Welcome to www.zimbapays.com!
www.zimbapays.com, together with its destination micro-sites (for example, zimbapays.com/nashville and each future destination site), is a property of Gozimba Inc. (hereinafter referred to as “Gozimba,” “us,” “we,” “our,” or “Company”). This Privacy Policy applies to all users of these sites (collectively, the “Site”) and all digital assets, accounts, and services offered through them (collectively, our “Services”).
This Privacy Policy describes how the Company collects, uses, discloses, and protects your information, including personal information, in connection with your use of the Services. Your Gozimba account is a single account tied to the Zimbapays platform, not to any one destination. Once you register and link your account, it applies across every destination site you visit (for example, if you link your account on the Nashville site, that same linked account and history carries over to any other destination site you use).
By using our Services, or otherwise providing us your information, you agree to this Privacy Policy and to our Terms of Service. If you do not agree with any term in this Privacy Policy, please do not provide us your information or use our Services.
Accounts are for adults aged 18 or older who live in Canada. We do not knowingly collect personal information from anyone under 18.
We collect the following categories of information (“Information”) in connection with your use of the Services:
Information from Linked Accounts: we collect transaction-level data from each linked account, including the amount, date, merchant name, spending category and, where your bank provides it, the merchant’s location. When you first link, this includes up to two years of past transactions (Plaid’s standard look-back window), and new transactions after that until you disconnect. We use it to determine cash back eligibility and pay cash back, to produce the aggregate reporting for destination partners described below, and, if you have agreed to receive offers by email, to choose which offers to send you. Gozimba may in the future engage additional or alternative financial data aggregation service providers; this Policy will be updated to reflect any such change.
We use Information for the following purposes:
We ask for your consent to these purposes when you create your account, and offer emails are a separate choice you can say no to. If we want to use your Information for a purpose not described here, we will ask you first.
We may be required to verify your identity to provide the Services, and may use Information you provide, directly or through service providers, to do so.
We use the following service providers. Each may use your Information only to provide its service to us.
These providers store and process Information outside Canada, mainly in the United States. While it is there, it is subject to the laws of that country, and courts, law enforcement, and national security authorities there may be able to access it. We protect it with contracts and with the safeguards described below.
A core part of the Services is providing destination marketing organizations, tourism boards, and their advertising partners (“Destination Partners”) with reporting on the effectiveness of the offers and campaigns they run through the Services. We share only aggregate, cohort-level, and/or de-identified information with Destination Partners, for example, “travellers who viewed Offer X spent an average of $Y at participating merchants,” or “N% of tagged-offer viewers completed a qualifying purchase.” We do not disclose an identifiable individual’s name, contact information, or linked-account transaction detail to a Destination Partner. Where we combine data across a small number of users such that a cohort could reasonably identify an individual, we will suppress or further aggregate that reporting.
We may share your Information with our affiliates, subsidiaries, and the service providers listed above to operate the Services, process cash back, and provide the aggregate reporting described above. We may disclose Information in response to a valid legal request, to establish or defend legal claims, to investigate fraud, or as otherwise required by applicable Canadian law. We may transfer Information as part of a merger, sale, financing, or reorganization. We may license or share aggregate, de-identified, or anonymous information with third parties for marketing, advertising, analytics, or research purposes. We do not sell your personal information.
As a user of the Services, you grant our service providers, including Plaid, the right to access and transmit your Information as reasonably necessary to provide the Services.
We use technical, physical, and administrative safeguards to protect your Information, including encryption of your bank connection, two-factor authentication before payouts and for staff access, strict access controls on our database, and security monitoring. Because we retain financial transaction data ourselves, we apply heightened safeguards appropriate to that responsibility. If a breach of our security safeguards creates a real risk of significant harm to you, we will notify you and the Office of the Privacy Commissioner of Canada as the law requires. No transmission over the Internet can be guaranteed 100% secure, and we cannot warrant the security of any information transmitted to us.
From your account page you can:
Disconnecting your bank withdraws your consent to us collecting your transaction data. You can do this at any time, but without a linked bank we cannot see qualifying purchases, so you will not earn cash back. To protect you, we may confirm a disconnection or deletion by email first. Service messages about your account, rewards, and payouts are not marketing and are sent regardless of your email choices.
Please see our Cookie Policy for details on the cookies and similar technologies we use and how to control them.
You have the right to access and correct the personal Information we hold about you, subject to applicable law. You can download most of it yourself from your account page. For anything else, or to correct something, contact our Privacy Officer using the details below. We respond to requests within 30 days.
The Services are for adults aged 18 or older. We do not knowingly collect Information from anyone under 18. If we learn we have collected such information, we will delete it. Contact us if you believe we have mistakenly collected information from a minor.
We may update this Privacy Policy from time to time and will post the new version here with its effective date. If a change affects how we use your Information in a way you would not reasonably expect, we will ask for your consent again before it applies to you.
Our Privacy Officer, Carson Peters, is accountable for how we handle personal information. For questions, requests, or complaints about this Privacy Policy, contact:
By email: chat@gozimba.com
By mail:
Attn: Privacy Officer
Gozimba Inc.
204 The West Mall, Suite 900
Etobicoke, ON, Canada, M9C 1C5
If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner of Canada.