Growth Factor Privacy Policy

GROWTH FACTOR (PRIVATE) LIMITED PRIVACY POLICY

Effective Date: 7 July 2025
Last Updated:

Introduction

  • Welcome to Growth Factor (Pvt) Ltd, hereafter “Growth Factor”) (“we,” “our,” or “us”). Growth Factor is a specialist financial services company providing innovative, fast, and flexible funding solutions to healthcare service providers through medical aid claims factoring.
  • This Privacy Policy explains how Growth Factor collects and uses your personal information, with whom it is shared, and your choices and rights in relation to your personal information.
  • It applies to personal information that is collected from you physically or in a borderless digital environment during your interactions with us, whether online, including through our websites (including mobile sites), social media sites and mobile applications (collectively “Internet Services”) that link to this Privacy Statement, in writing or orally, or personal information that we may collect offline or receive from third parties.
  • By using our services, you acknowledge and agree to the practice described in this policy.

Personal Information We Collect

  • Growth Factor is primarily subject to the Cyber and Data Protection Act of 2021 (“CDPA” and its Regulations) and other data and privacy regulations from where you can access our services or internet services.
  • We may collect the following kinds of information when you use the Services:
    Information you provide directly to us. For certain activities, such as when you register, use our services, subscribe to our alerts, or contact us directly, we may collect some or all of the following types of information:
  1. Contact information, such as your full name, email address, mobile phone number, and address;
  2. Identification Number, Banking details:
  3. Username and password;
  4. For Healthcare Service Providers, we also collect information about your claim history.
  • Any other information you provide to us.
  • We may combine such information with information we already have about you.
  • We may also collect other information that does not personally identify you. Such other information includes browser and device information, website and application usage data, IP addresses, demographic information such as geographic location, home language, and information collected through cookies and other technologies or information that has been anonymised or aggregated. If we link this information with your personal information, we will treat such linked information as personal information.
  • You can choose not to provide personal information to us when requested. However, if this is necessary to provide you with our solutions, products and services, access to our Internet Services, or to perform administrative functions, we may be unable to provide you with our solutions or services.

 

How we collect your personal information

  • When you access our Internet Services, or interact with us in any other way, or use our solutions, products and services.
  • We collect personal information when you:
  1. Visit our platform
  2. Create an account with us (including through online sign-up forms),
  3. We may also collect personal information via API integrations, such as through switch service providers or other technical integrations necessary for providing our services.
  4. Use our solutions, products and services,
  5. Perform administrative and business functions,
  6. Register for our events, workshops and seminars,
  7. Subscribe to our mailing lists and newsletters.
  • When you communicate with us.
  1. We collect personal information when we respond to your inquiries and requests, obtain feedback from you about our solutions, products and services or you apply for employment with us.

Usage Data

  • Usage Data is collected automatically when using the Service.
  • Usage Data may include information such as your device’s Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our service that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers and other diagnostic data.
  • When you access the service by or through a mobile device, We may collect certain information automatically, including, but not limited to, the type of mobile device you use, your mobile device unique ID, the IP address of your mobile device, your mobile operating system, the type of mobile Internet browser you use, unique device identifiers and other diagnostic data.
  • We may also collect information that your browser sends whenever you visit our service or when you access the service by or through a mobile device.

Legal basis for processing your personal information

  • When we process your personal information in connection with the purposes set out in this Privacy Statement, we may rely on one or more of the following legal bases, depending on the purpose for which the processing activity is undertaken and the nature of our relationship with you:
  • Processing is necessary to meet our contractual obligations with you which include verifying your identity, efficiently managing the administrative and operational aspects of the practice and customer support relating to your consultations.
  • Our legitimate interests (or those of a third party with whom we share your personal information) for the purpose of managing, operating or promoting our business, including direct marketing, and administrative purposes, except where such interests are overridden by your interests or fundamental rights or freedoms which require protection of personal information.
  • Where this is necessary to comply with a legal obligation on us, whether contractually or otherwise.
  • Where you have consented for such processing to take place.

Use of your personal information

  • We may use your personal information to:
  1. Registering you and providing access to the Growth Factor system;
  2. Provide you with access to restricted pages on the Platform; and
  3. Compile non-personal statistical information about browsing habits, click patterns and access to the Platform.
  • Obtain feedback from you about our services, products and solutions including through client satisfaction surveys, in which event, we will only use your personal information for the sole purpose of sending you a survey.
  • Respond to your inquiries and fulfil requests by you.
  • Assess the performance of our Internet Services and to improve their operation.
  • Inform you about and provide you with our products, services and solutions.
  • Update our records and keep your contact details up to date.
  • We engage in these activities to manage our contractual relationship with you, to comply with our legal obligations, or for our legitimate business interests:
  • Provide you with marketing materials and to personalise your experience with us, for example to:
  1. Send marketing communications to you.
  2. Enable you to subscribe to our newsletters and mailing lists.
  3. Enable you to register for Growth Factor events, workshops and webinars.
  • We engage in these activities with your consent or for our legitimate business interests:
  • Achieve our business purposes and analyse information. For example, to:
  1. Establish, manage, and maintain our business relationship with you.
  2. Recruit staff.
  3. Process and respond to privacy requests, questions, concerns and complaints.
  4. Fulfil legal and contractual obligations.
  5. We engage in these activities to manage our contractual relationship with you, to comply with a legal obligation and for our legitimate business interests.

Sharing your personal information

  • We may share your personal information for the purposes set out in this Privacy Policy (as applicable):
  • With Healthcare Insurance Companies and other healthcare-related entities.
  • For Business Transfers: We may share or transfer Your personal information in connection with, or during negotiations of, any merger, sale of Company assets, financing, or acquisition of all or a portion of Our business to another company.
  • With Corporate Affiliates: We may share Your information with Our affiliates, in which case we will require those affiliates to honour this Privacy Policy. Affiliates include joint venture partners or other companies that We control or that are under common control with Us.
  • With your consent: We may disclose Your personal information for any other purpose with Your consent.
  • Legal Purposes: If we are legally compelled to disclose information about you to a third party, we will attempt to notify you by sending an email to the email address in our records unless doing so would violate the law or unless you have not provided your email address to us. We may disclose information to respond to subpoenas, court orders, legal process, law enforcement requests, legal claims or government inquiries, and to protect and defend the rights, interests, and security of Growth Factor, our affiliates, users, or the public.
  • Any third parties with whom we share personal information are contractually required to implement appropriate data protection and security measures to protect personal information and are not permitted to use personal information for any purpose other than the purpose for which they are provided with or given access to personal information.

Your rights as a Data Subject

  • As a data subject you have certain rights under section 14 of the CDPA relating to your personal information which are:
  1. The right to be informed of the use your personal data will be put.
  2. The right to access your personal information in our custody.
  3. The right to object to ways we are using all or parts your personal data.
  4. The right to correction of inaccurate personal data or incomplete.
  5. The right to deletion of false or misleading information.
  6. The right to withdraw consent if we are using your data based on your consent.
  7. The right to complain to the designated Data Protection Authority which is the Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ).
  • You can exercise these rights in relation to your personal data by writing to us using the contact details below.

Security of your personal information 

  • Growth Factor is committed to protecting your personal information from accidental or unlawful destruction, damage, loss, alteration, unauthorised access or disclosure by using reasonable, appropriate, physical, administrative and technical safeguards and contractually requiring that third parties to whom we disclose your personal information do the same.

Cross Border Transfers

  • Growth Factor fulfils its contractual obligations with you by transferring your personal information to South Africa in connection with the purposes identified above and in accordance with this Privacy Statement.
  • Your information, including Personal Data, is processed at the Company’s operating offices and in any other places where the parties involved in the processing are located. It means that this information may be transferred to and maintained on computers located outside of Zimbabwe where the data protection laws may differ.
  • Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.
  • The Company will take all steps reasonably necessary to ensure that Your data is treated securely and in accordance with this Privacy Policy and no transfer of Your Personal Data will take place to an organisation or a country unless there are adequate controls in place including the security of Your data and other personal information.

Links to third party websites and applications

  • Our Internet Services may contain links to third party websites and applications. 
  • We are not responsible for and make no representations or warranties in relation to the privacy practices or content of any third-party websites and applications. Your use of such sites and applications is subject to the applicable third-party privacy policy or statement and is at your own risk.

Retention of your personal information

  • We will retain your personal information for as long as is necessary to fulfil the purpose for which it was collected unless a longer retention period is required to comply with legal obligations, resolve disputes, protect our assets, or enforce agreements. The criteria we use to determine retention periods include whether:
  1. We are under a legal, contractual or other obligation to retain personal information, or as part of an investigation or for litigation purposes;
  2. Personal information is needed to maintain accurate business and financial records the extent required by government agencies including tax authorities and in compliance with court orders, other quasi-judicial directives and regulatory authorities.
  3. You have consented to us retaining your personal information for a longer retention period, in which case, we will retain personal information in line with your consent.

Updates to this Privacy

  • We may update this Privacy Policy at any time. If we do, we will update the “last modified” section of this Privacy Policy.
  • We encourage you to regularly review this Privacy Policy to stay informed about our privacy practices.

 

How to contact us

  • If you have any complaints, requests or questions about how your personal information is handled by Growth Factor, you have a privacy concern or you wish to make a request or a complaint relating to your personal information, please contact us.

You can reach us at:

Email: dpo@health263.systems