1. About this notice
QuickCred Finance ("QuickCred", "we", "us", "our") respects your privacy. This notice explains what personal information we collect through our website www.quickcred.co.zw (the "website"), why we collect it, who we share it with, how long we keep it, how we protect it and the rights you have.
It applies to everyone who uses the website: visitors, people who apply for a loan online, customers who sign in to My loan, people who take part in Refer & earn, our referral agents, representatives of partner employers who use the employer portal, and anyone who contacts us through the website.
We process personal information in line with the Cyber and Data Protection Act [Chapter 12:07] and its regulations. When you take a loan, your loan agreement and our customer privacy terms also apply.
2. Who is responsible for your information
QuickCred Finance is the data controller for personal information collected through the website. Our head office is at 5th Floor, Karigamombe Centre, 53 Samora Machel Avenue, Harare, Zimbabwe.
Our Data Protection Officer is Tendai Mataba-Okafor. Email: privacy@quickcred.co.zw. Telephone: +263 242 750 138 / +263 780 275 919. You can also write to the Data Protection Officer at our head office address.
3. What we collect
When you visit the website
- Your internet (IP) address, browser and device type, the pages you open and the date and time — recorded in our server and security logs.
- The small number of cookies described in section 10. We do not use advertising or tracking cookies, and we do not use website analytics tools.
When you contact us
- Your name, phone number, email address, the branch you chose and your message.
When you apply for a loan
- Identity: title, names, nick name, National ID number, date of birth, gender and marital status.
- Contact and address: mobile number, email address, current and permanent home address and how long you have lived there.
- Next of kin: name, mobile number and relationship. We also record them as the witness to your loan. Please tell them you have given us their details.
- Employment or business: employer, employer address, EC number for civil servants, salary, deductions and expenses, or for businesses the business name, type, sector, registration, sales, expenses, assets, liabilities and two business references.
- Loan: the product, amount, term, purpose, the security you offer and your preferred branch.
- Payout: the EcoCash or bank details we should pay the loan to.
- Documents you upload: for example your ID, payslips, bank or mobile money statements, proof of residence and business documents. Our system reads the text on your ID and proof-of-address document to check them against what you entered.
- Selfie check: a selfie and a few still frames taken during a short liveness check, and a face template (a set of numbers describing your face) made from them. This is biometric information — see section 5.
- Your acceptance of the terms: your signature, or a confirmation photo, or a confirmation from your phone's fingerprint or face unlock, and the date and time. If you use fingerprint or face unlock, your fingerprint or face never leaves your phone. We only receive a secure confirmation that you approved.
- Your device: basic information about the phone or computer you apply from (such as its model, screen size and operating system) and a device identifier cookie. We use these for credit assessment and fraud prevention.
- Referral: the referral code you use, if any.
When you use My loan, Refer & earn, the agent area or the employer portal
- My loan: you sign in with your ID number and mobile number. We show your applications, approved terms, repayment schedule and, where your loan is in our loan system, your balance and next payment due.
- Refer & earn and agents: your name, mobile number, the number we pay commission to, your referral code, and the people who applied using your code. Agents also have a sign-in.
- Partner employers: the names, email addresses and sign-in codes of the employer's representatives. It also includes the staff list the employer gives us for payroll loans: names, ID numbers, employee numbers, salary, deductions and employment dates.
From other sources
- Where you have authorised it in your application: your employer, the Salary Service Bureau (for civil servants), credit reference bureaus, our loan management system and the people you give as references.
4. How we use your information and why we are allowed to
| What we use it for | Our lawful reason |
|---|---|
| Running and securing the website, preventing misuse and keeping security logs | Our legitimate interest in a safe, working website; legal duty to keep information secure |
| Answering your messages and enquiries | Taking steps you have asked for |
| Assessing and deciding your loan application, checking affordability and credit history, verifying your identity, employment and documents | Taking steps at your request before entering into a loan agreement; your consent in the application declarations |
| Preventing and detecting fraud and identity theft, including the selfie and face check and the device check | Your written consent (for biometric information); our legitimate interest and legal duties to prevent fraud and money laundering |
| Setting up, paying out, managing and collecting your loan, including payroll deduction through your employer | Performing your loan agreement |
| Know-your-customer checks and keeping records required for financial institutions | Legal obligations, including the Money Laundering and Proceeds of Crime Act |
| Sending you updates about your application and loan on WhatsApp | Your consent (optional tickbox) |
| Running Refer & earn and paying commission | Our agreement with you as a referrer or agent; the referred person's consent to the referrer being told |
| Reporting to regulators, auditors and authorities; handling complaints and legal claims | Legal obligations; our legitimate interests |
We do not sell your personal information. We do not use it for advertising profiles.
5. Your selfie, face template and automated decisions
The selfie check confirms that the person applying is the owner of the ID and is present. It protects you from anyone borrowing in your name. We compare your face template with:
- the photo on your ID;
- your own earlier applications;
- other applicants, to detect one person applying under different ID numbers.
We ask for your written consent to this in the application declarations. If you do not wish to use the online selfie check, you can apply at any of our branches instead.
We use an automated credit score to help assess applications. For some small products, such as emergency loans, an application that meets all the criteria may be approved automatically. We never decline an application by automated means alone: a member of staff reviews every application that is not approved automatically. You may ask for any decision about you to be reviewed by a person, and you may give us your point of view.
6. Who we share your information with
We share only what is needed, and only with:
- Our loan management system (Loandisk, provided by Cirratek Pty Ltd, Australia), where your borrower record, loan and supporting documents are kept once your application is booked.
- Your employer or the Salary Service Bureau, to confirm your employment and set up payroll deductions, where your loan is repaid from salary.
- Credit reference bureaus and verification services, to check your identity and credit history.
- Payment providers, such as EcoCash or your bank, to pay out your loan and receive repayments.
- WhatsApp (Meta Platforms), to send the updates you asked for, if you ticked that option.
- Ecowebzim, our website hosting, support and maintenance provider, which keeps the website running under our instructions.
- The person who referred you: only if you agreed. They see only your first name and initial and whether your loan has been paid out. They never see your loan amount or other details.
- Our professional advisers, auditors and insurers.
- Regulators and authorities, such as the Reserve Bank of Zimbabwe, the Financial Intelligence Unit, POTRAZ, the courts and the police, when the law requires or allows it.
- Debt collectors or lawyers, if a loan is not repaid as agreed.
Service providers may use your information only to provide their service to us. They must keep it confidential and secure.
7. Information processed outside Zimbabwe
Some of our providers store or process information outside Zimbabwe. For example, our loan management system is provided from Australia, and WhatsApp messages are handled by Meta. We only transfer personal information outside Zimbabwe as the Cyber and Data Protection Act allows: where the destination provides an adequate level of protection, or where another lawful condition applies, such as the transfer being necessary for your loan agreement or your consent. We comply with the requirements of the Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ) for such transfers.
8. How long we keep your information
| Information | How long |
|---|---|
| Customer and loan records, ID documents and identity checks (including your selfie and face template) | For as long as you are a customer and at least 5 years after the business relationship ends, as the Money Laundering and Proceeds of Crime Act requires |
| Loan transactions and repayments | At least 5 years from the date of each transaction |
| Applications that were declined or withdrawn, and their documents and selfie | 2 years from the decision, to prevent fraud and answer queries, unless the law requires longer |
| Messages sent through the website | 2 years |
| Refer & earn and commission records | 5 years after the commission is paid |
| Server and security logs | Up to 12 months. Records used to block repeated sign-in attempts are deleted after 24 hours |
| Partner employer staff lists | While the payroll loan agreement with that employer is in force, then as for customer records for staff who borrowed |
When information is no longer needed, we delete it or make it anonymous. We may keep it longer if it is needed for a legal claim, an investigation or a regulator.
9. How we protect your information
- The website uses encrypted connections (HTTPS).
- Uploaded documents, selfies and signatures are kept in private storage that cannot be opened from the internet. Only signed-in staff with a need to see them can view them.
- Staff have individual accounts and roles. Loan decisions need more than one person ("four-eyes"), and important actions are recorded in an audit trail.
- Sign-in and form attempts are limited to stop guessing and automated abuse. Our systems are tested and monitored for security weaknesses.
No system connected to the internet can be guaranteed to be completely secure. If we suffer a personal data breach, we notify POTRAZ within 24 hours of becoming aware of it, as the law requires. Where there is a high risk to you, we also tell you.
10. Cookies and similar technologies
Cookies are small files that a website stores in your browser. We use only the cookies needed for the website to work safely. We do not use advertising, tracking or analytics cookies, and we do not allow third parties to place cookies when you browse our pages.
| Cookie | What it does | How long it lasts |
|---|---|---|
qcsid | Keeps you signed in to My loan or the staff and partner areas, keeps your application form together while you fill it in, and protects forms against forgery. | Until you close your browser (sign-in expires after a period of inactivity) |
qc_did | A random device identifier, set when you open the application form. It helps us detect one device being used to apply under several ID numbers (fraud prevention). | 13 months |
qc_ref | Remembers the referral code when you open a friend's or agent's referral link, so it is filled in on the application form. | 60 days, only if you use a referral link |
qc_cookies | Remembers that you have closed the cookie message. | 1 year |
Other technologies
- If you install the QuickCred app from your browser, your phone stores copies of our pages' design files (not your personal information) so the app opens quickly.
- If you choose to confirm the terms with your fingerprint or face unlock, your phone stores a security key for www.quickcred.co.zw. It stays on your phone and you can delete it in your phone's settings.
- The selfie and ID checks run inside your browser. Your camera is used only while you take the photos, and only after you allow it.
- Our branch maps (Google Maps) on the Contact page load only when you click Show map. Google may then set its own cookies under Google's privacy policy.
- Our fonts are served from our own website. A few stock photographs may be loaded from the Unsplash image service, which receives your IP address in order to send the picture but does not set cookies.
- Links to WhatsApp, Facebook and LinkedIn take you to those services, which have their own privacy policies.
You can delete or block cookies in your browser settings. If you block the cookies above, sign-in and the online application will not work.
11. Your rights
Under the Cyber and Data Protection Act you have the right to:
- be told how your personal information is used (this notice);
- ask for a copy of the personal information we hold about you;
- ask us to correct information that is wrong or misleading, and to delete false or misleading information;
- object to our use of your information, and object at any time to direct marketing;
- withdraw a consent you have given, such as for WhatsApp updates. This does not affect what we did before, and some consents, such as the selfie check, are needed for an online application;
- not be subject to a decision based solely on automated processing that significantly affects you, except as allowed by law (see section 5);
- complain to the Data Protection Authority (POTRAZ).
To use these rights, contact our Data Protection Officer (section 2) or any branch. We will check your identity first, to protect your information. We will reply within 30 days. We may not be able to delete information that the law requires us to keep.
12. Messages from us
We send you messages about your application and loan by phone, SMS or email, and on WhatsApp if you chose it. We will only send you promotional messages if you have agreed to receive them, and every promotional message will tell you how to stop them. Visiting the website or sending us an enquiry is not agreement to promotional messages.
13. Children
Our loans are only for people aged 18 and over. We do not knowingly collect information about children through the website. If we learn that we have, we will delete it.
14. Help us keep you safe
- Use only our official website www.quickcred.co.zw, our branches and official numbers. We will never ask for your EcoCash PIN, bank PIN or passwords.
- Give us accurate information, and only give another person's details (such as next of kin or references) if they know you are doing so.
- Report suspicious messages, websites or callers using the QuickCred name to info@quickcred.co.zw or +263 8644 281 720.
15. Changes to this notice
We may update this notice when our website, services or the law change. The current version is always on this page, with its version number and date. If a change significantly affects how we use information you have already given us, we will tell you.
16. Contact us and complaints
For any privacy question, request or complaint, contact our Data Protection Officer, Tendai Mataba-Okafor: privacy@quickcred.co.zw, +263 242 750 138 / +263 780 275 919. You can also write to QuickCred Finance, 5th Floor, Karigamombe Centre, 53 Samora Machel Avenue, Harare, Zimbabwe.
If you are not satisfied with our response, you may complain to the Data Protection Authority: the Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ).