OreTrust Privacy Notice
Version 2026-10-03 · Effective 3 October 2026
1. Information processed
Depending on how you use OreTrust, we process account details (name, email, phone, role), compliance-document references and uploaded files, Cadastre numbers you submit, equipment listings, bookings, payment workflow references, and support messages. Do not put payment PINs or unrelated sensitive personal information in support messages.
2. Purposes
Information is used to operate accounts and role-based features, display and review compliance records, coordinate equipment bookings, support payment workflows, protect the service, and respond to help requests. A submitted Cadastre number is not automatically checked against an official source by this notice.
3. Access and disclosure
Access is limited through account roles and database access rules. Information may be processed by infrastructure and payment providers needed to operate the service, or disclosed where required by applicable law. Access by a regulator within the service does not itself make OreTrust an official government system.
4. Storage, security, and offline devices
We use access controls and private storage for uploaded compliance documents. No internet service can promise absolute security. Some application data or pending actions may be stored in your browser for offline operation; protect shared devices, sign out when finished, and avoid using a public device for sensitive records. Local queued changes remain on the device until synchronized or cleared.
5. Retention and your choices
Records are retained while needed for service, audit, dispute handling, or legal obligations. You may contact the service team to ask about access, correction, or deletion; certain transaction or compliance records may need to be retained. Consent receipts record the policy versions and acceptance time.
6. Contact and review
Use in-app Help and feedback for privacy questions or requests. This notice is an operational draft and must be reviewed by qualified Zimbabwean privacy counsel against applicable law and the actual hosting, retention, and data-transfer arrangements before production use.