Privacy Policy

Effective date: 28 June 2026

TapuTafa Auto Spares (Pvt) Ltd t/a Auto Bros ("Auto Bros", "we", "us", or "our") operates the website at https://autobroszimbabwe.com and the Autobros Android application (package name com.autobros.store) for authorised store staff. This Privacy Policy explains what personal information we collect, how we use it, and the choices you have.

1. Who this policy applies to

• Website visitors and customers who browse, register, order parts, or contact us online.
• Authorised staff users who sign in to the Autobros store app to sell, manage inventory, and sync data with our systems.

2. Information we collect

2.1 Website account and orders

When you create an account or place an order, we may collect:

• Name, email address, and phone number
• Account password (stored in hashed form; we do not store plain-text passwords)
• Shipping and billing details, delivery address, and order notes
• Payment method selection and order history

2.2 Website usage and technical data

When you use our website, we automatically collect certain technical information, such as:

• IP address, browser type, device type, and referring pages
• Session and cookie data needed to keep you signed in, secure forms, and remember your cart
• Pages viewed and general site interaction, including through analytics tools described below

2.3 Website assistant (chatbot)

If you use the Auto Bros Assistant on our website, the messages you type are processed so we can answer questions about parts, symptoms, and fitment. Messages may be sent to a third-party AI service provider to generate responses and to search our product catalogue. Please do not submit sensitive personal information in the chat.

2.4 Autobros store app (staff)

Authorised staff who use the Autobros Android app may have the following processed:

• Sign-in email and password (passwords are transmitted securely for authentication; optional "remember me" credentials are stored in encrypted storage on the device)
• Staff name, user ID, role, and selected shop or store location
• A device token issued by our server to authorise sync for up to 30 days
• Business data synced to and from the device, including products, sales, payments, receipts, and customer records (such as customer name, email, and phone number entered for store use)
• Barcode scans processed through the device camera to look up products (we do not store camera photos for this feature)
• Network connectivity status to support offline operation and background sync

Sales and customer data created in the app may be stored locally on the device until it syncs with our servers. The app is intended for authorised Auto Bros personnel only, not for general public download unless we make it available to you.

2.5 Communications

If you provide a phone number, we may send transactional SMS messages (for example order updates or account notifications) through our SMS service provider. Standard message rates from your carrier may apply.

3. How we use your information

We use personal information to:

• Provide, operate, and improve our website, app, and customer services
• Process orders, payments, deliveries, returns, and customer support requests
• Authenticate staff users and sync store data between devices and our servers
• Send service-related communications, including order status and account notices
• Protect against fraud, abuse, and security incidents
• Understand how our services are used and improve performance and content
• Comply with legal, tax, and regulatory obligations

4. Legal bases (where applicable)

Depending on your location and the context, we process personal information because it is necessary to:

• Perform a contract with you (for example fulfilling an order or providing staff access)
• Pursue our legitimate business interests (such as securing our services and improving them)
• Comply with legal obligations
• Based on your consent, where required (for example optional marketing or non-essential cookies, if offered)

5. How we share information

We do not sell your personal information. We may share information with:

• Service providers that help us run our business, such as hosting, analytics, SMS delivery, payment processing, and AI/chat processing providers, only as needed to perform services for us
• Professional advisers (for example accountants or lawyers) where reasonably necessary
• Authorities when required by law, court order, or to protect rights, safety, and security
• Business transfers in connection with a merger, acquisition, or sale of assets, subject to appropriate safeguards

6. Cookies and analytics

Our website uses cookies and similar technologies for essential functions (such as login sessions, security tokens, and shopping cart persistence). We may also use Google Analytics to understand website traffic and usage. You can control cookies through your browser settings; disabling some cookies may affect site functionality.

7. Data retention

We keep personal information only for as long as needed for the purposes described in this policy, including to meet legal, accounting, and reporting requirements. Order and tax records may be retained for longer periods where required by law. Staff device tokens expire automatically. Local app data on a staff device remains until the user signs out, the app data is cleared, or the device is decommissioned according to our internal procedures.

8. Security

We use reasonable technical and organisational measures to protect personal information, including encrypted credential storage on staff devices, secure server connections (HTTPS in production), access controls for staff accounts, and hashed passwords on our servers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your rights and choices

Depending on applicable law, you may have the right to:

• Access, correct, or update your personal information
• Request deletion of certain information, subject to legal exceptions
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent
• Lodge a complaint with a relevant data protection authority

To make a request, use our account & data deletion form or contact us using the details below. We may need to verify your identity before responding. Staff app users should also contact their store administrator for access tied to employment or authorised use.

10. Children

Our services are not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us so we can take appropriate action.

11. International processing

Our services are operated from Zimbabwe. If you access our services from outside Zimbabwe, your information may be processed in Zimbabwe and, where we use third-party providers, in other countries where those providers operate. We take steps designed to protect your information in line with this policy.

12. Third-party links

Our website may link to third-party sites (for example social media or maps). We are not responsible for the privacy practices of those sites and encourage you to review their policies.

13. Changes to this policy

We may update this Privacy Policy from time to time. The "Effective date" at the top will change when we do. Material changes will be posted on this page. Continued use of our services after an update means you accept the revised policy.

14. Contact us

If you have questions about this Privacy Policy or how we handle personal information, contact:

TapuTafa Auto Spares (Pvt) Ltd t/a Auto Bros
Engen Miga, 27 Cripps Road, Graniteside, Harare
Email: AutoBrosZimbabwe@gmail.com
Website: https://autobroszimbabwe.com