Privacy & data

Your employees’ data, handled carefully.

Payroll files contain some of the most sensitive information a business holds — names, NRC numbers and salaries. This page explains plainly what KatumbaPay does with them.

What we store

When you upload a spreadsheet we store the company details and employee rows it contains, together with the statutory figures we compute from them. We do not ask for or store any account or password, because KatumbaPay has no sign-up. We never handle card or mobile-money details on this site.

How long we keep it

Every payroll run is permanently deleted 72 hours after processing. This is enforced automatically by a scheduled job that removes the records entirely — not merely hides them. After that window your results link stops working and the data is gone, so please download your payslips and schedule during the session.

If you buy a Pass

For a KatumbaPay Pass we keep the name or phone number you gave us when paying, how many payroll runs the Pass has used and when. We store only a scrambled (hashed) form of your Pass code. Payroll runs made with a Pass are deleted after 72 hours like any other run.

Who can see it

Your results page is reachable only through an unguessable link generated at upload time, and is never indexed by search engines. Sponsors receive only aggregate counts of how many times their message was shown or clicked — they never receive anything about you, your company or your employees.

What we never do

• We never sell, rent or share employee data with third parties.
• We never store your payroll data in your browser or in an offline cache.
• We never send payroll data to advertisers or analytics services.
• We use no advertising or tracking cookies. The only cookie is a sign-in cookie for KatumbaPay staff.

Administrator access

KatumbaPay administrators can see which companies ran payroll and how many employees were processed, in order to operate the service. Administrative actions are recorded in an audit log.

Your responsibilities

KatumbaPay is a computation tool. Under Zambia’s Data Protection Act, 2021 you remain the data controller for your employees’ information and we act on your behalf only to produce your documents. Only upload what is needed for payroll, and you remain responsible for your statutory filings with ZRA, NAPSA and NHIMA.

Sponsor content

Sponsor images or videos may be loaded from the sponsor’s own website, which can see that a visitor viewed them (as with any web image). They never receive your payroll data.

Contact

Questions about data handling, or a request to delete a run early: fsmaindesk@gmail.com.