CentNow · Quick Voucher Express Limited
Privacy and Data Protection Policy
Operated by Quick Voucher Express Limited · Effective and last updated 22 October 2026.
1. Introduction
CentNow is a merchant technology platform operated by Quick Voucher Express Limited (CentNow, we, our or us). We are committed to protecting the privacy, confidentiality and security of personal information belonging to customers, merchants, agents, business partners and website visitors. This policy explains how we collect, use, store, process, disclose and protect personal information when you visit our website, access our application, register an account or use our services. We aim to handle personal information in accordance with applicable laws of the Republic of Zambia, including the Data Protection Act No. 3 of 2021, and other applicable legal requirements.
2. Personal information we collect
Depending on the services you use, we may collect: full name and contact details; mobile telephone number and email address; business name and business contact information; merchant and agent registration details; identity-verification information where necessary and lawfully collected; usernames, account identifiers, authentication and account-security information; account status, permissions and registration history; transaction references, amounts, dates, times, merchant and agent identifiers, payment-channel and service details, and commission, settlement and reconciliation records. We may also collect IP addresses, device and browser information, application logs, login attempts, error reports and security events. Where necessary and lawful, we may receive payment confirmations, transaction references, verification results and other relevant information from payment processors and authorised business partners. We aim to collect only information reasonably necessary for the relevant purpose.
3. How we use your information
We may use personal information to create and manage accounts; provide merchant technology and payment-related services; facilitate transactions through authorised payment partners; record and reconcile transactions; calculate commissions and maintain settlement records; verify accounts and prevent fraud; detect suspicious activity and unauthorised access; respond to enquiries and resolve disputes; maintain business, accounting and audit records; comply with legal and regulatory obligations; and improve platform functionality, reliability and security. We will not knowingly process personal information for incompatible purposes without an appropriate lawful basis.
4. Lawful basis for processing
We process personal information where an appropriate lawful basis exists under applicable law. Depending on the circumstances, this may include your consent, the necessity of providing a requested service or performing a contract, compliance with a legal obligation, or another lawful basis recognised by applicable law. Where consent is required, we will seek it appropriately. You may withdraw consent where applicable, subject to legal requirements and the consequences for services that depend on the relevant information.
5. Sharing personal information with third parties
We may share personal information with third parties when reasonably necessary for legitimate business purposes and permitted by applicable law. Our technology infrastructure may include Vercel for website hosting and delivery, and Supabase for database, authentication and related application services. We may share necessary transaction information with payment processors, mobile-money providers, banks and other authorised service partners to facilitate payments, confirm transactions, reconcile records and resolve disputes. We may also share relevant information with authorised legal advisers, auditors, accountants and other professional service providers where necessary and lawful, or with legal and regulatory authorities where required or authorised by law. Where lawful, information may be transferred as part of a merger, restructuring, acquisition or business transfer, subject to appropriate safeguards. CentNow does not sell personal information as a business activity and does not knowingly share it for unrelated third-party marketing purposes without an appropriate lawful basis. We seek to limit disclosures to what is reasonably necessary.
6. International data transfers and storage
Some technology and payment service providers may store or process information outside Zambia. CentNow will assess its data-storage and processing arrangements and take the steps required to comply with applicable Zambian data-protection requirements concerning local storage and international transfers. Where required, we will obtain appropriate authorisations or implement applicable safeguards before transferring personal information internationally. We will not knowingly make international transfers in circumstances prohibited by applicable law. Actual storage locations and processing arrangements depend on the services and infrastructure configured for CentNow.
7. Data security
We take reasonable and appropriate technical and organisational measures designed to protect personal information against unauthorised access, disclosure, alteration, loss, misuse or destruction. Depending on the services provided, these may include access controls and role-based permissions; authentication and account-security controls; encryption in transit and, where supported and appropriate, at rest; secure handling of passwords, API credentials and secret keys; database access restrictions; monitoring for suspicious activity and repeated login attempts; security updates, backups and recovery procedures; and incident investigation and response procedures. Access is limited to authorised individuals and service providers who require it for legitimate purposes. No internet-based system can be guaranteed completely secure; we will take reasonable steps to manage security risks and respond appropriately to incidents.
8. Data retention and deletion
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including providing services, maintaining transaction records, preventing fraud and meeting legal obligations. Retention periods depend on the nature of the information and applicable legal requirements. When information is no longer required, we will take appropriate steps to delete it, anonymise it or otherwise dispose of it securely, subject to lawful retention obligations and technical limitations. Certain transaction, accounting or compliance records may need to be retained even after an account is closed.
9. Your privacy rights
Subject to applicable law and relevant exemptions, you may have the right to request access to personal information we hold, correction of inaccurate or incomplete information, deletion where legally permissible, objection to or restriction of certain processing, withdrawal of consent where processing relies on consent, and to lodge a complaint with the competent data-protection authority. We may request information to verify your identity before acting on a request. Some information may need to be retained to comply with legal obligations.
10. Cookies and similar technologies
Our website or application may use cookies and similar technologies to support sessions, authentication, security, performance and user preferences. Where consent is required for non-essential cookies or similar technologies, we will seek consent in accordance with applicable law. You may manage available cookie preferences through controls we provide or through browser settings. Disabling certain cookies may affect functionality.
11. Children’s privacy
CentNow’s merchant and agent services are intended for individuals legally eligible to use the relevant services. We do not knowingly collect children’s personal information where collection is prohibited or required authorisation has not been obtained. If we discover that personal information has been collected unlawfully from a child, we will take appropriate steps to address the matter in accordance with applicable law.
12. Data breaches and security incidents
We maintain procedures intended to identify, investigate, contain and respond to suspected personal-data breaches. Where a breach occurs, we will assess the incident, take appropriate remedial action and notify the relevant authority and affected individuals where and when required by applicable law. We will take reasonable steps to mitigate potential harm and cooperate with competent authorities where necessary.
13. Third-party websites and services
Our website or application may contain links to or integrations with third-party services. Those services may have their own privacy policies and terms governing their independent activities. We encourage users to review those policies before providing information directly to third parties. This section does not exclude any responsibility CentNow may have under applicable law for processing carried out through its own services or arrangements.
14. Changes to this policy
We may update this policy to reflect changes in services, technology, business practices or legal requirements. The latest version will be published on our website with the applicable effective date or last-updated date. Where required by law, we will provide additional notice or obtain consent before implementing material changes.
15. Contact information and privacy requests
For questions about this policy, requests concerning personal information or privacy complaints, contact Quick Voucher Express Limited at mpazi@centnowpayments.info, Lusaka, Zambia, or through www.centnowpayments.site. Please describe your request clearly and provide sufficient information for us to respond. We may need to verify your identity before disclosing or changing personal information. You may also contact the Office of the Data Protection Commissioner in Zambia where appropriate.
16. Accountability and legal compliance
Quick Voucher Express Limited is responsible for ensuring that personal information processed through CentNow is handled in accordance with applicable legal requirements. This policy describes our privacy practices and intended safeguards; it does not replace applicable legal obligations, required registrations, regulatory approvals, contracts or operational security measures. CentNow will review this policy periodically and update it where necessary to reflect changes in operations or applicable law.