Privacy and Data Protection Policy

1. Who we are

Roamkin is the data controller for personal information processed through the Roamkin website and app. We process personal data in line with the Zimbabwe Cyber and Data Protection Act [Chapter 12:07] and other applicable law. Contact: [email protected].

2. Data we collect

• Account data: name, email, phone number, profile photo
• Verification data: national ID or passport, driver's licence, signature
• Booking data: trips, locations, messages, condition photos and videos, incident records
• Payment data: Paynow references and payout details (we do not keep full card numbers)
• Vehicle data: registration, insurance and ownership documents
• Device and usage data: device type, IP address, app activity, crash logs
• Location data: approximate or precise location where you allow it

3. Why we use it

We process data to create accounts and bookings, verify identity, take payments and pay Hosts, record vehicle condition, handle claims and disputes, prevent fraud, keep users safe, meet legal obligations, and improve the service. Our grounds are performance of a contract, legal obligation, legitimate interests and, where needed, your consent.

4. Who we share it with

We share the data needed with the other party in a booking, payment providers such as Paynow, insurers, police or regulators where required or lawful, and professional advisers and service providers acting on our instructions. We do not sell your personal data. Any vehicle tracking must be disclosed with its purposes and who can access it.

5. Marketing

Accepting a rental agreement or these policies is not consent to unrelated marketing. We only send marketing where you have agreed, and you can opt out at any time.

6. International transfers

Some of our service providers, and Owners or users in the diaspora, are outside Zimbabwe. Where data is transferred abroad we take steps to ensure an appropriate level of protection.

7. Retention and security

We keep data only as long as needed for the purposes above, including legal and tax record-keeping, and use access controls and encryption in transit to protect it. No system is perfectly secure; we will notify you and the regulator of breaches as the law requires.

8. Your rights

Subject to law you may ask to access, correct, delete or restrict use of your data, object to processing, withdraw consent, and complain to the Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ) as the data protection authority. Write to [email protected]. We will respond within a reasonable time.

9. Children

Roamkin is not for anyone under 18 and we do not knowingly collect data from children.

10. Changes

We will tell you about material changes to this policy through the app or email.