Privacy Policy

Qantratech Solutions (Pvt) Ltd t/a Velocity Africa (“Velocity,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our payment platform, products, and services, including online payments, payment terminals, subscriptions, invoicing, fiscalisation, physical cards, bill payments, group payments, change vouchers, loyalty programmes, closed loop wallets, and developer APIs (collectively, the “Services”).

By accessing or using our Services, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Personal Information

When you register for an account, use our Services, or contact us, we may collect personal information that identifies you, including:

• Full name, business name, and contact details (email address, phone number, physical address)
• Government-issued identification (national ID, passport number, tax ID or business registration number)
• Financial information (bank account details, payment card information, mobile money wallet details)
• Date of birth and personal identification numbers required for KYC and AML compliance

1.2 Transaction Data

When you process payments through our platform, we collect transaction-related information such as:

• Payment amounts, currencies, and timestamps
• Sender and recipient details
• Transaction descriptions and references
• Fiscalisation codes and digital signatures for tax-compliant transactions
• Invoice data, subscription billing history, and loyalty points activity

1.3 Device and Usage Information

We may automatically collect certain information when you access or use our Services, including:

• IP address, browser type, and operating system
• Device identifiers and settings
• Pages visited, features used, and interaction data
• Log data and error reports

2. How We Use Your Information

We use the information we collect for the following purposes:

• To provide and maintain our Services — processing payments, issuing invoices, managing subscriptions, operating payment terminals, facilitating bill payments, running loyalty programmes, and managing closed loop wallets
• To comply with legal and regulatory obligations — including KYC (Know Your Customer), AML (Anti-Money Laundering), CTF (Counter-Terrorism Financing), and ZIMRA fiscalisation requirements
• To verify your identity — preventing fraud, unauthorised transactions, and other prohibited activities
• To communicate with you — sending transaction confirmations, service updates, security alerts, and support responses
• To improve our Services — analysing usage trends, diagnosing technical issues, and developing new features
• To enforce our Terms of Service — and other applicable agreements

3. Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Contractual necessity — processing is required to perform our obligations under our agreement with you
• Legal obligation — processing is necessary to comply with applicable laws, including financial regulations and tax laws
• Legitimate interests — processing is necessary for our legitimate business interests, such as fraud prevention, network security, and service improvement
• Consent — where we rely on your consent, you have the right to withdraw it at any time

4. Information Sharing and Disclosure

We may share your information with the following categories of third parties:

• Payment processors and financial institutions — to facilitate payment settlement, card processing, and bank transfers
• Regulatory authorities — including ZIMRA, the Reserve Bank of Zimbabwe, and other government bodies as required by law
• Service providers — such as cloud hosting providers, analytics services, customer support platforms, and communication tools
• Fraud prevention and KYC providers — to verify identities and detect fraudulent activity
• Professional advisors — including legal, accounting, and audit firms

We do not sell your personal information to third parties. We require all third parties to respect the security of your personal information and to treat it in accordance with applicable law.

5. Data Security

We implement appropriate technical and organisational measures to protect your personal information, including:

• Encryption of data in transit (TLS 1.2+) and at rest (AES-256)
• PCI DSS Level 4 compliance for cardholder data
• Access controls and multi-factor authentication
• Regular security audits and penetration testing
• Employee training on data protection and confidentiality

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our Services. We may retain certain information longer where required by law, including:

• Transaction records — retained for a minimum of 6 years as required by tax and financial regulations
• KYC documents — retained for the duration of the business relationship and for a period thereafter as required by AML laws
• Fiscalisation data — retained in accordance with ZIMRA requirements

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access — request a copy of the personal information we hold about you
• Correction — request that we correct any inaccurate or incomplete information
• Deletion — request that we delete your personal information, subject to legal retention obligations
• Restriction — request that we restrict the processing of your information in certain circumstances
• Data portability — request a copy of your information in a structured, machine-readable format
• Objection — object to the processing of your information based on legitimate interests
• Withdrawal of consent — withdraw your consent at any time where processing is based on consent

To exercise any of these rights, please contact us using the details provided in the “Contact Us” section below. We will respond to your request within 30 days.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience, analyse usage, and improve our Services. These may include:

• Essential cookies — necessary for the operation of our platform
• Analytics cookies — help us understand how users interact with our Services
• Preference cookies — remember your settings and preferences

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of our Services.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. When we transfer your information internationally, we ensure appropriate safeguards are in place, including standard contractual clauses or equivalent mechanisms, to protect your personal information in accordance with applicable data protection laws.

10. Children's Privacy

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will take steps to delete such information promptly. If you believe we have collected information from a child, please contact us.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the “Last updated” date. In some cases, we may provide additional notice, such as an email notification. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: