Privacy Policy for Imago

Imago is deeply committed to protecting your privacy and safeguarding your personal data. This Privacy Policy outlines in detail how we collect, use, disclose, and protect your information when you access or use our website, mobile application, and any related services (collectively, the "Services"). By utilizing our Services, you explicitly agree to the collection and use of your information in accordance with this policy and in compliance with the Cyber and Data Protection Act (Chapter 12:07) of Zimbabwe and its accompanying regulations.

1. Information We Collect

We collect information to provide and improve our Services to you, ensuring a secure and efficient marketplace.

1.1 Personal Information (Personal Data)

When you register for an account (as a buyer or seller), make a purchase, list a product, or engage with our support, we may collect personally identifiable information ("Personal Data"), including but not limited to:

• Identity Data: Name, username, date of birth, gender, national identification number (for seller verification).
• Contact Data: Email address, phone number, physical (shipping and billing) address.
• Financial Data: Bank account details (for seller payouts), credit/debit card information (processed securely via third-party gateways; we do not store full card numbers).
• Transaction Data: Details about products/services you have purchased or listed on our platform.
• Profile Data: Your account username and password, purchases or orders made by you, your interests, preferences, feedback, and survey responses.
• Communication Data: Records of your interactions with our customer support, including chat transcripts and email correspondence.
• Seller-Specific Data: Business registration details, tax information, product categories, inventory data, and other information necessary for operating a storefront on Imago.

1.2 Non-Personal Information (Usage Data)

We also collect non-personal information automatically as you interact with our Services ("Usage Data"). This data helps us understand user behaviour and improve platform functionality:

• Technical Data: Internet Protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access our Services.
• Usage Data: Information about how you use our website and mobile application, including access times, pages viewed, features used, clickstream data, referral source, length of visit to certain pages, and page interaction information.
• Geolocation Data: General location information derived from your IP address or, with your consent, more precise location data from your mobile device to enable location-based services (e.g., delivery estimates).

2. How We Use Your Information

We use the collected information for various purposes, all aligned with providing and enhancing our e-commerce marketplace, operating under specific legal bases as required by data protection laws.

• To Provide and Maintain Our Services: This includes facilitating account creation and logon, processing transactions (purchases and seller payouts), and delivering purchased products via logistics partners. (Legal Basis: Performance of a Contract).
• To Communicate with You: Sending order confirmations, shipping updates, important service announcements, security alerts, and responding to your inquiries and customer support requests. (Legal Basis: Performance of a Contract, Legitimate Interests).
• For Marketing and Promotional Purposes: Sending you relevant updates, promotional offers, and marketing materials about products and services that may interest you, based on your preferences. You can opt-out at any time. (Legal Basis: Consent, Legitimate Interests).
• To Improve and Personalize Our Services: Analysing usage patterns, troubleshooting technical issues, developing new features, and customizing your experience on the platform (e.g., personalized product recommendations, optimizing search results). (Legal Basis: Legitimate Interests).
• For Security and Fraud Prevention: Detecting, preventing, and addressing fraudulent activities, unauthorized access, and other security vulnerabilities to protect our users and our platform. (Legal Basis: Legitimate Interests, Legal Obligation).
• To Comply with Legal Obligations: Adhering to applicable laws, regulations, and legal processes, including responding to valid requests by public authorities. (Legal Basis: Legal Obligation).
• For Seller Management: Managing seller accounts, facilitating product listings, tracking sales performance, and providing seller-specific support and analytics. (Legal Basis: Performance of a Contract, Legitimate Interests).

3. Legal Basis for Processing Your Personal Data

Under the Cyber and Data Protection Act (Chapter 12:07) of Zimbabwe, we will only process your personal data when we have a valid legal basis to do so. The primary legal bases we rely on include:

• Performance of a Contract: Processing your data where it is necessary for the performance of a contract to which you are a party or to take steps at your request before entering into such a contract (e.g., processing your order, managing your seller account).
• Consent: Where you have given explicit consent for us to process your personal data for a specific purpose (e.g., for marketing communications). You have the right to withdraw consent at any time.
• Legal Obligation: Where processing is necessary for compliance with a legal or regulatory obligation that we are subject to (e.g., tax reporting, fraud prevention).
• Legitimate Interests: Where processing is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests (e.g., improving our Services, security measures, customer support).

4. Information Sharing and Disclosure

We respect your privacy and do not sell or rent your personal information to third parties for their independent marketing purposes. We may share your information only in the following limited circumstances:

• Service Providers: We engage trusted third-party vendors and service providers to perform services on our behalf. These include:
  • Payment Processors: To securely handle your transactions (e.g., Paynow, mobile money operators). We do not store your full credit card details.
  • Logistics & Shipping Partners: To facilitate the delivery of your purchased products.
  • Cloud Hosting & Infrastructure Providers: To host our platform and store data securely.
  • Marketing & Analytics Services: To help us analyse platform usage, optimize marketing campaigns, and personalize your experience (often with anonymized or aggregated data).
  • Professional Advisors: Such as lawyers, auditors, and accountants for professional services.

  These third parties are contractually obligated to protect your information and use it only for the purposes for which it was provided.

• Sellers: When you make a purchase, we share necessary information with the respective seller to facilitate order fulfilment (e.g., your name, shipping address, contact details, and order details). Sellers are also obligated by our terms to protect your data.
• Business Transfers: In the event of a merger, acquisition, asset sale, financing, or similar transaction involving all or a portion of our business, your personal information may be transferred to the acquiring entity.
• Legal Requirements & Protection: We may disclose your information if required to do so by law, court order, or in response to valid requests by public authorities (e.g., government or law enforcement agencies), or if we believe in good faith that such action is necessary to:
  • Comply with a legal obligation.
  • Protect and defend the rights or property of Imago.
  • Prevent or investigate possible wrongdoing in connection with the Services.
  • Protect the personal safety of users of the Services or the public.
  • Protect against legal liability.
• With Your Consent: We may share your information for any other purpose with your explicit consent.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies (like web beacons and pixels) to monitor activity on our Services and store certain information. Cookies are small data files placed on your device.

How We Use Them

These technologies help us to:

• Remember your preferences (e.g., language, currency).
• Facilitate user login and session management.
• Analyse user behaviour and traffic patterns.
• Deliver relevant advertising.
• Ensure the security and functionality of our platform.

Your Choices

You have the option to accept or refuse cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. However, please note that if you do not accept cookies, you may not be able to use some parts or features of our Services efficiently.

6. Data Security

We take the security of your Personal Data seriously and implement robust technical and organizational measures to protect it from unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption: Using Secure Socket Layer (SSL) technology for data transmission and encryption for sensitive data at rest.
• Access Controls: Implementing strict access controls and authentication mechanisms for internal systems holding Personal Data.
• Regular Security Audits: Conducting periodic vulnerability assessments and penetration testing to identify and address potential security weaknesses.
• Employee Training: Training our staff on data protection best practices and maintaining strict confidentiality.

However, it's important to understand that no method of transmission over the internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.

7. Data Retention

We will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

8. Your Data Protection Rights

In accordance with the Cyber and Data Protection Act (Chapter 12:07) of Zimbabwe, you have certain rights regarding your Personal Data. These rights include:

• The Right to Access: Request a copy of the Personal Data we hold about you.
• The Right to Rectification: Request the correction of inaccurate or incomplete Personal Data.
• The Right to Erasure (Right to Be Forgotten): Request the deletion of your Personal Data under certain conditions.
• The Right to Restrict Processing: Request the restriction of processing of your Personal Data under certain conditions.
• The Right to Object to Processing: Object to the processing of your Personal Data under certain conditions (e.g., for direct marketing).
• The Right to Data Portability: Request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
• The Right to Withdraw Consent: Where we are relying on consent to process your Personal Data, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact us using the details provided in the "Contact Us" section. We will respond to your request within the timeframe required by law.

9. Third-Party Links

Our Services may contain links to websites or services operated by third parties that are not owned or controlled by Imago. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We strongly advise you to review the privacy policy of every site you visit.

10. Children's Privacy

Our Services are not intended for individuals under the age of 18 ("Children"). We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your Children have provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from Children without verification of parental consent, we take steps to remove that information from our servers.

11. Changes to This Privacy Policy

We may update our Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top. You are advised to review this Privacy Policy periodically for any changes. Your continued use of the Services after any modifications signifies your acceptance of the updated policy.

12. Contact Us

If you have any questions or concerns about this Privacy Policy, your Personal Data, or your rights, please do not hesitate to contact our Data Protection Officer at:

We are here to help you every step of the way!

Imago, Beyond Emotional Convenience.