iTrack Zimbabwe (Private) Limited ("iTrack Zimbabwe", "we", "us", or "our") operates the iTrack Zimbabwe fleet management and insurance telematics platform, accessible at www.itrackzimbabwe.com and associated mobile applications (collectively, the "Service").
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. It applies to all users including fleet managers, vehicle operators, drivers, insurance professionals, and system administrators operating across Zimbabwe and the SADC region.
By accessing or using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please discontinue use of the Service immediately.
▪Email address and password (encrypted using industry-standard hashing)
▪Organisation name and contact details
▪Vehicle registration numbers, VINs, and fleet identifiers
▪Driver names, employee IDs, and licence numbers
▪Job, route, and shipment data entered into the platform
▪Support requests, feedback, and communications sent to us
3.2 Vehicle & Telematics Data (Automatically Collected)
▪Real-time GPS coordinates, altitude, and heading of tracked vehicles
▪Vehicle speed, acceleration, braking force, and lateral G-force (cornering)
▪Engine status, ignition on/off events, and engine hours
▪Fuel level readings and consumption data from CAN Bus and wireless sensors
▪Odometer readings and total distance travelled
▪Battery voltage and device health metrics
▪Timestamps of all telemetry events
▪ADAS camera events: forward collision warnings, lane departure alerts, fatigue detection, and driver distraction
▪Geofence entry and exit events across Zimbabwe and SADC
▪Speed limiter status, calibration data, and SAZ compliance records
3.3 Device & Technical Data
▪Device type, operating system version (iOS / Android), and unique device identifiers
▪IP address and network connection type
▪App version, crash logs, and diagnostic performance data
▪Push notification tokens
▪Authentication tokens and session identifiers
3.4 Usage Data
▪Pages and screens viewed within the application
▪Feature interactions, button clicks, and navigation patterns
▪Session duration and frequency of use
▪Search queries and filter settings applied
4. Vehicle Tracking & Location — Special Disclosure
Important Disclosure — Location & Vehicle Tracking
The iTrack Zimbabwe platform is a fleet management and insurance telematics service. Its core function is the continuous collection of vehicle location and behavioural data from GPS tracking devices installed in commercial vehicles.
IMPORTANT: Location tracking is performed via hardware devices installed in vehicles — NOT via the mobile app itself. The mobile app displays data already collected by the vehicle-mounted GPS tracker.
SAZ-Mandated Speed Limiters — Legal Obligation
In accordance with Zimbabwean law, the Standards Association of Zimbabwe (SAZ) mandates that all Heavy Motor Vehicles (HMVs) operating on Zimbabwean roads must be fitted with a certified speed limiter device. iTrack Zimbabwe is a fully SAZ-approved supplier and is authorised to supply, fit, calibrate, and certify compliant speed limiter devices. Speed limiter data — including current speed, set limit, and any tampering events — is collected as part of our core compliance monitoring service.
Consent for Driver Tracking
Vehicle operators (drivers) whose vehicles are equipped with GPS devices must provide explicit written consent to their employer or fleet operator prior to vehicle tracking commencing. Fleet operators are contractually required to:
▪Obtain written informed consent from all drivers whose vehicles will be tracked
▪Inform drivers of the nature, purpose, and scope of data collection
▪Provide drivers with access to their own behavioural data upon request
▪Comply with all applicable Zimbabwean employment and privacy laws regarding employee monitoring
5. How We Use Your Information
5.1 Core Service Delivery
▪Displaying real-time vehicle locations on fleet maps
▪Calculating driving behaviour risk scores across 7 behavioural categories
▪Generating trip reports, mileage analytics, and fuel consumption data
▪Triggering geofence alerts and threshold-based notifications
▪Processing insurance telematics data for Usage-Based Insurance (UBI) products
▪Supporting SAZ speed limiter compliance reporting and certification
▪Enabling fleet managers to communicate with drivers and dispatch vehicles
5.2 Safety & Security
▪Detecting and alerting on unsafe driving behaviours (harsh braking, speeding, harsh cornering)
▪AI-powered ADAS event analysis and driver fatigue detection
▪Enabling accident scene reconstruction via pre- and post-impact telemetry
▪Fraud detection for insurance claim validation
▪Protecting against unauthorised access to the platform
5.3 Service Improvement
▪Analysing aggregate usage patterns to improve application performance
▪Diagnosing and fixing technical issues and crashes
▪Developing new features based on anonymised usage patterns
▪Calibrating and improving our AI-based risk scoring algorithms
5.4 Legal & Compliance Purposes
▪Meeting our obligations under applicable Zimbabwean laws and regulations
▪Providing SAZ-mandated speed limiter compliance data to relevant authorities
▪Responding to lawful requests from government or law enforcement authorities
▪Protecting our legal rights and those of our users
6. Legal Basis for Processing
Contractual Necessity
Processing required to deliver the Service as agreed in our Terms of Service, including all telematics data collection and fleet management features.
Legal Obligation
Processing required to comply with Zimbabwean law, including SAZ speed limiter regulations for all HMVs and responses to lawful government requests.
Legitimate Interests
Processing for fraud prevention, security monitoring, service improvement, and product analytics, where these interests are not overridden by your rights.
Consent
Where we rely on your consent (e.g. for marketing communications), you may withdraw this at any time without affecting prior lawful processing.
7. How We Share Your Information
7.1 With Your Organisation
▪Vehicle telematics data is shared with authorised administrators within your organisation
▪Risk scores and behavioural data are visible to fleet managers and supervisors as configured
▪Individual driver data is accessible only to users with appropriate permission levels
7.2 With Insurance Partners
▪If enrolled in a UBI programme, aggregated and individual risk scores may be shared with the insurer as a core product feature
▪This data sharing is covered by a separate Data Processing Agreement
▪Drivers and fleet operators are informed of this data sharing as part of policy enrolment
7.3 With Government / SAZ Authorities
▪Speed limiter calibration records, compliance certificates, and tamper event logs may be shared with the SAZ and Zimbabwe VID upon request
▪We may disclose information if required by law, court order, or government authority
▪We will notify you of legal data requests where permitted to do so
7.4 With Service Providers
▪Cloud infrastructure providers (for hosting and data storage)
▪Analytics providers (crash reporting and performance monitoring — data anonymised)
▪Communication providers (email and push notification delivery)
▪All third-party processors are bound by Data Processing Agreements
8. Data Retention
Account & profile data
Duration of account + 2 years after closure
Live tracking / GPS data
90 days rolling (configurable per organisation)
Historical trip records
24 months from trip date
Insurance telematics data
Duration of policy + 7 years (regulatory requirement)
SAZ speed limiter records
7 years (required by Zimbabwean law)
ADAS event footage
30 days unless flagged for retention
Audit logs
36 months
Crash and diagnostic data
90 days
Deleted account data
Purged within 30 days of verified deletion request
9. Your Privacy Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data. Contact us at privacy@itrackzimbabwe.com — we will respond within 30 days.
✓ Right to Access
✓ Right to Correction
✓ Right to Deletion
✓ Right to Data Portability
✓ Right to Withdraw Consent
✓ Right to Lodge a Complaint
How to Submit a Data Deletion Request
▪Email privacy@itrackzimbabwe.com with subject: DATA DELETION REQUEST
▪Include your full name, email address, and organisation name
▪We will verify your identity and confirm deletion within 30 days
10. Data Security
We implement industry-standard technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or destruction. These include:
🔒 TLS/HTTPS encryption for all data in transit
🔒 AES-256 encryption for sensitive data at rest
🔒 Password hashing using industry-standard algorithms
🔒 Role-based access control (RBAC) for platform users
🔒 Regular security audits and penetration testing
🔒 24/7 security monitoring and anomaly detection
11. Children's Privacy
Our Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a minor, please contact us immediately at privacy@itrackzimbabwe.com and we will take steps to delete such information promptly. Note: school transport fleet tracking monitors vehicles and routes only — it does not collect personal data from children.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top. For significant changes, we will also notify fleet administrators via email. Your continued use of the Service after changes are posted constitutes your acceptance of the revised policy.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us through any of the following: