Privacy Policy

1. Information we collect

When you create an account we collect your name, email address and contact details. When you list an item, buy a deal or contact a seller, we process the information you provide — including listing content, messages and transaction records.

We also collect basic technical data (such as device and browser information) to keep the platform secure and to understand how the app is used.

2. How we use your information

We use your information to operate DEELZ: creating and managing your account, publishing your listings and deals, processing escrow payments, communicating with you about transactions, and providing support.

We may also use aggregated, non-identifying information to improve the marketplace and measure how features are used.

3. Payments and escrow

Payments made through DEELZ are held securely until the buyer receives what was paid for. We share only the information necessary with payment partners to process transactions and payouts.

4. Sharing your information

We do not sell your personal information. We share it only with service providers that help us run the platform (such as payment and hosting providers), with a buyer or seller when needed to complete a transaction, or where required by Zambian law.

5. Data retention and security

We keep your information only as long as needed to provide our services, meet legal obligations and resolve disputes. We apply reasonable technical and organisational measures to protect it, though no online service can guarantee absolute security.

DEELZ is committed to protecting personal data in line with the Zambia Data Protection Act No. 3 of 2021 and applicable regional data protection principles. We process personal information lawfully, fairly and transparently, collect only what is necessary to run the marketplace, keep it accurate and up to date, and retain it no longer than required. You have rights to access, correct, restrict or request deletion of your personal information, which you may exercise by contacting us at deelzsupport@gmail.com.

Data protection measures in place include encryption of data in transit using industry-standard TLS/HTTPS, encrypted storage of data at rest, role-based access controls that limit who can view or modify personal information to authorised staff only, secure isolated hosting infrastructure, regular security reviews, and audit logging of administrative actions. In the event of a personal data breach likely to result in a risk to your rights, we will document the incident, take reasonable steps to contain it, and notify the relevant supervisory authority and affected individuals where required by law.

Our platform is served exclusively over HTTPS using a valid SSL/TLS certificate issued by a trusted certificate authority. The certificate is actively monitored and automatically renewed before expiry, and all traffic is redirected to the secure connection to ensure your data is never transmitted unencrypted.

Card payments will be processed by ZOYK PAY, our certified payment provider, which is certified as a PCI DSS Level 1 Service Provider — the highest level of payment card industry compliance. We never store, transmit or process full card numbers on our own servers, so cardholder data remains within ZOYK's PCI-compliant environment at all times.

DEELZ maintains an Anti-Money Laundering and Counter-Financing of Terrorism (AML/CFT) policy aligned with Zambian regulatory requirements. Measures include verifying the identity of sellers and businesses before payouts are released, monitoring transactions for unusual or suspicious activity, keeping records of transactions and identity verification, and reporting suspicious activity to the relevant authorities where required. Large or unusual payouts may be delayed while these checks are completed.

Enhanced Due Diligence (EDD) is applied to customers and transactions assessed as higher risk — for example businesses in higher-risk categories, sellers with unusually high transaction volumes or large payout values, customers transacting from or linked to higher-risk jurisdictions, and cases where unusual or suspicious activity has been identified. For these cases we collect additional identifying information, verify the source of funds or goods where appropriate, obtain senior management approval before establishing or continuing the relationship, and apply more frequent monitoring. Where EDD cannot be reasonably completed, DEELZ may decline or restrict the account, withhold payouts, and where required file a report with the Financial Intelligence Centre.

As part of our AML/CFT programme, DEELZ operates a sanctions and Politically Exposed Persons (PEP) screening programme. Before a seller or business is approved and before payouts are released, we screen identifying details against applicable international and Zambian sanctions lists and identify individuals who hold, or have held, prominent public functions (PEPs), their family members and known close associates. A match or potential match triggers enhanced review, senior management approval, and — where the relationship is maintained — ongoing enhanced monitoring. Where screening confirms a sanctions match or an unacceptable risk, DEELZ will decline or restrict the account, freeze any related funds, and report to the Financial Intelligence Centre and relevant authorities where required.

DEELZ conducts Know Your Customer (KYC) procedures on customers before payouts and other higher-risk activities are enabled. Standard Customer Due Diligence (CDD) is applied to all sellers and businesses: we collect and verify identifying details (such as name, contact information and business name), confirm the authenticity of the information provided, and screen against sanctions and PEP lists as described above. Where a customer is assessed as higher risk, Enhanced Due Diligence (EDD) is applied as described above. KYC records are retained for the period required by Zambian law. Where a customer fails or refuses to complete KYC, or where verification cannot be reasonably completed, DEELZ may decline or restrict the account, withhold payouts, and where required report the matter to the Financial Intelligence Centre.

As part of this policy, DEELZ operates a Suspicious Transaction Reporting (STR) process. Transactions flagged by automated monitoring or by our review team as unusual — such as unexpectedly large payouts, rapid resale patterns, or activity inconsistent with a user's profile — are escalated for internal review. Where, after review, an activity is reasonably suspected of being linked to money laundering, terrorist financing, fraud or other financial crime, DEELZ will file a report with the Zambian Financial Intelligence Centre (FIC) and may suspend the related account and funds until the matter is resolved. Reports are made in confidence, and we may be restricted from notifying the individuals concerned.

DEELZ also maintains a Fraud Risk Policy and Response Plan. We continuously assess common fraud risks — such as fake listings, stolen payment cards, account takeovers, and collusion between buyers and sellers — and apply controls including pre-approval review of listings, escrow holding of funds until buyers confirm receipt, and admin-verified payouts. When fraud is detected or strongly suspected, our response plan is triggered: the affected account and any related funds are frozen, the transaction is investigated, affected counterparties are notified where legally permitted, evidence is preserved, and where appropriate the matter is reported to law enforcement and the FIC. Confirmed fraudulent balances are not released to bad actors and may be returned to the legitimate party as platform credit or another agreed non-cash remedy.

6. Your choices

You may update your account details at any time, remove your listings, or request deletion of your account by contacting us at deelzsupport@gmail.com. Some records (such as completed transactions) may be retained where required by law.

7. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will publish the new version on this page with an updated date. Continued use of DEELZ after a change means you accept the updated policy.

8. Contact us

Questions about this policy or your data? Email us at deelzsupport@gmail.com and we will respond as soon as we can.