Legal
Data Protection & Privacy Statement
Last updated: 13 July 2026
Our Commitment
We at ZB Financial Holdings (ZBFH) take our responsibilities under Zimbabwe's Cyber and Data Protection Act [Chapter 12:07] seriously. This statement explains how we collect, use, share, and protect your personal information when you use Smile Mall (smilemall.zb.co.zw), our online marketplace and bill-payment platform, including its websites, mobile applications, products, and services. ZB Financial Holdings Limited is the data controller responsible for your personal data.
Information We Collect
We collect personal identification information you provide directly, such as your name, email address, physical and delivery addresses, phone number, national identity details, and payment information, when you create an account, shop, pay bills, or contact support. We also automatically collect non-personal data such as browser type, operating system, and IP address, along with web server logs that record your visits and interactions. We use cookies for site functionality and analytics, and third-party technologies including Google Analytics.
How We Use Your Information
We process your data to open and manage your Smile Mall account, deliver the goods, bill payments (such as ZESA, DStv, and council rates), airtime, and other services you request, comply with our legal and regulatory obligations, detect and prevent fraud, carry out risk management, communicate with you about your orders and account, and operate and improve the platform. We do not sell your personal information to third parties.
How We Share Your Information
We may share your information with authorised users on your account, ZBFH corporate affiliates, merchants and delivery partners to fulfil your orders, payment processors and billers to complete your transactions, our professional advisers and service providers, and with regulators or law enforcement where we are legally required to do so. All third-party partners are bound by data protection obligations.
International Transfers
In order for us to provide the Services to you, your personal information may be transferred to, and stored at or processed in, countries outside Zimbabwe. We and our group companies have offices and facilities in Zimbabwe and Botswana. Where we transfer your data internationally, we take steps to ensure it remains protected in line with this statement.
Data Security
We implement appropriate technical and organisational measures to protect your personal information, including multi-factor authentication for financial data, encryption of data in transit, and secure storage practices. Our payment infrastructure is operated to ZB Financial Holdings' security standards.
Data Retention
We retain your personal information to provide services to you and as otherwise necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. Transaction records are kept for the periods required by Zimbabwean financial regulations, after which data is securely destroyed or anonymised.
Your Rights
Your principal rights under data protection law are: the right to access; the right to rectification; the right to erasure; the right to restrict processing; the right to object to processing; the right to data portability; the right to complain to a supervisory authority; and the right to withdraw consent. To exercise any of these rights, please contact us using the details below.
Contact Us
For any privacy-related enquiries, or to exercise your data protection rights, please contact ZB Financial Holdings at smilemallsupport@zb.co.zw or call +263 242 703 071. You may also write to us at ZB Centre, First Street, Harare, Zimbabwe.
Please also review our Terms of Use, which govern your use of Smile Mall.