right to object to use of personal information and to delete your Payonify account.
6. You have the right to request that we erase your personal data in certain circumstances as permitted by law. However, in instances where the basis for retaining the data is Legal Obligation, you may not be able exercise your right to request deletion.
7. You have the right to withdraw consent object to Payonify processing your personal information, in certain circumstances as permitted by law. However, in instances where the basis for processing is Legal Obligation, you may not be able exercise your right to object.

16 Right to opt-out of marketing messages

16.1 Payonify will not issue targeted marketing to you unless you consent for us to do so. If you have previously opted in to receive personalised content based on how and where you use our services, you can also opt out at any time.

17 To whom will we disclose your information?

17.1 Protecting our interests may sometimes require the disclosure of specific client information to third parties. Where required to protect the public interest, information regarding a client's debt may be disclosed to credit bureaus or debt collection agencies. Entities and third parties with whom we may share your information may include:

1. Banks and financial institutions;
2. Regulatory authorities;
3. Law firms and auditors;
4. Insurers;
5. Courts of law
6. the Zimbabwe Republic Police; and
7. other third parties as may be required either contractually, by law, or legitimate interest.

17.2 When sharing your information with recipients in other jurisdictions, we will ensure that they adhere to similar privacy protection requirements as we do – either by law or by legal agreement. We will not sell your information to third parties and will only market to you in line with our legal obligations and your marketing preference, using the communication method you chose.

18 Contact Us

18.1 If you would like to contact us on any topics in this Privacy Policy, or you would want to exercise any of the rights mentioned above, you can contact our Data Protection Officer and our privacy team will get back to you.

Payonify (Pvt) Ltd Zimbabwe
Email: legal@payonify.co.zw

18.2 We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

18.3 We try to respond to all legitimate requests within reasonable time. Occasionally it could take us longer if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

19 Changes to Policy

19.1 We reserve the right to modify this Data Privacy Policy as and when required.

19.2 We will post any changes to our Data Protection and Privacy Policy on our website: www.payonify.co.zw

19.3 We encourage you to check frequently to see the current Data Protection and Privacy Policy to be informed of how Payonify is committed to protecting your information and providing you with improved products and services to enhance your experience.

19.4 Any amendment or modification to this policy will take effect from the date of notification on the Payonify website

This policy is effective as of 16 March 2026.