Privacy Policy

Fiscal Shift ("we", "our", or "us") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, store, and protect data when you use our virtual fiscalisation platform and related services.

1. Information We Collect

We collect the following categories of information:

• Account Information: Business name, contact person name, email address, phone number, physical address, and VAT registration number.
• Transaction Data: Sales transaction details transmitted through our VFD software to ZIMRA's FDMS, including invoice amounts, tax breakdowns, and receipt identifiers.
• Technical Data: IP addresses, device identifiers, browser type, system logs, and API request metadata needed for platform operation and security monitoring.
• Communication Data: Records of correspondence with our support team via email, WhatsApp, or phone.

2. How We Use Your Information

We use your data for the following purposes:

• Providing and maintaining our virtual fiscalisation service
• Transmitting fiscal data to ZIMRA's FDMS as required by Zimbabwean law
• Generating fiscal receipts and compliance reports
• Customer support and account management
• Platform security, monitoring, and fraud prevention
• Service improvement and product development
• Communicating important updates about our service or regulatory changes

3. Legal Basis for Processing

We process your data based on:

• Contractual necessity: To perform the services you've subscribed to
• Legal obligation: To comply with ZIMRA fiscalisation requirements under the VAT Act
• Legitimate interests: To improve our services, ensure platform security, and provide customer support

4. Data Sharing

We share your data only in the following circumstances:

• ZIMRA (Zimbabwe Revenue Authority): Transaction data is transmitted to ZIMRA's FDMS in real time as required by law
• Cloud Infrastructure Providers: Our platform is hosted on secure, enterprise-grade cloud services with data centres compliant with international standards
• Legal Requirements: Where required by court order, regulatory request, or applicable law

We do not sell, rent, or trade your personal information to any third parties for marketing purposes.

5. Data Security

We implement robust security measures to protect your data:

• TLS 1.3 encryption for all data in transit
• AES-256 encryption for data at rest
• Regular security audits and penetration testing
• Role-based access controls for internal staff
• 24/7 infrastructure monitoring and intrusion detection
• Automated backup and disaster recovery procedures

6. Data Retention

We retain your data for the following periods:

• Transaction records: Minimum 6 years, as required by ZIMRA for audit purposes
• Account information: Duration of your subscription plus 12 months after termination
• Technical logs: 90 days for operational purposes

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Request a copy of your data in a portable format
• Object to processing based on legitimate interests

To exercise these rights, contact us at privacy@fiscalshift.co.zw

8. Cookies & Analytics

Our website uses essential cookies for site functionality. We do not use third-party advertising cookies. Analytics tools used are configured to anonymise IP addresses and minimise personal data collection.

9. International Transfers

Your data may be processed on servers located outside of Zimbabwe for cloud hosting purposes. Where such transfers occur, we ensure appropriate safeguards are in place to protect your data in accordance with applicable data protection standards.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through a notice on our platform. Continued use of our services after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us:

• Email: privacy@fiscalshift.co.zw
• Address: Fiscal Shift, Bulawayo, Zimbabwe
• Phone: Available on our contact page