Golden Plate Logo
Privacy

Privacy Notice

Effective date: 30 August 2026 · Consent version: 2026-08-30

Golden Plate Investments (Private) Limited (“Golden Plate”, “we”, “us” or “our”) is a microfinance institution and respects your privacy. This website is an information and contact gateway: it helps you understand our services, find our offices and contact channels, and, if you choose, send an enquiry or application for review. The website does not itself approve or issue loans, and using it does not create a loan or other finance agreement. This notice explains how we process personal information when you visit this website, contact us, or apply for finance. It is intended to support the Cyber and Data Protection Act [Chapter 12:07] of Zimbabwe and, where the GDPR applies, the GDPR. It does not replace any privacy information provided in connection with a separate loan agreement or service.

1. Controller and contact

Golden Plate is the controller of the personal information described in this notice. Contact us about privacy, consent, or your rights at info@goldenplate.zw or Golden Plate Investments (Private) Limited, Kopje Post Office, 10–12 Charter Road, Harare, Zimbabwe.

2. Information we collect and where it comes from

We collect information you give us directly, including when you make an enquiry or submit an application. A callback request uses the limited information described in section 3. A detailed application may include your name, contact details, national identification number, address, age and other demographic details, employment and business information, income, sales, assets, collateral, loan request and purpose, correspondence, and information about a next of kin or guarantor that you choose to provide.

We also receive limited technical information automatically when you use the website, such as your IP address, browser and device information, pages or features used, referral URL, and time of visit. We may receive verification or fraud-prevention information from the sources we are legally permitted to use. Please provide information about another person only if you are authorised to do so and have informed them of this notice.

3. Enquiries and callback requests

If you submit a callback request, we collect your name, phone number, optional email address, broad finance need, optional amount range and any message you choose to provide. We use these details to respond, explain available options, arrange follow-up and guide you through the next step. A callback request is not a full finance application, approval or credit offer. Providing details is optional, but without a way to contact you we may not be able to respond. Please do not include your national ID, bank details or full financial records in this first-step request.

4. Why we use information

We use personal information to respond to enquiries and callback requests; receive, verify, assess and administer applications and any resulting facility; prevent fraud and protect our systems; analyse and improve our website where you allow optional analytics; meet legal, regulatory, audit and record-keeping duties; and establish, exercise or defend legal claims. We do not sell personal information or use application information for direct marketing.

Under Zimbabwean law, we process information only for explicit, legitimate purposes and only to the extent necessary. Where the GDPR applies, the legal basis depends on the purpose and may be taking steps at your request before a contract, performing a contract, complying with a legal obligation, our legitimate interests in operating safely and responsibly, or your consent. We do not rely on consent where processing is necessary to provide the requested service or meet a legal obligation.

5. Application information and consent

Some application information, including national ID, financial, employment and demographic information, may be sensitive personal information. The application form identifies the fields required to assess your request. If you do not provide required information or do not give the written consent requested for sensitive information, we may be unable to assess or continue your application.

When you tick the separate data-processing consent box and submit an application, you specifically consent to Golden Plate collecting, recording, using, storing and sharing the information in that application for the purposes in section 4, including verification and fraud-prevention checks. We record the consent date, notice version and IP address with the application. You can withdraw consent at any time, free of charge, by contacting us. Withdrawal does not affect processing already undertaken, and may mean we cannot continue an application if the information is required for that purpose or by law.

6. Cookies, browser storage and analytics

We use essential cookies and local browser storage needed for basic site operation, security, and to remember your privacy choice. These are not used for advertising.

With your affirmative choice to accept analytics, we use PostHog to measure website use and, where enabled, session replay. PostHog may receive online identifiers and usage information, such as IP address, browser/device details, pages viewed and interaction data. Analytics and session replay are optional: choosing “Use essential only”, or changing your choice through the Privacy choices link, stops optional capture going forward. Declining optional analytics will not prevent you from using the website or applying for finance.

7. Who we share information with

We share information only where necessary with authorised staff, professional advisers, service providers acting under our instructions, regulators, law-enforcement bodies, credit or fraud-prevention service providers, and parties involved in a corporate transaction or legal claim. We require processors to protect information and process it only on our instructions, except where the law requires otherwise. PostHog is an analytics service provider only when you opt in to optional analytics.

8. International transfers

Our optional PostHog configuration uses its US cloud endpoint. If you opt in to analytics, related information may therefore be processed outside Zimbabwe. We will make an international transfer only where permitted by applicable law and will use appropriate safeguards, including contractual or other lawful protections where required. Other service providers may process information outside Zimbabwe only where necessary and subject to the same approach.

9. Retention and security

We keep information in identifiable form only for as long as necessary for the purpose for which it was collected, to administer any relationship, resolve disputes, and meet applicable legal, regulatory, tax, accounting and audit requirements. Retention can therefore differ by record type and legal obligation. We use organisational and technical measures designed to protect information against unauthorised access, loss, alteration or disclosure. No internet transmission or storage system is completely secure.

10. Your rights and complaints

Under Zimbabwean law, you may ask to be informed about how your personal information is used; request access to it; object to its processing; and request correction or deletion of false or misleading information. You may withdraw consent as described above. Where the GDPR applies, you may also have rights to erasure, restriction, data portability and to complain to your local supervisory authority.

To exercise a right, email us using the details in section 1 and tell us what you are requesting. We may need to verify your identity before acting. You may complain to the Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ), the designated Data Protection Authority of Zimbabwe.

11. Decisions, children and updates

We do not make loan decisions solely by automated processing. Our website and financial products are not directed to children under 18. Please do not submit a child’s information unless it is required and permitted by law. We may update this notice to reflect changes in our processing or the law; the current version and effective date will always appear on this page.