01Who we are & our role
Portable Innovations ("we", "us", "our") is a registered data processor under Zimbabwe's Data Protection Act [Chapter 11:12]. We are committed to handling all personal data lawfully, fairly and transparently, in line with the Act.
Our role depends on the data in question:
Our role: processor
Fiscalisation data (PIFiscal)
Through PIFiscal we securely transmit fiscalisation data between our fiscal clients and ZIMRA's FDMS servers. ZIMRA is the data controller on whose behalf we process. We process this data only to transmit it, never for our own purposes.
Our role: responsible party
Data you submit to us (this website)
When you contact us through this website, for example through our enquiry form, we decide how that limited data is used: to respond to you. We are responsible for that data as set out in this policy.
02What personal data is involved
Data you submit through this website
- Contact details: the company name and email address you give us in our enquiry form. We don't ask for your name or phone number.
- Enquiry content: the topic you choose, your message, any file you attach (such as a registration form or sample invoices), and any other information you choose to share with us.
- Technical data: with your consent, cookies collect anonymised usage and device information to help us improve the site.
Fiscalisation data we process on behalf of ZIMRA
- Transaction and invoice data transmitted between our fiscal clients and ZIMRA's FDMS servers, as fiscal compliance requires. ZIMRA, not us, determines the nature and format of this data.
03Why this data is processed (purpose & lawful basis)
Fiscalisation data (as processor for ZIMRA). We process this data solely to transmit it between our fiscal clients and ZIMRA, to meet fiscal-compliance obligations under Zimbabwean law. ZIMRA, as controller, determines the purpose and means. We process only on documented instructions and never use fiscal data for any other purpose.
Data you submit through this website
- To respond to your enquiries and provide quotes or demos, based on your consent and on steps taken to enter into a contract.
- To improve our website, based on your consent to analytics cookies.
04How long data is kept (retention)
We keep website data only as long as the purposes above require. Retention of fiscalisation data is set by ZIMRA, as controller, and by Zimbabwean tax law, not by us. Data we no longer need is securely deleted or anonymised.
| Data type | Purpose | Retention period |
|---|---|---|
| Website enquiry data | Responding to and following up on enquiries | Up to 24 months from last contact |
| Analytics cookies | Site improvement (with consent) | Up to 12 months, or until consent is withdrawn |
| Fiscalisation data (processor) | Transmission for ZIMRA fiscal compliance | As directed by ZIMRA and Zimbabwean tax law |
06Disclosure & transmission
We never sell personal data. As a processor, our core function is to transmit fiscalisation data to ZIMRA (the controller) on behalf of our fiscal clients, as the law requires.
We share website data only where necessary with trusted service providers acting on our behalf (hosting, for example), or where the law or a lawful request from a regulator requires it. Any third party we engage must protect the data to the same standard.
07How we protect data
We apply appropriate technical and organisational measures, including encrypted connections, access controls and secure infrastructure, to protect all the personal data we handle against unauthorised access, loss or misuse.
If a data breach occurs, we act in accordance with the Data Protection Act. As processor, we notify the relevant controller (ZIMRA, for example) without undue delay. For website data, we notify the affected individuals and the relevant authorities where the law requires.
08Your rights as a data subject
Under the Data Protection Act [Chapter 11:12], you have the right to:
- Access
- Rectify
- Erase
- Object
- Restrict processing
- Withdraw consent
You can withdraw consent at any time where processing is based on consent. Where to send your request depends on the data:
- Fiscalisation data: ZIMRA is the controller, so send requests about fiscal data to ZIMRA or to the fiscal client concerned. As processor, we will assist and forward requests to the controller as required.
- Website enquiry data: send us a message and we will act on your request within the timeframes the law requires.
09Updates to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or the law. The latest version will always be on this page, with the "Last updated" date revised to match.
This policy reflects our commitment to compliance with the Data Protection Act [Chapter 11:12]. For anything not covered here, contact us and we'll be glad to help.