Privacy Policy

Who is responsible

Each company using AMA HCM is the data controller for its own employees' information. Ammerlus Incorporated provides the platform and processes that information only on the company's instructions.

Each company records its Data Protection Officer and its POTRAZ controller licence inside AMA HCM. Ask your employer's Human Capital team for their details.

What information is held

Identity and contact details, employment records (position, contract, attendance, leave, performance, training), pay and banking details needed for payroll, documents you or Human Capital upload, and approval and audit history.

Why it is used

To run employment: paying staff correctly, meeting tax and labour-law obligations, approving requests, managing performance and training, and keeping a lawful record of decisions.

Optional uses (for example SMS notices) depend on your consent, which you can give or withdraw at any time in the system.

Who can see it

Every company's records are kept separate from every other company's. Inside a company, people see only what their role allows — for example, managers see their own team, Finance sees pay information.

Sensitive details such as ID and bank numbers are hidden on screen until a permitted user chooses to reveal them. Senior roles must use two-step sign-in.

Access is removed automatically when an employee leaves.

Your rights

Under the Cyber and Data Protection Act [Chapter 12:07] you can ask to see, correct, receive a copy of, or have your personal information deleted, and you can object to its use.

Submit a request from My Portal → Data Protection. It is answered within 30 days. You can also download a copy of your own data there at any time.

Where the law requires records to be kept (for example pay and tax records), deletion removes your personal identifiers and keeps only the anonymised record for the legal period.

How long it is kept

Each company sets its retention period in AMA HCM according to the law that applies to it. Ask your employer for their policy.

Questions or complaints

Contact your employer's Data Protection Officer first. You may also complain to POTRAZ, Zimbabwe's data protection authority.