Privacy policy

Last updated: 15 October 2026

Who we are

This website is run by Veritran (Private) Limited, trading as ZSS (company registration number 3733/2009), of Block 6, East Crescent, Arundel Office Park, Norfolk Road, Mount Pleasant, Harare, Zimbabwe. ZSS is the data controller for the personal information described in this policy and is licensed as a data controller with the Data Protection Authority.

For any question about this policy or your personal information, write to support [at] zss.co.zw or to the address above, marked for the attention of the Data Protection Officer.

What we collect

When you contact us. The contact form asks for your name, your work email address and your message. Your organisation and phone number are optional. We need the required fields to reply to you; if you would rather not give them, you can email business [at] zss.co.zw instead. If you email us directly, we receive whatever your email contains.

When you visit. Like almost every website, our web server records each request it receives: your IP address, the date and time, the page asked for, the referring page and your browser type. We use these logs to keep the site running and secure.

Visitor statistics. We count visits with Cloudflare Web Analytics: the page viewed, the site you came from, your browser and device type, your country and how fast the page loaded. It uses no cookies and no browser storage, does not build a profile of you and does not follow you to other websites. We use the totals to see which pages are useful and to keep the site fast.

To stop spam. The contact form uses your IP address to limit repeat submissions, and on the contact page Cloudflare Turnstile checks that the form is being filled in by a person, not an automated program. Turnstile looks at technical signals from your browser; it does not ask you to solve a puzzle.

We do not ask for, and you should not send, card numbers, PINs, passwords or account details through this website. ZSS will never ask for them by email or through a web form.

We do not collect sensitive information such as health, biometric or religious data through this website, and we do not use it to make automated decisions about you.

Why we use it

• To answer your enquiry and, where you ask, to send you information about our products and services.
• To keep the website available and secure, including detecting and blocking abuse.
• To meet our legal and regulatory obligations.

We use your information on the basis of your consent, which you give when you send us an enquiry, and where the law requires or allows it. We do not sell personal information, and we do not add you to a marketing list unless you ask us to. If we do send you marketing, you can object at any time, free of charge, and we will stop.

Who can see it

Your enquiry goes to the ZSS staff who handle business enquiries, and to colleagues who need it to answer you. We also use service providers who process information for us under contract and only on our instructions:

• Amazon Web Services hosts this website and sends the contact-form email, from its London (United Kingdom) region.
• Microsoft provides our email through Microsoft 365, where enquiries are received and kept.
• Cloudflare runs the Turnstile check on the contact page and provides our visitor statistics (Cloudflare Web Analytics). See the Turnstile privacy addendum and Cloudflare’s privacy policy.

We may also disclose information where the law requires it, to our professional advisers, or to a successor if all or part of our business is reorganised or sold.

Information sent outside Zimbabwe

Because the services above are provided from outside Zimbabwe, your information is processed in other countries, including the United Kingdom. We transfer it only so that we can answer your enquiry and run this website, and only to providers in countries with data protection laws, or under contractual safeguards, that give an adequate level of protection, as sections 28 and 29 of the Cyber and Data Protection Act require.

How long we keep it

• Enquiries: for as long as we need them to deal with your enquiry and any business relationship that follows, and then deleted, unless the law requires us to keep them for longer.
• Web server logs: 14 days, then deleted automatically.
• Spam controls: the submission limit keeps a scrambled form of your IP address for 10 minutes; an address blocked for repeated failed logins is released after one hour.

How we protect it

The website is served only over encrypted connections (HTTPS). The server is kept up to date, access to it is restricted to named administrators using two-factor authentication, and contact-form messages are not stored on the website; they are sent straight to our email system. We review these controls regularly. If a security breach affects personal information we hold, we will notify the Data Protection Authority within 24 hours, as the Act requires, and tell the people affected where appropriate.

Your rights

Under the Cyber and Data Protection Act you have the right to:

• be told how your personal information will be used;
• see the personal information we hold about you;
• object to all or part of our use of it;
• have false or misleading information corrected, or deleted; and
• not be subject to a decision based only on automated processing that significantly affects you.

To use any of these rights, email support [at] zss.co.zw. We may need to confirm who you are before we act, and we will reply as soon as we can. There is no charge. A parent or legal guardian may act for a child.

If you are not happy with how we have handled your information, please tell us first so that we can put it right. You can also complain to the Data Protection Authority, which is the Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ): www.potraz.gov.zw.

Children

This website is for businesses and financial institutions and is not aimed at children. We do not knowingly collect information from children. If you believe a child has sent us personal information, contact us and we will delete it.

Cookies

We do not use advertising or tracking cookies. See our cookie policy for details.

Changes to this policy

We will update this policy when the way we use personal information changes, and change the date at the top. The current version is always on this page.