Definitions

"Services" means Shopkippa point of sale and inventory management products and services, and any features, technologies, or functionality provided by those products or services, offered by us from time to time, including Data Protection Officer Services, The Shopkippa Android and IOS Apps, Shopkippa POS and shopkippa.com ("Website").

"Customer" or "Merchant" means the person or entity who registers to use the Service by creating a Shopkippa account. If you are creating an account or using the Services on behalf of a business, you agree that you are accepting these Terms and have the authority to enter into these Terms, on behalf of the business, which will be deemed to be the Customer, and will be bound by these Terms.

"You" means the Customer and (where the context permits) includes any Authorised Users.

Identifying the Data Controller and Data Processor

For the purposes of Zimbabwean Privacy Law, depending on the category of Personal Data described in this Privacy Policy, we are operating as a Controller or as a Processor.

In general, Shopkippa Pvt Ltd is the Processor for Customer (Merchant) Information and Recipient for Consumer and Employee Information, where the Controller is the Customer (Merchant).

For questions regarding the processing of personal data and the exercise of your rights under the CDPA (Zimbabwe), you may contact us via the email address:
privacy@shopkippa.com.

Types of Personal Data Collected

We collect and use several types of data for the individuals we cooperate with, including information by which subjects may be identified ("Personally Identifiable Information" means any Data relating to an identified or identifiable natural person).

• Customer information: personal information relating to our Customers/Merchants.
• Consumer information: personal information relating to consumers with whom our Customers interact.
• Employee information: personal information relating to our employees and employees of our customers.
• Guests: personal information relating to the visitors of our webpages, offices and participants at Shopkippa events.

Our customers are solely responsible for establishing policies for and ensuring compliance with all applicable laws and regulations, as well as all privacy policies, agreements, or other obligations.

How and What Information We Collect

1. Information You Provide to Us

• Registration and profile information
• Operational data (products, services, transactions, employees)
• Support information
• Payment information
• Contributions to discussions
• Other submissions (forms, surveys, support, social media)

2. Information We Collect Automatically

• Access logs (IP address, browser type, timestamps, etc.)
• Cookies (personalized experience and usage tracking)

3. Information We Receive from Other Sources

We collect information from business partners and third-party applications, but we do not control how they process your data.

Legal Basis for Processing

• Providing the Services
• Legitimate interests
• Legal obligations
• Consent

How We Use Your Personal Information

• Access and use of Services
• Marketing and promotions (with consent)
• Service improvement and development
• Support and administrative messaging
• Fraud prevention and security
• Online discussions

Sharing & Disclosure of Your Information

We share your information with:

• Service providers and business partners
• Compliance with laws and legal obligations
• Business transfers
• Aggregated or non-identifying data

Your Privacy Rights

• Right of Access
• Right to Erasure
• Right to Object
• Right to Restriction of Processing
• Right to Data Portability
• Right to Object to Automated Decision-Making

You can request to exercise these rights by emailing:
privacy@shopkippa.com.

Our Global Operations

We operate globally and may transfer data internationally following applicable laws, adequacy decisions, and standard contractual clauses.

Data Retention

We retain information as long as necessary to provide Services and comply with the law. After that, data is either deleted or anonymized.

Children’s Use of the Services

Services are not directed to children under 16. We do not knowingly collect personal information from children under 16.

Security

We apply organizational, physical, and technical security measures to protect personal data, including TLS (HTTPS) encryption for data transfers.

Updates to Our Privacy Policy

We may update this Privacy Policy from time to time. Continued use of our Services after changes constitutes your acceptance of the updated policy.

More Information

If you have any questions, contact us at: privacy@shopkippa.com

Shopkippa Investments
Harare, Zimbabwe