Privacy Policy

The National Profile Registry processes personal data in accordance with Zimbabwe's Data Protection Act (Act 5 of 2021) and international best practices for digital identity systems.

Data We Collect

• Identity information (name, national ID, date of birth, contact details)
• Uploaded documents (ID scans, certificates, employment letters)
• Education, employment and skills records you provide
• Access logs, consent records and audit trails
• Payment transaction references (processed by Pesepay)

How We Use Your Data

Data is used solely for identity verification, consent-based sharing with approved institutions, platform security, and legal compliance. We do not sell personal data.

Data Sharing

Your data is shared only when you approve an access request, when required by law through approved lawful access cases, or in anonymised aggregate analytics that cannot identify individuals.

Your Rights

• Right to access your data and access history
• Right to correct inaccurate information
• Right to approve or reject access requests
• Right to dispute institutional notes
• Right to block specific institutions (Premium)
• Right to lodge complaints with the Data Protection Authority

Security

We use bcrypt password hashing, CSRF protection, encrypted storage, signed file URLs, role-based access control, and complete audit logging. See our Security page for details.

Contact

Privacy enquiries: Contact Us