Welcome to www.zimbapays.com!
www.zimbapays.com, together with its destination micro-sites (for example, zimbapays.com/nashville and each future destination site), is a property of Gozimba Inc. (hereinafter referred to as “Gozimba,” “us,” “we,” “our,” or “Company”). This Privacy Policy applies to all users of these sites (collectively, the “Site”) and all digital assets, accounts, and services offered through them (collectively, our “Services”).
This Privacy Policy describes how the Company collects, uses, discloses, and protects your information, including personal information, in connection with your use of the Services. Your Gozimba account is a single account tied to the Zimbapays platform, not to any one destination — once you register and link your account, it applies across every destination site you visit (for example, if you link your account on the Nashville site, that same linked account and history carries over to any other destination site you use).
By using our Services, or otherwise providing us your information, you agree to this Privacy Policy and to our Terms of Service. If you do not agree with any term in this Privacy Policy, please do not provide us your information or use our Services.
Our Services are not intended for individuals under the age of majority in their place of residence, and in any event are not directed to children under 13. We do not knowingly collect personal information from children under 13.
We may collect the following categories of information (“Information”) in connection with your use of the Services:
Information from Linked Accounts: When you link a bank account or card through Plaid, we collect transaction-level data from that account, including up to Plaid's standard look-back window (currently up to two years of transaction history at the time of linking), in order to personalize offers, determine cash back eligibility, and provide attribution reporting to our destination partners as described below. Gozimba may in the future engage additional or alternative financial data aggregation service providers; this Policy will be updated to reflect any such change.
We use Information for purposes that include:
We may be required to verify your identity to provide the Services, and may use Information you provide, directly or through service providers, to do so.
Information we process may be transferred to, stored, and processed in Canada or another country in which the Company or its service providers maintain operations (for example, where a service provider such as Plaid or Google Analytics processes data outside Canada). We apply appropriate safeguards, including data processing agreements with vendors where feasible.
A core part of the Services is providing destination marketing organizations, tourism boards, and their advertising partners (“Destination Partners”) with reporting on the effectiveness of the offers and campaigns they run through the Services. We share only aggregate, cohort-level, and/or de-identified information with Destination Partners — for example, “travellers who viewed Offer X spent an average of $Y at participating merchants,” or “N% of tagged-offer viewers completed a qualifying purchase.” We do not disclose an identifiable individual’s name, contact information, or linked-account transaction detail to a Destination Partner. Where we combine data across a small number of users such that a cohort could reasonably identify an individual, we will suppress or further aggregate that reporting.
We may share your Information with our affiliates, subsidiaries, and service providers to operate the Services, process cash back, and provide the aggregate reporting described above. We may disclose Information in response to a valid legal request, to establish or defend legal claims, to investigate fraud, or as otherwise required by applicable Canadian law. We may transfer Information as part of a merger, sale, financing, or reorganization. We may license or share aggregate, de-identified, or anonymous information with third parties for marketing, advertising, analytics, or research purposes.
As a user of the Services, you grant our service providers, including Plaid, the right to access and transmit your Information as reasonably necessary to provide the Services. Your Information will also be treated in accordance with Plaid's own privacy policy.
We use third-party service providers, such as Google Analytics, to help us analyze use of the Services. To learn more about Google’s privacy practices, see the Google Privacy Policy.
We use technical, physical, and administrative safeguards, including firewalls, encryption, and authentication procedures, to protect your Information. Because we now retain financial transaction data ourselves, we apply heightened safeguards appropriate to that responsibility. No transmission over the Internet can be guaranteed 100% secure, and we cannot warrant the security of any information transmitted to us.
We retain your Information, including linked-account transaction data, for as long as your account remains active. If you close your account, we retain your Information for up to 24 months following closure (or your last transaction, whichever is later) for legal, accounting, and dispute-resolution purposes, after which we delete it or render it permanently de-identified, unless a longer retention period is required by law.
You may opt out of marketing emails, newsletters, and promotions at any time via your account settings or the unsubscribe link in any email. Certain service-related messages necessary to operate your account are not subject to opt-out.
Please see our Cookie Policy for details on the cookies and similar technologies we use, including analytics and advertising technologies, and how to control them.
You have the right to access, update, and correct your personal Information in our custody, subject to applicable law. You may also close your account or request deletion at any time by contacting us using the details below.
We do not knowingly collect Information from children under 13 (or a higher age threshold where applicable law requires). If we learn we have collected such information, we will take steps to delete it. Contact us if you believe we have mistakenly collected information from a child.
We may update this Privacy Policy from time to time. Changes take effect immediately upon posting to the Site.
If you have questions about this Privacy Policy or wish to exercise your rights, contact us:
By email: chat@gozimba.com
By mail:
Gozimba Inc.
204 The West Mall, Suite 900
Etobicoke, ON, Canada, M9C 1C5