PayrollMaster is a payroll, human-resources and attendance service operated by Batanai Digital Ventures of 158 Harare Street, Harare, Zimbabwe ("PayrollMaster", "we", "us"). Contact us at info@payrollmaster.co.zw.
1. Information we process
- Account and company details, including names, usernames, email addresses, telephone numbers and subscription records.
- Employee records entered by customers, including identity, address, contact, employment, attendance, leave, salary, banking, tax, pension, medical-aid and statutory information.
- Authentication, audit, security, device, IP-address and application error information.
- Invoices, payment status and Paynow transaction references. PayrollMaster does not store customers’ payment-card credentials.
- Support communications and files supplied to resolve a request.
2. Why information is used
We process information to provide payroll calculations and reports; administer employee, attendance and leave records; authenticate users; maintain audit trails; deliver support; issue invoices; reconcile payments; prevent misuse; secure, back up and restore the service; comply with legal obligations; and communicate service or subscription notices.
3. Legal and contractual grounds
Processing is undertaken to perform the customer contract, comply with applicable employment, tax and statutory duties, protect legitimate security and service interests, and follow customers’ lawful instructions. Customers are responsible for identifying and documenting the lawful basis on which they enter and use employee information.
4. Sharing and service providers
Information is disclosed only where necessary to authorised customer users, hosting and backup providers, email-delivery providers, Paynow, professional advisers, regulators or public authorities lawfully entitled to receive it. Providers must process information for the contracted purpose and apply appropriate confidentiality and security safeguards.
5. International and off-site storage
Encrypted backups or supporting infrastructure may be hosted outside Zimbabwe. Where personal information is transferred across borders, PayrollMaster and the customer will apply contractual, organisational and technical safeguards and address the requirements governing transborder data flows.
6. Retention
Customer payroll data is retained for the subscription term and for a reasonable export, recovery or legally required period after termination. Account, invoice, audit and security records may be retained where needed for taxation, dispute resolution, fraud prevention or legal compliance. Encrypted backup retention follows daily, weekly and monthly recovery schedules before secure deletion.
7. Security
Safeguards include access controls, role-based permissions, encrypted transport, protected sessions, audit logs, encrypted backups, monitoring and restoration procedures. No system can guarantee absolute security. Customers must protect credentials, use authorised devices and promptly report suspected compromise.
8. Individual rights
Depending on applicable law, an individual may request access, correction, deletion, restriction or information about processing. Employees should ordinarily submit requests to their employer, which controls their payroll record. We assist customers with valid requests and respond directly where PayrollMaster is the controller.
9. Security incidents
We investigate suspected personal-information incidents, take reasonable containment and recovery steps, and notify affected customers without undue delay where their information may be involved. Customers remain responsible for regulator and employee notifications required of them as controller.
10. Complaints and regulatory contact
Privacy questions may be sent to info@payrollmaster.co.zw. Individuals may also raise concerns with the Postal and Telecommunications Regulatory Authority of Zimbabwe in its capacity as the Data Protection Authority.
11. Changes
We may revise this notice when the service, providers or legal obligations change. Material revisions will be communicated through the service or account email.