Privacy Policy

Last updated: June 2026

PaMarket Zimbabwe ("PaMarket", "we", "us", "our") is committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains what data we collect, why we collect it, how we use and protect it, who we share it with, how long we keep it, and what rights you have over it. By using PaMarket you agree to the practices described in this Policy.

1. Who Is the Data Controller

PaMarket Zimbabwe is the data controller responsible for your personal information collected through the PaMarket mobile application and website. This Policy is governed by the Zimbabwe Cyber Security and Data Protection Act [Chapter 12:07] and applicable Zimbabwean data protection law. Contact us at info@pamarketzw.com for any privacy-related enquiry.

2. Information We Collect

Account and identity data: your full name, email address, phone number, and profile photo when you register or update your profile.

Verification data: a copy of your national ID or passport when you voluntarily request a verified badge. This document is reviewed by our admin team and permanently deleted within 30 days of the review outcome, regardless of approval or rejection.

Listing data: photos, titles, descriptions, prices, categories, provinces, and suburbs you provide when posting a listing or creating a Business Shop.

Business data: business name, type, description, logo, cover image, contact details, province, suburb, and product catalogue if you create a Business Shop.

Job and CV data: employment history, skills, education, province, and any other information you include in a Hire Talent candidate profile or job posting.

Message and communication data: the content of messages, images, offer cards, and location pins you send and receive through the in-app messaging system.

Push notification token: a device token generated by Google Firebase Cloud Messaging (Android) or Apple Push Notification Service (iOS) to enable delivery of notifications about messages, listing activity, and account events. You can withdraw this permission at any time in your device Settings.

Usage and behavioural data: pages viewed, search queries, listings saved or reported, categories browsed, and other in-app actions, collected to understand how users engage with the platform and to improve the service.

Device and technical data: device model, operating system version, app version, IP address, and crash/error logs, used for technical troubleshooting and security monitoring.

3. Legal Basis for Processing

We process your personal data on the following grounds:

Contract performance: to register your account, display your listings, deliver messages, and operate the core features of the platform that you have signed up for.
Legitimate interests: to detect and prevent fraud, abuse, spam, and illegal content; to improve the platform; to monitor the security of our systems; and to respond to reports of violations.
Consent: to send push notifications (you can withdraw consent at any time via device settings); to collect verification documents (voluntary and withdrawable).
Legal obligation: to comply with lawful requests from Zimbabwean authorities, including the Zimbabwe Republic Police and POTRAZ, when legally required.

4. How We Use Your Information

To create and manage your account and verify your identity.
To display your listings, Business Shop, candidate profile, or job postings to other users.
To deliver in-app and push notifications about messages, offers, listing status, and account events.
To moderate listings and enforce our Terms of Service and Community Guidelines.
To investigate reports of abuse, fraud, or illegal content and take enforcement action.
To improve the app's features, design, and performance based on aggregated usage analytics.
To detect and prevent security threats, unauthorised access, and fraudulent behaviour.
To comply with legal obligations and respond to lawful requests from authorities.

5. Sharing and Service Providers

We do not sell, rent, or trade your personal information to any third party. We share your data only with the following trusted service providers ("sub-processors") strictly for the purposes described:

Supabase Inc.: database hosting, user authentication, file storage, and real-time subscriptions. Data is hosted on Amazon Web Services (AWS) in the eu-west-1 (Ireland) region.
Google LLC (Firebase): Android push notification delivery via Firebase Cloud Messaging (FCM). Google receives only an anonymous device token and the notification payload; it does not receive your full profile.
Apple Inc. (APNS): iOS push notification delivery via Apple Push Notification Service. Apple receives only a device token and notification payload.
Google LLC (Sign in with Google): if you choose to register or log in using your Google account, Google shares your name and email address with us to create your PaMarket account.

All sub-processors are bound by data processing agreements that prohibit them from using your data for their own purposes or sharing it with anyone else. We may also disclose your data if required to do so by a court order, warrant, or lawful request from a competent Zimbabwean authority.

6. Push Notifications

We send push notifications to alert you to new messages, listing approvals, business enquiries, and other account activity. You can disable push notifications at any time in your device's notification settings. Disabling notifications does not affect your ability to use the app, but you may miss time-sensitive messages from other users.

7. Camera, Photos, and Media

The app requests permission to access your device camera and photo library only when you choose to upload photos for a listing, your profile picture, or your Business Shop logo and cover image. We do not scan your photo library or access any images beyond those you explicitly select and upload. Uploaded photos are stored in our Supabase file storage and are publicly accessible via the listing or profile where they appear.

8. Location Data

PaMarket does not request or collect your precise GPS location automatically. Province and suburb information is entered manually by you when creating a listing or account. You may optionally share a location pin within the in-app messaging system; this pin is shared only with the specific recipient of that message.

9. Cookies and Analytics

The PaMarket web version may use strictly necessary cookies to maintain your session. We do not use advertising cookies or cross-site tracking. Aggregated, anonymised usage analytics are collected within the app to understand feature usage and improve the user experience. No analytics data is linked to your name or contact details.

10. Data Retention

Account data: retained while your account is active. Deleted within 30 days of you requesting account deletion via Settings.
Listings: retained until you delete them or your account is closed. Deleted listings are removed from public view immediately but may remain in server logs for up to 90 days.
Messages: retained for 24 months from the date of last activity in the conversation, then automatically purged.
Verification documents: permanently deleted within 30 days of the verification review outcome.
Push notification tokens: deleted when you log out or uninstall the app.
Server and security logs: retained for 90 days for security monitoring and fraud detection, then deleted.

11. Security

All data is transmitted using HTTPS/TLS encryption. Passwords are never stored in plain text; authentication is managed by Supabase Auth using industry-standard hashing. Our database tables are protected by row-level security (RLS) policies, which means each user can only access their own data unless they have been explicitly granted access (e.g. conversation participants). We conduct periodic security reviews and apply security patches promptly. Despite these measures, no system is completely secure. If you become aware of a security vulnerability, please report it immediately to info@pamarketzw.com.

Want to delete your account? Submit a request from our Data Deletion Request page. We will process it and permanently remove your profile, listings, messages, and related data.

12. Your Rights and Choices

Access: you can request a copy of the personal data we hold about you by emailing us. We will respond within 30 days.
Correction: update your name, phone number, profile photo, and other details via Settings - Edit Profile at any time.
Deletion: delete your account and all associated data via Settings - Security - Delete Account. Account deletion is irreversible.
Notification opt-out: disable push notifications in your device Settings at any time.
Portability: request an export of your data in a machine-readable format by emailing us.
Withdraw consent: where processing is based on your consent (e.g. verification documents, push notifications), you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at info@pamarketzw.com. We will not discriminate against you for exercising your privacy rights.

13. International Data Transfers

Your data is stored and processed by Supabase on Amazon Web Services infrastructure located in Ireland (EU). By using PaMarket you consent to this transfer. We ensure that all international transfers are subject to appropriate contractual safeguards, including Supabase's standard data processing agreement.

14. Children's Privacy

PaMarket is intended for users aged 18 and over. We do not knowingly collect personal information from anyone under the age of 18. If we become aware that a user is under 18, we will delete their account and all associated data without notice. If you believe a child has registered on our platform, please contact us immediately at info@pamarketzw.com.

15. Marketing Communications

We may occasionally send you in-app notifications about new features, platform updates, or promotional offers from PaMarket. We do not send marketing emails or SMS without your explicit opt-in. You can opt out of in-app promotional notifications by adjusting your notification preferences in Settings.

16. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. We will notify you of significant changes via an in-app notification or a prominent notice in the app. The "Last updated" date at the top of this Policy will always reflect the date of the most recent revision. Your continued use of PaMarket after changes are posted constitutes your acceptance of the updated Policy.

17. Contact

For any privacy-related enquiry, request, or complaint:
PaMarket Zimbabwe
Email: info@pamarketzw.com
WhatsApp: +971 589 772 645