Privacy policy

Draft — for review by a lawyer before launch, including against the Cyber and Data Protection Act [Chapter 12:07].

Data controller for website and account data: VendPoint.

What we collect

Account details (names, e-mail addresses, phone numbers), your business profile, and the business records you create in VendPoint: products, stock, sales, customers and staff. Tills send technical information such as app version and sync status.

Why

To provide and support the service, to invoice you, to keep the service secure, and to meet legal obligations such as tax records and ZIMRA fiscalisation where you switch it on.

Who we share it with

Our hosting provider, our e-mail provider, Pesepay for subscription payments (we never see card details), and ZIMRA when fiscalisation is on. We do not sell personal data.

Your customers' data

For customer records you keep in VendPoint, your business is the controller and we process them on your behalf.

Keeping it safe

Each business can only see its own data. Data on tills is encrypted; the portal supports two-factor sign-in; access by our staff is limited and audited.

How long, and deleting your account

While your account exists and as long as tax law requires afterwards. You can ask us to delete your account: the business owner writes to VendPoint support from the owner's e-mail address, and we confirm before anything is removed. Records the tax law requires us to keep are kept until that period ends.

Your rights

You can ask for access to, correction of, or deletion of your personal data by contacting us.