PRIVACY POLICY
Effective Date: 30-08-2026
I-Rock Technologies Limited (“I-Rock”, “we”, “us” or “our”) respects your privacy and is committed to protecting personal information entrusted to us.
This Privacy Policy explains how we collect, use, store, protect and otherwise process personal information when you use our websites, applications and services, including Figa and Manifyst.
By using an I-Rock service, you acknowledge that you have read and understood this Privacy Policy.
1. About I-Rock
I-Rock Technologies Limited is a company incorporated in Zambia.
I-Rock develops and operates technology products designed to help businesses manage their operations.
Our products currently include:
- Figa — a business management and finance platform for invoicing, payments, expenses, inventory, purchasing, point-of-sale and related business operations.
- Manifyst — a logistics and supply-chain platform for managing the movement of goods and related operational information.
This Privacy Policy applies to both products unless a product-specific privacy notice states otherwise.
2. Information We Collect
Depending on how you use our services, we may collect the following categories of information.
2.1 Account and business information
When you create an account or organisation, we may collect:
- Name
- Email address
- Telephone number
- Username and login information
- Business or organisation name
- Business address
- Registration information
- Tax identification information, where applicable
- Business contact details
- User roles and permissions
2.2 Information entered into our products
Users may enter information into Figa or Manifyst as part of operating their businesses.
For example, Figa may contain:
- Customer information
- Supplier information
- Invoices and quotations
- Payments and receipts
- Expenses
- Inventory information
- Purchase information
- Point-of-sale transactions
- Tax information
- Business reports
Manifyst may contain:
- Customer and client information
- Shipment information
- Transport information
- Vehicle and driver information
- Customs-related information
- Locations
- Inventory and cargo information
- Route and trip information
- Documents and operational records
The business or organisation using our service generally determines what information is entered into the platform and why that information is processed.
2.3 Technical information
When you use our websites or applications, we may automatically collect information such as:
- IP address
- Browser type
- Device information
- Operating system
- Login times
- Access logs
- Pages or features used
- Security and diagnostic information
- Information about errors or system performance
We use this information primarily to operate, secure, maintain and improve our services.
2.4 Communications
If you contact us, we may retain information contained in your communication, including your name, contact details and the contents of your enquiry.
3. How We Use Information
We may use information to:
- Create and manage accounts
- Provide Figa and Manifyst services
- Process transactions and business records
- Provide customer support
- Authenticate users
- Manage subscriptions and billing
- Maintain security
- Detect and prevent fraud, abuse and unauthorised access
- Troubleshoot technical problems
- Monitor and improve system performance
- Develop and improve our products
- Communicate important service information
- Send marketing communications where permitted by law
- Comply with legal, regulatory and tax obligations
- Respond to lawful requests from authorities
- Protect the rights, property and safety of I-Rock, our customers and other persons
We will process personal information in accordance with applicable law.
4. Business Customer Data
Figa and Manifyst are business platforms.
Where a company or organisation uses our services, that organisation may enter personal information belonging to its customers, employees, suppliers, drivers, clients or other individuals.
In such circumstances, the organisation using the service may determine the purposes for which that information is processed, while I-Rock may process the information on behalf of the organisation in providing the service.
The organisation remains responsible for ensuring that it has an appropriate legal basis and authority to collect and use information that it enters into our services.
I-Rock will process such information only as necessary to provide, secure, maintain and support the applicable service, or as otherwise permitted or required by law.
5. Legal Bases for Processing
Where applicable, we may process personal information on the basis of:
- Consent
- Performance of a contract or provision of a requested service
- Compliance with a legal obligation
- Legitimate and lawful business purposes
- Protection of rights and interests
- Other lawful grounds permitted by applicable law
Where processing is based on consent, you may withdraw that consent where permitted by law.
Withdrawal of consent does not affect processing that was lawfully carried out before consent was withdrawn.
6. Sharing of Information
We do not sell personal information.
We may share information where necessary with:
Service providers
We may use third-party providers for services such as:
- Hosting and cloud infrastructure
- Email delivery
- SMS or communication services
- Payment processing
- Security services
- Data storage
- System monitoring
- Technical support
- Other infrastructure required to operate our services
These providers may process information only as necessary to provide services to I-Rock and our customers.
Government and regulatory authorities
We may disclose information where required or permitted by law, including to regulatory, tax, law-enforcement or other authorised government authorities.
For example, certain information may be required to support statutory or tax-related processes where a customer has enabled or uses an applicable integration.
Professional advisers
We may disclose information where reasonably necessary to lawyers, accountants, auditors, insurers or other professional advisers subject to appropriate confidentiality obligations.
Business transactions
If I-Rock undergoes a merger, acquisition, restructuring, sale of assets or similar transaction, information may be transferred as part of that transaction, subject to applicable law.
7. International Data Transfers
Some service providers used by I-Rock may process or store information outside Zambia.
Where personal information is transferred outside Zambia, I-Rock will take reasonable steps to ensure that the transfer and processing are carried out in accordance with applicable data-protection requirements.
8. Data Security
I-Rock takes reasonable technical and organisational measures to protect information against:
- Unauthorised access
- Unauthorised disclosure
- Loss
- Destruction
- Alteration
- Misuse
Security measures may include access controls, authentication, encryption where appropriate, logging, monitoring, backups and other security controls.
However, no internet-based system can be guaranteed to be completely secure.
Customers are also responsible for protecting their account credentials and ensuring that users receive only the permissions appropriate to their role.
9. Account Credentials
You are responsible for maintaining the confidentiality of your username, password and other authentication credentials.
You should not share your password with another person.
If you believe that your account has been accessed without authorisation, you should notify I-Rock as soon as reasonably possible.
10. Data Retention
We retain information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:
- Provide our services
- Maintain business records
- Meet contractual obligations
- Comply with legal and regulatory requirements
- Resolve disputes
- Enforce agreements
- Maintain security
- Prevent fraud and abuse
Retention periods may differ depending on the type of information and the purpose for which it is processed.
When information is no longer required, we may securely delete, anonymise or otherwise dispose of it in accordance with applicable law.
11. Your Data Protection Rights
Subject to applicable law, individuals may have rights relating to their personal information, including the right to:
- Request information about how their personal data is processed
- Request access to personal information
- Request correction of inaccurate information
- Request deletion where applicable
- Object to or restrict certain processing where applicable
- Withdraw consent where processing is based on consent
- Exercise other rights provided by applicable data-protection law
Requests may be submitted using the contact details provided in this Privacy Policy.
Where information is controlled by a business customer using Figa or Manifyst, requests concerning that information may need to be directed first to the relevant business or organisation.
12. Cookies and Similar Technologies
Our websites and applications may use cookies or similar technologies to:
- Maintain sessions
- Remember preferences
- Improve security
- Understand how our services are used
- Improve website and application performance
Where required, we will obtain appropriate consent for non-essential cookies or similar technologies.
13. Marketing Communications
We may occasionally send information about I-Rock products, services, updates or offers.
Where required by law, we will obtain appropriate consent before sending marketing communications.
You may opt out of marketing communications at any time by using the unsubscribe mechanism provided or contacting us.
Opting out of marketing communications will not prevent us from sending important service-related communications.
14. Children’s Privacy
Our services are intended primarily for businesses and their authorised users.
We do not knowingly collect personal information directly from children for the purpose of providing our business services.
15. Third-Party Services and Links
Our services may integrate with or contain links to third-party services.
I-Rock is not responsible for the privacy practices of third-party services that operate independently of I-Rock.
Users should review the privacy policies of third-party services before providing information to them.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal requirements or business practices.
The updated version will be published through the relevant I-Rock website or service.
Where required by law, we will provide additional notice of material changes.
17. Contact Us
If you have questions, concerns or requests relating to this Privacy Policy or the processing of personal information by I-Rock, contact:
I-Rock Technologies Limited
Physical Address: Office 11, Selby Taylor House, Off Roan Road, Kabulonga, Lusaka, Zambia
Email: policy@irock.co.zm
Telephone: +260-967-358-865
We will consider and respond to privacy-related requests within the period required by applicable law.
18. Applicable Law
This Privacy Policy is governed by the laws of the Republic of Zambia, subject to any mandatory rights or protections applicable under law.