10. What we collect

Account details: your name, email address, phone number (if you add one), nationality and preferred language.

Activity: bookings, orders, trip plans, reviews, quiz results and messages you send to the concierge.

Business information: for partners, the business details, licence numbers and contact people given in a partner application, and which agreements were accepted and when.

Location: only when you choose to share it - for example to find places near you or when you send an SOS alert.

Technical information: your IP address, browser type and basic logs needed to keep the site secure and working.

10. How we use it

To run your account and provide the services you ask for; to process bookings, payments and refunds; to verify partner businesses; to send you service messages (such as confirmation codes, booking updates and application decisions); to keep the platform safe and prevent fraud; and to improve Zim Voyage. We do not sell your personal information.

10. Voice features

If you speak to the concierge, your voice is turned into text. In most languages this is done by your browser's own speech service. For Shona, the recording is sent to Zim Voyage's own server, transcribed and then discarded - we do not keep the audio. Spoken replies in Shona and Ndebele are generated on our server; in other languages the reply text is sent to OpenAI to be read aloud.

10. Who we share it with

Businesses you book with or buy from receive the details they need to serve you (such as your name, contact details and booking details).

Service providers who work for us: payment processors (Stripe, PayPal), email and SMS delivery providers, cloud hosting, and AI providers that power the concierge, trip planner and translations. They may only use your information to provide their service to us.

Authorities, when the law requires it, or emergency services when you send an SOS alert.

10. How long we keep it

We keep account information while your account is open and for a reasonable period afterwards to meet legal, tax and accounting obligations and resolve disputes. Booking and payment records are kept for as long as the law requires. Partner applications and their agreement acceptances are kept as a record of what each partner agreed to.

10. Keeping it safe

We use encryption in transit, hashed passwords, optional two-factor authentication and access controls so that staff only see what their role needs. No system is perfectly secure, so please use a strong, unique password.

10. Your rights

You can ask to see the personal information we hold about you, have it corrected or deleted, object to or restrict how we use it, and withdraw consent you have given. You can update most details yourself in your account. You may also complain to the Data Protection Authority (POTRAZ).

10. Cookies and local storage

We use your browser's storage to keep you signed in and to remember preferences such as dark mode, language and reply style. We do not use advertising cookies.

10. Changes

We will post any update to this policy here with its new date, and tell you about significant changes before they take effect.