Privacy Policy

This Privacy Policy explains how ZimboMatch collects, uses, and protects your personal data when you use our Service. We are the data controller for the purposes of UK data protection law (UK GDPR and the Data Protection Act 2018).

1. Information we collect

• Account & profile: name, email, date of birth, gender, photos, bio, and the cultural details you add (region, language, totem, faith, UK city).
• Private data: your real/legal name and verification records are stored separately and are never shown on your public profile.
• Verification: pass/fail results from diaspora, age (Stripe Identity), and video checks. Verification images are deleted after the check and not retained by us.
• Usage & device: sign-up country (from IP), activity, and technical data needed to run and secure the Service.
• Payments: handled by Stripe. We do not store your card details.

2. How we use your data

• To create and operate your account and match you with the community.
• To verify eligibility and keep the platform safe.
• To process subscriptions and event bookings.
• To send service messages and notifications you've enabled.
• To comply with legal obligations and enforce our Terms.

3. Legal bases

We process your data under one or more of: performance of a contract, your consent, our legitimate interests (e.g. safety and fraud prevention), and legal obligations.

4. Sharing your data

We share data with service providers who help us run ZimboMatch — including Supabase (database & storage), Stripe (payments & identity), and our email provider — under appropriate safeguards. We do not sell your personal data.

5. Your public profile

Other verified members can see your public profile (display name, photos, cultural details, and vibe). Your email, real name, exact location, and verification documents are never public.

6. Data retention

We keep your data while your account is active. When you delete your account, we remove or anonymise your personal data except where we must keep certain records to meet legal, safety, or accounting obligations.

7. Your rights

You have rights to access, correct, delete, restrict, and port your data, and to object to certain processing. To exercise these, contact us. You also have the right to complain to the UK Information Commissioner's Office (ICO).

8. International transfers

Some providers may process data outside the UK. Where they do, we rely on approved safeguards such as the UK International Data Transfer Agreement.

9. Contact

For privacy questions or requests, email privacy@zimbomatch.co.uk.