How we handle personal information.

1. Who we are

Trip Tally is a passenger counting and fare-protection platform for bus operators. The website is operated by Trip Tally Analytics. Company registration details, including the registered office and company number, will be added after incorporation is complete.

For privacy questions or requests, contact us at admin [at] triptally.co.zw.

2. Legal basis and privacy principles

We aim to handle personal information consistently with Zimbabwe's Data Protection Act [Chapter 11:22], the Cyber and Data Protection regulations administered by POTRAZ as the Data Protection Authority, and other privacy or consumer-protection laws that may apply to visitors or customers in their location.

Our operating principles are lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, security, confidentiality, and accountability.

3. Information we collect

When you use the public website, we may collect:

• Name, company/operator name, email address, phone number, country calling code, and trial objective submitted through the enquiry form.
• Messages, questions, and other information you send to us by email or through later communications.
• Technical information needed to protect the form, including Cloudflare Turnstile tokens, approximate request metadata, IP address, browser information, and server logs.
• Operational records needed to diagnose abuse, spam, failed submissions, delivery issues, or security incidents.

Please do not send special-category, sensitive, children's, biometric, health, financial-account, or unnecessary passenger data through the public trial enquiry form.

4. How we use information

We use personal information to:

• Respond to trial enquiries and arrange product discussions.
• Understand a transport operator's route, fleet, and revenue-assurance requirements.
• Send service-related communications that you requested or that relate to an active enquiry.
• Protect the website against spam, automated abuse, security threats, and fraudulent submissions.
• Keep internal business records, improve the website, and comply with legal obligations.

We do not sell personal information. We do not use public enquiry-form data to make solely automated decisions with legal or similarly significant effects.

5. Sharing and service providers

We may share limited personal information with trusted service providers who help us operate the website and respond to enquiries, including hosting providers, Google Workspace for email, Cloudflare Turnstile for bot protection, DNS/security providers, and professional advisers where needed.

These providers may process information outside Zimbabwe. Where cross-border processing is involved, we take reasonable steps to use providers with appropriate contractual, technical, and organisational safeguards.

6. Retention

We keep trial-enquiry information for as long as needed to respond to the enquiry, manage a potential customer relationship, maintain business records, and comply with legal requirements. As a working rule, ordinary website enquiries should normally be reviewed within 24 months unless there is an active commercial discussion, contract, legal requirement, dispute, or security reason to retain them longer.

7. Security

We use reasonable technical and organisational safeguards, including server-side form handling, SMTP credentials kept outside GitHub, Cloudflare Turnstile, request validation, rate limiting, security headers, restricted access, and operational monitoring.

No internet service can be guaranteed completely secure. If we become aware of a personal-data breach that requires notification, we will assess and handle it in line with applicable law and regulatory requirements.

8. Your rights

Depending on the law that applies, you may have rights to request access to your personal information, correction of inaccurate data, deletion, restriction, objection to certain processing, withdrawal of consent where processing is based on consent, and information about how your data is used or shared.

To exercise a right, email admin [at] triptally.co.zw. We may need to verify your identity before acting on a request.

9. Portal and passenger-counting services

This policy covers the public website and trial enquiries. The future authenticated customer portal, edge devices, APIs, fleet reports, and passenger-counting operations may require additional customer agreements, data-processing terms, role-based access rules, retention schedules, and operational privacy notices.

10. Changes to this policy

We may update this policy as Trip Tally Analytics is incorporated, the website changes, the portal launches, or legal requirements develop. The latest version will be posted on this page.