Privacy Policy

ZedVault is a product proudly owned, operated and developed by ChillTech Innovations Limited, which is responsible for your data. This Privacy Policy explains how ChillTech Innovations Limited collects, uses and protects personal data through ZedVault, in line with Zambia's Data Protection Act, 2021. It covers buyers, vendors and visitors. Contact us about your data at [email protected].

• Identity and contact details: your name, email address and phone number.
• Account security: one-time codes sent to verify your email, and your password (stored hashed, never readable).
• Orders: delivery addresses, items, order history, payment confirmation details, and your delivery code (stored only as a hash, so nobody at ZedVault or the vendor can read it).
• Vendor information: shop details, payout account details, the documents we ask for to check you and your products, and for payouts a government ID and a photo for identity checks.
• Evidence: photos or videos you send with a problem report, our packaging and quality-check photos, packaging videos from vendors who fulfil for themselves, and delivery records.
• Device and usage data: pages viewed and searches made, used to keep the service working and to improve it.
• Your age confirmation and agreements: that you confirmed you are 18 or older, and which versions of our terms you accepted, with the time.
• News by email: if you ask for it, your email address, when you agreed, the words you agreed to, and when you stopped.
• Reports: if you report a listing, what you told us. The vendor is not told who reported it.

To create and secure accounts, take and deliver orders, confirm payments, pay vendors, check quality, resolve disputes and refunds, prevent fraud, keep records the law requires, answer your questions and improve ZedVault. We rely on your agreement, on the need to carry out the contract with you, on our legal duties, and on our legitimate interest in running a safe marketplace. We do not sell personal data.

By creating an account you agree to this policy. We send news and offers by email only if you ticked the box asking for them; it starts unticked. Every such email has a link to stop them, which works straight away, and you can withdraw any other consent at any time. Order, account and safety emails are part of the service and are sent whether or not you asked for news.

• Vendors get only what they need to supply your order: the item, and where required your delivery name and area. They do not get your payment details, your delivery code, or your full account.
• Our drivers see the delivery name, phone number and address for the run, not your account.
• Payment and messaging providers, to collect and confirm payments, to pay vendors, and to send you notifications.
• AI providers (currently fal.ai and Anthropic), only for vendors: when a vendor uses our photo and writing tools, the photos and words they give are sent to produce the result; when a vendor sends an identity check, the ID photos are sent so the details can be read for our team to check. Buyers' data is not sent to them.
• Our hosting provider. Our systems may be hosted outside Zambia. Where they are, we take steps to protect your data to a standard consistent with Zambian law.

We do not share your data with anyone else except where the law requires it.

• Account and orders: while your account is open, and afterwards for as long as tax, accounting, complaint and dispute rules require.
• Identity check photos: while the vendor account is open; they are deleted when it is closed. If we turn a check down and no new one is sent, the photos are deleted after 90 days. The decision, and the record of who looked at the photos, are kept.
• News by email: until you stop the emails. After that we keep only your email address and the date you stopped, so we never email you news again.
• Problem reports, their evidence, packaging proof and our audit records: for as long as complaint, dispute and accounting rules require after the order, then deleted or anonymised.

We store passwords hashed, encrypt identity documents, keep private files outside public folders, record who opens sensitive records, and limit what each ZedVault staff role can see. If we find a breach that puts your data at risk, we will tell you and the authorities as the law requires.

You can ask to see the personal data we hold about you, to correct it, or to delete it, subject to what we must keep by law. You can also object to certain uses and withdraw consent. Write to [email protected] or use your account settings. If you are unhappy with how we handle a request you can complain to the Data Protection Commissioner.

ZedVault is for people aged 18 or older, and everyone confirms their age when they sign up. We do not knowingly collect children's data. If you think a child has given us data, tell us and we will delete it.

We use only the cookies needed to keep you signed in and your cart working. We do not use third-party advertising cookies.

If we change how we handle personal data in a material way we will publish the new policy and may ask you to confirm you have seen it.