Privacy notice
What we collect
Providers: business name, TIN and VAT number, contact details, fiscal device identifiers, the keys that sign in to the portal and the app, and (if you bring your own gateway) your Pesepay merchant keys, which are encrypted at rest.
Payers and patients: the payer's name, phone number and email as entered by reception; an amount; a short description of what the payment is for (for example "Consultation deposit"); an opaque reference chosen by the provider (an admission or script number); the gateway's transaction reference; and the fiscal receipt. ClinicPay does not collect diagnoses, treatment details or any other clinical information, and providers are asked not to enter them.
Why we use it
To create and send payment requests, to collect and confirm payments through the gateway, to issue fiscal receipts to ZIMRA on the provider's behalf, to send payment links, reminders and confirmations by WhatsApp and email, to produce the provider's settlement reports and statements, and to keep the service secure.
Who sees it
The provider and its reception staff (for their own site); Pesepay, which processes the payment; ZIMRA, which receives the fiscal receipt (amount, tax class, provider identity — never the payer's contact details); and our hosting provider. We do not sell data and do not use it for advertising.
How long we keep it
Fiscal receipts and the payments behind them are kept for the period tax law requires (currently six years). Payer contact details are kept for as long as the request is open plus twelve months, after which they are removed from closed requests.
Your rights
You may ask what we hold about you, ask for corrections, and object to processing that is not required by law, by writing to the address below. Payers should direct requests about a specific payment to the provider that requested it; we will assist the provider.
Contact
Data controller: ClinicPay, Harare, Zimbabwe · hello@clinicpay.co.zw. Registered with POTRAZ as a data controller (application in progress).