Privacy notice
Draft for legal review. This notice was written to describe how Zinga handles data. It has not yet been reviewed by a lawyer for compliance with the Zambian Data Protection Act No. 3 of 2021 or registration requirements with the Office of the Data Protection Commissioner. Version 2026-10-draft.
Who we are
Zinga is provided by Uplift Services Limited ("Uplift", "we"). Contact: support@uplift.co.zm.
Two kinds of data
- Your account data. Your name, email, phone number and password (stored only as a one-way hash). Uplift is responsible for this data.
- Your shop's records. Products, sales, customers and their debts, expenses and staff. The shop owner decides what is recorded and why; Uplift stores and processes it on the shop's behalf.
What we use it for
- To run the service: sign-in, recording transactions, reports, receipts and backups.
- To manage subscriptions and, if you pay online, to confirm payments with DPO Pay.
- To keep the service secure: an audit log records sensitive actions such as voids, refunds and stock corrections.
We do not sell personal data or use shop records for advertising.
Who we share it with
- Our hosting provider, which stores the database and backups.
- DPO Pay (Network International), only when a subscription or a customer's purchase is paid online. Card and mobile money details are entered on DPO's own page and never reach Zinga.
- Email delivery providers, to send password resets and confirmation links.
- Authorities, where the law requires it.
Customer records kept by shops
Shops may record their customers' names, phone numbers and amounts owed. Shops should tell their customers that they keep these records and only record what they need to manage credit.
How long we keep data
- Sales, payments, stock movements, expenses and audit logs are kept for as long as the shop's account exists, because shops may need them for tax and accounting. Completed financial records are never silently deleted.
- Unused staff invitations are deleted after 30 days, abandoned online payment attempts after 90 days, and resolved offline-sync records after 180 days.
- Database backups are kept for 14 days.
Your rights
You may ask to see, correct or delete your personal data, or object to how it is used. Shop owners can export their records at any time from Shop settings. To make a request, contact support@uplift.co.zm. You may also complain to the Office of the Data Protection Commissioner.
Security
Data is sent over encrypted connections, passwords are hashed, each shop's records are separated from other shops, and payment provider credentials are stored encrypted.