13 sections: updated 1 Oct 2026
This policy explains how Zunde handles personal information when you use the Zunde co-operative portal. It covers the people in your organisation who use the portal and the farm information the portal shows you. Zunde is operated by Cherubim Invest (Pty) Ltd, a private company registered in South Africa (registration number 2025/233538/07). It decides how this information is used on the platform and answers for it under the data protection laws that apply, including Zimbabwe's Cyber and Data Protection Act [Chapter 12:07] and South Africa's Protection of Personal Information Act 4 of 2013. Once you copy or export farm information, your organisation answers for how it handles that copy.
When you register we collect the co-operative's name, its registration number, its region, the account owner's name, a work email address and a phone number. When you add staff we collect their names and contact details. We hold what you create in the portal: the co-operative's profile, the members' ledger, decisions on requests to join, supply and pledges, group certificates, messages, requests and orders. Your password is kept by our sign-in service as a one-way code that we cannot read. Our servers record technical details of each visit, such as IP address, browser type and the time of each request.
After a farm joins your co-operative, the portal shows you that member's name, location, crops and listings, its Market Readiness, the registrations and certificates it holds and their status, what it has pledged to the group, and the messages between you. Before a farm joins, you see only what it has chosen to show publicly on the marketplace and the details it gives when it asks to join.
We use your information to create and secure your account, to show your co-operative to farms and buyers, to deliver messages and alerts, to work out Market Readiness against the requirements that apply, to answer support requests, to prevent misuse and to meet our legal duties. We do not sell personal information. We do not show advertising and we do not build advertising profiles.
Members and farms you invite see the co-operative's name and the messages you send them, with the sender's name. Buyers whose programmes the group joins see the co-operative's name and the group information the programme needs. We use service providers to host the platform, store files, send email, SMS and WhatsApp messages, deliver browser alerts and monitor errors. They handle information only to provide those services to us. We disclose information when the law requires it. If Zunde's business is transferred, the information moves with it under this policy.
The portal keeps you signed in by saving a session key in your browser's local storage, and it remembers whether you turned alerts on. It sets no advertising cookies and loads no third-party analytics. Fonts and icons load from Google Fonts and the cdnjs library network, which receive your IP address as any web host does. Clearing your browser's site data signs you out.
Alerts are off until you turn them on. If you do, your browser gives us an address for sending alerts to that device, and Google's Firebase Cloud Messaging delivers them. Turn alerts off on the Messages page or in your browser at any time.
The company that operates Zunde is in South Africa and the platform runs on cloud infrastructure outside Zimbabwe, so your information is transferred to and stored in other countries. Where the law sets conditions for such a transfer, we follow them.
Information travels between your browser and Zunde over an encrypted connection. Access inside Zunde is limited to staff who need it for their work. You decide who in your organisation has an account. No system is perfectly secure. If a breach affects your information we will tell you and the data protection authority as the law requires.
We keep your information while your account is open. When you ask us to delete your account, we delete or anonymise your personal information within 30 days, except records we must keep by law or need to settle a dispute. Messages you sent may stay in the conversations of the people who received them. Records a farm holds about itself are the farm's and are not deleted when your account closes.
You may ask for a copy of the personal information we hold about you, ask us to correct it, ask us to delete it, object to how we use it, and withdraw a consent you gave. Correct your profile and your organisation's details in the portal. Use the delete account page to ask for deletion. For anything else write to support@zunde.app. You may also complain to the data protection authority: in Zimbabwe, the Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ), and in South Africa, the Information Regulator.
The portal is for organisations and the adults who work for them. It is not meant for anyone under 18, and we do not knowingly collect a child's information through it.
We may change this policy as the portal or the law changes. We will tell the account owner by email or in the portal before a material change takes effect. The date on this page shows when it last changed.
Write to us and we will answer.
Email support@zunde.app