Privacy Policy

1. Information We Collect

We collect personal data to provide and improve our services. This includes:

2. How We Use Your Information

We use your information to:

• Create and manage your account
• Provide access to our business directory and services
• Improve our platform and develop new features
• Communicate with you (e.g., support, updates, marketing)
• Detect and prevent fraud, abuse, or illegal activities
• Comply with legal obligations

3. Legal Basis for Processing (UK & EU)

Under the UK and EU General Data Protection Regulation (GDPR), we rely on the following legal bases:

• Consent – where you give clear permission
• Contract – to perform our agreement with you
• Legal obligation – for compliance with law
• Legitimate interests – for our core platform needs (e.g., platform security, service improvement)

For users in the United Kingdom, we comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

4. Your Rights (UK & EU Residents)

You have the right to:

• Access the data we hold about you
• Request correction of inaccurate data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict certain processing
• Data portability (receive your data in a structured format)
• Withdraw your consent at any time

To exercise these rights, contact us at: privacy@zimuntu.com

5. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what personal data we collect and how we use it
• Request access to and deletion of your data
• Opt out of the sale or sharing of your personal data (we do not sell your data)
• Non-discrimination for exercising your privacy rights

To make a request, email us at: privacy@zimuntu.com

6. Data Sharing and Disclosure

We do not sell your personal information. We may share your data with:

• Service providers who assist in running our platform (e.g., hosting, analytics)
• Legal or regulatory authorities when required
• Business transfers (e.g., if Zimuntu merges or is acquired)

All third parties must respect the confidentiality and security of your data.

7. Data Retention

We retain your information only as long as necessary for:

• Providing our services
• Legal, regulatory, or accounting obligations
• Resolving disputes and enforcing agreements

8. Data Security

We use appropriate technical and organisational measures to protect your personal data from loss, misuse, or unauthorised access. However, no online platform is 100% secure.

9. Children's Privacy

Our services are not directed to children under the age of 13 (or equivalent minimum age in your jurisdiction). We do not knowingly collect personal data from children.

10. International Transfers

Your data may be stored and processed outside your country (e.g., in the UK, EU, or USA). Where applicable, we rely on standard contractual clauses or other safeguards for data transfer compliance.

11. Global Privacy Commitment

Zimuntu is committed to safeguarding personal data under globally recognised data protection principles. Our compliance framework is grounded in major regulations such as the UK General Data Protection Regulation (UK GDPR), the EU GDPR, the Data Protection Act 2018 (UK), and California's CCPA/CPRA.

In addition, we take care to align with other international frameworks including, where applicable, Canada's PIPEDA, Australia's Privacy Act, South Africa's POPIA, and similar standards to ensure broad respect for users' privacy rights across jurisdictions.

12. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes and update the "Effective Date" above.

13. Contact Us

If you have any questions or concerns about this policy or your data, please contact: