PRIVACY POLICY

THIS PRIVACY POLICY IS PART OF OUR AGREEMENT WITH YOU.

This privacy notice forms part of our agreement with you. You should read it along with the terms and conditions that apply.

WHO YOU ARE SHARING YOUR INFORMATION WITH

OK Zimbabwe Limited (“OK Zimbabwe”) a limited liability company registered in Zimbabwe. OK Zimbabwe operates under the brands; OK, Bon Marche; and OKmart. When you share your information with one of these entities, you may also be sharing it with one of the others. In addition, your personal information may also be used in the day-to-day business of providing OK Zimbabwe Limited products to you.

In some instances you may also be sharing your information with other companies that are part of OK Zimbabwe or other companies that help us provide services to you. This notice does not apply to them.

THE ACCESS TO INFORMATION AND PROTECTION OF PRIVACY ACT PROTECTS YOU.

The Access to Information and Protection of Privacy Act (AIPPA) is aimed at protecting your personal information and prescribes what we must and must not do with it.

THIS NOTICE MAY CHANGE FROM TIME TO TIME.

From time to time we may have to amend this notice to accommodate changes in our business or services or if legal requirements change.

WHY WE NEED YOUR INFORMATION

We ask for your information to make sure that we can offer the right product at the right time and in the right place. This includes making sure that you can receive the benefit of the any promotions that OK Zimbabwe runs from time to time, analysing your data to better understand what your needs are, and sending you promotional information. We collect and will process your information for the following purposes:

1. To process your orders for goods or services and for making related decisions, including by verifying your identity, credit status, contact details, financial track record and otherwise ascertaining that you qualify for our services from time to time;
2. To take such actions as may be required to enable and improve your use of our services and to exercise our rights and comply with our obligations in respect thereof, including by processing and recording your product and service requests and transactions, managing your accounts and policies, delivering our products and services to you, communicating with you regarding your use of our products and services and collecting payments you may owe us;
3. To ensure that the information we receive and hold about you is accurate, complete and up to date;
4. To prevent, investigate and prosecute fraud, money laundering, terrorism, abuse of our services and other unlawful activities;
5. To comply with legal and regulatory requirements, for audit purposes and legal proceedings;
6. To conduct market research and business analysis, understand your preferences, learn more about the products and services that you are interested in and improve the products and services we offer to you;
7. To inform and provide you with the opportunity to make use of products, services and benefits that we offer and that we believe may be of interest to you to the extent that we are lawfully permitted to do so; and
8. For such other purposes as you may consent to or as may otherwise be lawfully permitted, including for the purposes of protecting our and/or your legitimate interests and/or that of our suppliers and other customers.
9. We collect information to analyse purchasing patterns.

Please note that we will not contact you telephonically for unsolicited marketing purposes or send unsolicited marketing communications to you by mail, facsimile, SMS or electronic mail if you have objected to receiving such communications by way of a public register recognised for such purposes by law or by notifying us of your objection in the prescribed manner. We will provide you with reasonable opportunities to object to receiving marketing communications in the manner prescribed by law, including upon your application to subscribe to our services and on each occasion when we send you such communications.

HOW WE COLLECT INFORMATION

You recognise that in order to make use of our products and services you will have to provide us with certain information pertaining to you, failing which we may not be able to render such products or services to you. However, the choice of providing us with information remains yours at all times. We may collect information about you as follows:

1. From you, including when you apply for our services, submit forms, requests or transactions, use our website or otherwise make use of our services;
2. From public registers, credit bureaus, money laundering, fraud prevention and law enforcement agencies, including for the purposes of processing your application for credit or services and to reassess your status from time to time;
3. From people and entities employed by us to provide services for us, which may include debt collection services, cheque verification services, communications services and data hosting, processing and management services;
4. From persons employed by you to provide services to you, including communications services and data hosting, processing and management services; and
5. From such other persons as you may consent to or which may be legally entitled to provide us with information about you.

We may also make enquiries with anyone for the purposes of verifying the accuracy of information already given to us.

INFORMATION WE MAY HOLD

We may record and hold the following types of information about you:

1. All information of the type as contained in the forms or orders you may submit to us as well as any other details about you that you may provide to us subsequently, including your name, contact details, age, race, and identity number;
2. Information we used to process your application for orders for goods or services and to assess your status from time to time, including as received pursuant to our enquiries with public registers, credit bureaus, money laundering, fraud prevention and law enforcement agencies or your current or previous insurance companies. Information received from these entities may be linked to other people with whom you have financial associations, including members of your family and your business partners and associates;
3. Details of your preferences regarding our products and services, and other demographic and lifestyle information;
4. Details of the accounts you and the members of your family hold and transactions you and the members of your family have previously concluded with or through us; and
5. Details of when you contact us and when we contact you, including the IP addresses, electronic mail addresses and telephone numbers you contact us from and the content of the communications between us, which we may record.

We may hold your information collected hereunder for as long as you are registered to use our services and for at least five years thereafter or such longer period as may be required or permitted by law.

SHARING YOUR INFORMATION

Keeping your information secure is one of our most important responsibilities. We cannot disclose your information unless legally permitted thereto. Save as set out below, we will not transfer your information to a third party without your consent unless legally obliged thereto. In particular, we do not sell lists or databases with our clients’ information and will not provide any of your information to entities outside our group so as to permit them to market their goods or services to you. You agree that we may transfer your information to the following people and organisations in pursuit of the data processing purposes set out in this policy:

1. To the divisions and entities in the OK Zimbabwe, including to the directors, employees, contractors, agents, auditors, legal and other professional advisors of the divisions and entities in the OK Zimbabwe group;
2. To banks, credit bureaus and fraud prevention agencies, who may link your information with those of your family members and business associates, provided that we will notify you in advance before we provide adverse information about you to a credit bureau and, upon request, provide you with a copy of such information as required by law;
3. To your bank and to the other issuers of payment cards issued to you at your request, and to any other person that supplies, supports or underwrites a service or product we provide to you insofar as it pertains to your subscription to and use of such service or product;
4. To governmental, judicial, regulatory and law enforcement bodies and agencies, including the Zimbabwe Revenue Authority ;
5. To persons employed by us to provide services on our behalf that adhere to principles similar to ours regarding the treatment of your information, including delivery, debt collection, data hosting, processing and management services;
6. To any person to whom we cede, delegate, transfer or assign any of our rights or obligations pertaining to the products or services provided to you or contracts concluded with you;
7. To any person that acts as your legal guardian, executor of your estate, curator or in a similar capacity;
8. To any person that guarantees or stands surety for the performance of your obligations to us insofar as it pertains to such guarantee or suretyship;
9. To such other persons as may be permitted by applicable law or that you may consent to, including persons and entities who may request such information to evaluate your creditworthiness.

Please note that our sharing of your information may also involve the transfer thereof to third parties outside Zimbabwe. In the event of such transfer, we will require that such third party also subscribes to protecting your information on terms similar to the terms of this policy.

SECURITY

We will strive at all times to ensure that your records will always be protected against unauthorised or accidental access, processing or loss. We maintain this commitment to data security by implementing appropriate reasonable technical and organisational measures to safeguard and secure your information, including by using appropriate cryptographic techniques and access control mechanisms. If we use a third party to host, manage or process your data on our behalf we will require that such third party also commit to implementing appropriate reasonable technical and organisational measures to safeguard and secure your information. If we are not prevented by a law enforcement or regulatory agency, we will notify you as soon as practicably possible in writing and at your registered postal or email address if we believe that unauthorised access to your information may have occurred, providing you with such information as you may reasonably require to implement protective measures.

WHAT ROLE CAN YOU PLAY IN PROTECTING YOUR INFORMATION AND ACCOUNTS?

• Never share your user name or number, your personal identification number (PIN) or password with anyone or submit it to any website that you do not recognise and fully trust and never send such information to us or anyone else via unencrypted electronic mail or other unprotected communication mechanism;
• Only provide your user identification name or number, your PIN or password to us via our website when your browser shows a Secure Socket Layer (SSL) connection directly to us;
• Do not leave your computer unattended after you have entered your PIN and password to access your accounts via our website;
• Always log or sign off at the end of a web site session;
• Change your web password regularly;
• Keep your contact details as provided to us up to date and accurate, including by promptly notifying any changes thereto to us; and
• Promptly report any suspected security breach, loss or theft of your user identification name or number, your PIN and/or password and of any cards providing access to your accounts;

USE OF COOKIES

When you visit any of our websites we may collect certain information about your usage preferences and history. Such information will be stored in a cookie on your computer’s hard drive by your web browser. Cookies are intended to assist and improve your use of our websites. Most browsers accept cookies automatically, but usually you can alter the settings of your browser to prevent automatic acceptance. If you choose not to receive cookies, you may not be able to use all the features of our website.

Every time you connect to our website we store web server logs which show your IP address (the unique number which your machine uses when it is connected to the Internet); what you looked at; whether the page request was successful or not, and which browser you used to view the pages. The use of this data is strictly for statistical and personalisation purposes only. This helps us understand which areas of the site are of particular interest and also which pages are not being requested. It also tells us how many hits and page requests we get.

The type of information we collect includes the URL you came from, IP address, domain type, browser type, the country and telephone code where your device is located, the web pages viewed during your visit, the advertisements you clicked on, and any search terms you entered on our website (user information).

YOUR RIGHTS REGARDING YOUR INFORMATION

Provided that you give us suitable and adequate proof of your identity, you have a right to know which records we hold about you and to know the identity of all third parties which have been or are to be given access thereto. This can be done by submitting a written request in the prescribed form to us. We may charge a reasonable prescribed fee as notified to you in advance for processing such requests. We will not be obliged to provide you with information to the extent that we are prohibited or permitted thereto by applicable law.

You also have the right to require us to correct or erase any records we hold about you that we are no longer permitted to retain, is inaccurate, irrelevant, excessive, out of date, incomplete, misleading or has been unlawfully obtained. This can be done by submitting a written request in the prescribed form to us. We will notify you of the steps taken as a result of your request.

Please contact us via our Customer Service page. We will provide you with the prescribed form and the amount of any applicable prescribed fee.

It can take us up to 21 days to respond to your request.

If you want us to delete all personal information we have about you, you will probably have to terminate all agreements you have with us. We cannot maintain our relationship with you without having some of your personal information.

We can refuse to delete your information if we are required by law to retain it or if we need it to protect our rights. You can request access to the information we hold about you by contacting our call centres.

OBJECTIONS

Please contact us via our Customer Service page if you want to object to our collection, processing, recording, protection, use or sharing of your information. Please note that we may require a reasonable period to comply with your objection and can only do so if permitted thereto by law and such compliance does not unreasonably prejudice our legitimate interests or that of a third party.

WE CONDUCT SURVEYS FROM TIME TO TIME.

We send out surveys from time to time. You can choose to respond or not, and you can unsubscribe from receiving them.

WE COLLECT INFORMATION WHEN YOU CONTACT OUR CUSTOMER SERVICE TO RESPOND TO YOUR QUERY.

When you contact our customer services, we collect information that helps us to categorise your query, respond to it and, if applicable, investigate what went wrong. We also use this information to track potential problems and trends to customise our support responses to provide a better service to you.

When you contact our customer service, the information you give us will be used to investigate and resolve your query, complaint or request. Our customer service are committed to keeping your personal information safe and secure. Please take care not to provide more information than what we ask for. Never give us your banking details, credit card details or any passwords. Any unnecessary information you give us will not be retained.

WE DON’T COLLECT THE INFORMATION OF PERSONS UNDER 18.

We do not collect the information of persons under 18 without the consent of their parents or guardians. If you are under the age of 18 you must not provide personal information to us without the consent of your parent or guardian.

WE ONLY SHARE YOUR PERSONAL INFORMATION WITH COMPANIES THAT HELP US TO PROVIDE OUR SERVICES TO YOU AND WHO HAVE AGREED TO KEEP YOUR INFORMATION SECURE, CONFIDENTIAL AND TO ONLY USE IT FOR AUTHORISED PURPOSES.

Your privacy is important to us, which is why it is our policy not to share your personal information with other companies. We will never sell your personal information.

We use suppliers or service providers who we trust to provide services to us and sometimes that involves sharing your information with them. They operate under strict requirements aimed at keeping your personal information secure and confidential and they will only use it for the purpose for which we have sent it to them.

SOMETIMES WE HAVE TO SEND YOUR PERSONAL INFORMATION TO OTHER COUNTRIES.

Some of these service providers may be located in other countries that may not have the same levels of protection of personal information as Zimbabwe. If this is the case, we require that they undertake to protect the personal information of our customers to the same level that we do.

SOME OF YOUR INFORMATION IS AVAILABLE ONLINE.

You are able to view and correct some of your information on OK Online under My Account section.

WE WILL INFORM YOU IF YOUR PRIVACY IS EVER COMPROMISED.

Although we cannot prevent all security threats, we have measures in place to minimise the threat to your privacy. We will let you know of any breaches which affect your personal information.