Zimbabwe privacy notice for the Spellbound Credit mobile application and related services
Last updated: 16 April 2026
This Privacy Policy explains how Spellbound Credit collects, uses, stores, shares and protects personal information when you use the Spellbound Credit mobile application, website, customer support channels, agency or branch network, or any related lending, payment, account management and support services.
This policy is intended to reflect Zimbabwean privacy requirements, including the right to privacy under the Constitution of Zimbabwe, the Cyber and Data Protection Act and applicable regulations issued under that framework.
By using our services, creating an account, submitting an application, making a payment, communicating with us or otherwise providing information to us, you acknowledge this Privacy Policy and, where required by law, you consent to the processing described in it.
This Privacy Policy applies to personal information processed through:
Depending on the service you use, we may collect and process the following categories of personal information:
| Category | Examples | Why we may use it |
|---|---|---|
| Identity information | Full name, date of birth, national ID/passport details, customer number, selfie or photograph where required for verification. | To identify you, verify eligibility, prevent fraud and comply with legal requirements. |
| Contact information | Mobile number, email address, physical address, branch or agency location, preferred language and communication preferences. | To contact you about your account, support requests, collections and service updates. |
| Financial and credit information | Income details, employment information, bank or mobile money details, repayment history, transaction records, affordability information and credit-related information you provide or authorise us to use. | To assess applications, administer accounts, process payments and manage risk. |
| Application and account information | Application forms, uploaded documents, product selected, device information linked to financed products, guarantor or referee information, complaints and support history. | To process applications, manage your account and resolve issues. |
| Technical and device data | App version, device model, IP address, browser type, operating system, crash logs, security events and usage analytics. | To secure the platform, troubleshoot issues, improve performance and investigate misuse. |
| Location information | Approximate or precise location information only where enabled or necessary for a feature, security review, branch support or fraud prevention. | To support location-based services, detect suspicious activity and improve service delivery. |
| Communications data | Call recordings, emails, messages, notes from support interactions and communication preferences. | To provide customer support, quality assurance, dispute handling and compliance evidence. |
We collect personal information:
We process personal information on lawful grounds recognised under Zimbabwean law. Depending on the circumstance, we may process your information because:
Where we rely on consent, you may withdraw that consent at any time for future processing, subject to any processing already lawfully carried out and subject to the limits of our legal or contractual obligations.
We may use personal information to:
Some information handled by a credit platform may be sensitive. This may include identity document images, financial hardship information, biometric information used for verification, or other information treated as sensitive under Zimbabwean law.
Where we process sensitive, biometric or similar information, we will do so only where permitted by law and, where required, on the basis of your written consent or another lawful ground recognised by law.
If we use tools to support fraud screening, identity verification or credit risk assessment, we will apply reasonable safeguards and will not make legally significant decisions based solely on automated processing unless you have consented or the law otherwise permits it.
We may share personal information only where necessary and lawful, including with:
We do not sell personal information. Any third party that processes information on our behalf must protect it and may use it only for authorised purposes.
Some of our service providers or technology systems may store or process personal information outside Zimbabwe. Where this happens, Spellbound Credit will take steps to ensure that the transfer is lawful and that an adequate level of protection is in place, including contractual controls, security safeguards, due diligence and any additional measures required by Zimbabwean law.
Where required, we will also obtain your consent or rely on another lawful basis before transferring personal information outside Zimbabwe.
We keep personal information only for as long as it is reasonably necessary for the purpose for which it was collected, or for longer where required by law, regulation, audit, dispute resolution, fraud prevention, debt recovery, litigation hold or legitimate business record-keeping requirements.
When information is no longer required, we will delete, anonymise, de-identify or securely destroy it in accordance with our retention and security controls.
We use reasonable technical, organisational and administrative safeguards designed to protect personal information against loss, misuse, unauthorised access, unauthorised disclosure, alteration and destruction.
No system can be guaranteed to be completely secure. You should also protect your account credentials, device access and one-time passwords, and contact us immediately if you suspect unauthorised use.
If we become aware of a personal data breach affecting personal information, we will investigate it, contain it, take remedial action and make notifications required by Zimbabwean law. This may include notifying the relevant authority within 24 hours of becoming aware of the breach and, where the breach is likely to create a high risk to individuals' rights and freedoms, notifying affected individuals within 72 hours.
Spellbound Credit's services are generally intended for adults. We do not knowingly provide credit services to children, except where the law allows the relevant service and the required parent or legal guardian involvement exists.
Where children's information must be processed, we will require the consent of a parent or legal guardian and apply additional safeguards appropriate to the child's rights and best interests.
Subject to Zimbabwean law, you may have the right to:
Spellbound Credit may use scoring models, fraud rules, verification tools and other analytical processes to support onboarding, security and account management. Where a decision produces legal effects or similarly significant effects for you, we will apply human oversight or another lawful safeguard unless the law allows the decision to be made solely on an automated basis or you have expressly consented.
We may send service-related communications that are necessary for your account or transaction. We may also send promotional or educational communications where this is permitted by law. You can opt out of marketing messages by using the unsubscribe method in the message, updating your preferences in the app, or contacting us using the details below.
| Business name | Spellbound Electronics |
| Physical address | 40 Kwame Nkrumah, New Africa House, Harare |
| sales@spellboundmobile.com | |
| Telephone | +263 242 777980 |
| Data Protection Officer / Privacy Contact | Mr F Nyamuronda |
If you are unhappy with how we handle your personal information, please contact us first so that we can try to resolve the issue. You may also lodge a complaint with the Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ), which is the designated data protection authority under Zimbabwean law.
We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, security practices or operating model. The latest version will be made available through the app, website or another appropriate channel, and the effective date will show when the update takes effect.
Effective Date: 16 April 2026