Privacy Notice

1. Introduction

ICEcash (Pvt) Ltd (“ICEcash”) values your privacy. We collect, process, and secure your personal information in line with the Cyber and Data Protection Act (Chapter 12:07) of Zimbabwe.

This privacy notice explains how we process and protect personal information collected through our mobile application, online banking application, website, and any of our support channels.

2. Data We Collect

ICEcash collects the following categories of personal data to facilitate seamless service delivery:

• Identity Data: Name, ID number, Passport number
• Contact Data: Address, email, phone number
• Financial Data: Bank account details, transaction history, credit card information
• Travel Data: Toll passage history
• Vehicle Insurance Data: Vehicle ownership record, vehicle policy, vehicle and radio licences
• Device & Usage Data: IP address, device ID, app usage patterns
• KYC Information: National ID, passport, proof of address, company ownership record

How We Collect Your Data

• Directly from you: via registration forms (physical or online), phone calls, or emails.
• Automatically: via our online applications and website interactions.
• From third parties: via integrated vehicle registration systems and insurance companies.

3. How We Use Your Data

The data processed by ICEcash is based on one or more of the following lawful bases:

1. ICEcash’s Legitimate Interest to know its clients and provide seamless service.
2. Legal obligations as required by the laws governing the services we offer.
3. Consent given by you.
4. Contractual obligations between ICEcash and its partners or with you.

4. Data Sharing

ICEcash may share your information with business partners directly involved in the services we provide, and with other third parties as legally required:

1. Sponsor banks who hold your funds (CBZ and NMB)
2. Payment processors such as Zimswitch and partner banks
3. Regulatory authorities such as RBZ and POTRAZ
4. IT and cloud service providers such as Microsoft
5. ICEcash project partners such as ICZ, Motor Vehicle Insurers, ZINARA, and Instatoll
6. Law enforcement (where required), including the ZRP and Zimbabwean Courts

5. Cross-Border Data Transfers

ICEcash transfers data to countries with adequate data protection standards. Your data is stored on secure cloud platforms that comply with international security requirements.

6. Data Retention

ICEcash retains your data for a minimum of 3 months and up to 10 years, depending on data type and purpose. Financial data is retained for longer periods in line with financial regulations, while marketing contact information is disposed of sooner after the relevant campaign is completed.

7. Your Data Protection Rights

In accordance with the Cyber and Data Protection Act, ICEcash provides for the following rights:

• Right to Access: You have the right to access your information collected and processed by ICEcash.
• Right to Rectification: You have the right to have incorrect information captured against your profile corrected.
• Right to Erasure: You have the right to have irrelevant information about you deleted from ICEcash records, subject to other governing laws.
• Right to Object: You have the right to give and withdraw consent at any time.
• Right to Human Review: You have the right to access our team for assistance and not deal solely with automated channels.

8. Data Security

ICEcash employs both technical and organisational measures to protect your data from unauthorised access:

• Encryption of data in transit and at rest
• Masking of sensitive information
• Multi-factor authentication
• Role-based access for employees and third parties

In the event of a data breach, ICEcash will notify you using any of your provided contact details.

9. Contact Us

If you wish to understand more about ICEcash’s privacy practices and data handling, please contact our Data Protection team: