Privacy Policy

1. Introduction

Just-tap ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our payment services, mobile applications, and website.

As a Bank of Zambia regulated Payment Systems Business, we adhere to the highest standards of data protection in accordance with the Data Protection Act of Zambia and other applicable laws.

2. Information We Collect

2.1 Personal Information

We may collect the following personal information:

• Full name and contact details (email, phone number, address)
• National Registration Card (NRC) or passport details
• Business registration documents and Tax PIN
• Bank account and mobile money wallet information
• Transaction history and payment records
• Device information and IP addresses

2.2 Business Information

For merchant accounts, we collect business name, registration number, business address, ownership structure, and beneficial owner information as required by regulatory obligations.

3. How We Use Your Information

We use your information to:

• Process payments and provide our services
• Verify your identity and comply with KYC requirements
• Prevent fraud and ensure security
• Comply with legal and regulatory obligations
• Communicate with you about your account and transactions
• Improve our products and services
• Provide customer support

4. Information Sharing and Disclosure

We may share your information with:

• Mobile Network Operators: Airtel, MTN, and Zamtel for mobile money transactions
• Financial Institutions: Banks and payment processors to facilitate transactions
• Regulatory Authorities: Bank of Zambia, Financial Intelligence Centre, and other regulators as required by law
• Service Providers: Third parties who assist us in operating our business
• Law Enforcement: When required by law or to protect our legal rights

We do not sell your personal information to third parties.

5. Data Security

We implement robust security measures to protect your data:

• AES-256 encryption for data at rest and in transit
• PCI DSS compliant payment processing
• Multi-factor authentication
• Regular security audits and penetration testing
• Access controls and employee security training

6. Data Retention

We retain your personal information for as long as necessary to provide our services and comply with legal obligations. Transaction records are retained for a minimum of ten (10) years as required by the Financial Intelligence Centre Act and other applicable regulations.

7. Your Rights

Under the Data Protection Act of Zambia, you have the right to:

• Access your personal information
• Request correction of inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Object to certain processing activities
• Withdraw consent where processing is based on consent
• Lodge a complaint with the Data Protection Commissioner

8. Cookies and Tracking Technologies

We use cookies and similar technologies to improve your experience, analyse usage patterns, and personalise content. You can manage cookie preferences through your browser settings. Essential cookies required for the operation of our services cannot be disabled.

9. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child, we will take steps to delete such information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on our website and updating the "Last updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us: