Privacy Policy
Last updated 8 October 2026
This policy explains how ZimbaLink collects, uses, shares and protects information across its marketplace, community, messaging and business tools.
Who controls your information
Nhava Holdings operates ZimbaLink and is the data controller responsible for the personal information described in this policy. For privacy requests, contact privacy@zimbalink.co.zw.
Information we collect
We collect account details such as your name, email address and phone number. When you use marketplace features, we also process listings, messages, orders, reviews, reports, payment references and business information you choose to provide.
Device permissions
Location is requested only when you choose a nearby-search, delivery or address feature. Camera, photos and files are accessed only when you choose to upload media. Notifications are optional and can be changed in your device settings.
How information is used
We use information to operate accounts, publish listings, connect buyers and sellers, prevent abuse, provide support, process transactions and improve reliability. We do not sell your personal information.
Sharing and security
Information is shared with other users only when needed for the feature you choose, such as a public listing or an accepted order. Service providers may process data for hosting, messaging, payments, analytics and security under appropriate safeguards.
Retention and deletion
Signed-in users can permanently delete their account directly in the app. People who cannot sign in can submit a public deletion request for ownership verification, after which we delete or anonymise account data within 30 days. Limited transaction, fraud-prevention, safety and legal records may be retained where required.
Cookies and similar storage
ZimbaLink uses essential cookies or device storage for sign-in, security, preferences, theme, language and Data Mode. With consent where required, analytics storage helps measure performance and errors. Advertising measurement must not be used for sensitive profiling. You can block non-essential storage through the cookie notice or browser settings, although essential features may still require session storage.
Zimbabwe data protection
We aim to handle personal information in line with Zimbabwe's Cyber and Data Protection Act [Chapter 12:07], applicable regulations and guidance from POTRAZ as the Data Protection Authority. Licensing, data protection officer and cross-border transfer requirements depend on the platform's processing activities and must be confirmed with local counsel and POTRAZ. For privacy requests, contact privacy@zimbalink.co.zw.
Your choices and contact
You may access and correct profile information through your account, control permissions in device settings, report misuse, block users and request deletion. For privacy help, email privacy@zimbalink.co.zw.