NM Risk Advisory Services (“we,” “us,” or “our”) is committed to protecting the privacy and security of your personal information in accordance with the Zimbabwe Data Protection Act [Chapter 11:12] and other relevant laws. This Privacy Policy outlines how we collect, use, disclose, and safeguard your personal data when you interact with our services, website, or representatives.
By engaging with NM Risk Advisory Services, you consent to the lawful processing of your personal information as described in this policy.
Information We Collect
We may collect and process the following categories of personal data:
- Personal Identification Details: Full name, date of birth, national registration number, passport details, and contact information (email, phone number, physical and postal address).
- Financial and Insurance-Related Information: Policy details, bank account information, payment records, claims history, and risk assessment data.
- Employment and Business Information: Occupation, employer details, and business-related data where applicable.
- Technical and Online Data: IP address, browser type, device information, cookies, and website analytics when you visit our digital platforms.
- Special Categories of Data: In limited and lawful circumstances, we may process health information, biometric data, or criminal records where necessary for insurance underwriting or claims processing.
How We Collect Your Information
We obtain personal data through:
- Direct interactions (e.g., application forms, contracts, customer service communications).
- Third-party sources (e.g., insurance brokers, credit reference agencies, fraud prevention databases).
- Automated technologies (e.g., cookies, website tracking tools).
- Publicly available records (e.g., company registries, court judgments).
Legal Basis and Purpose for Processing
Under the Zimbabwe Data Protection Act, we process personal data based on the following lawful grounds:
- Contractual necessity (to provide insurance and risk advisory services).
- Legal and regulatory compliance (e.g., anti-money laundering laws, insurance regulations).
- Legitimate business interests (fraud prevention, service improvement, and direct marketing).
- Explicit consent (where required for sensitive data or marketing communications).
We use your information to:
- Administer insurance policies, underwriting, and claims processing.
- Conduct credit and fraud risk assessments.
- Fulfil regulatory reporting obligations.
- Enhance customer service and business operations.
- Communicate promotions, updates, or surveys (with opt-out options).
Data Sharing and Transfers
We may disclose personal data to:
- Insurance underwriters, reinsurers, and brokers involved in your policy.
- Regulatory bodies (e.g., Insurance and Pensions Commission – IPEC, Reserve Bank of Zimbabwe).
- Law enforcement and fraud prevention agencies (where legally mandated).
- Third-party service providers (IT, legal, and audit firms) under strict confidentiality agreements.
Cross-border data transfers will comply with Zimbabwean data protection laws, ensuring adequate safeguards.
Data Security and Retention
We implement technical (encryption, firewalls) and organisational (access controls, staff training) measures to protect your data. Personal information is retained only as long as necessary for legal, contractual, or business purposes, after which it is securely archived or destroyed.
Your Rights Under Zimbabwean Law
Under the Data Protection Act, you have the right to:
- Access and request a copy of your personal data held by us.
- Rectify inaccurate or incomplete information.
- Object to processing for direct marketing or legitimate interests.
- Request erasure (where no legal basis for retention exists).
- Lodge a complaint with the Postal and Telecommunications Regulatory Authority (POTRAZ).
To exercise these rights, contact our Data Protection Officer (DPO) using the details in Section 10.
Cookies and Online Tracking
Our website uses cookies to improve functionality and analyse user behaviour. You may adjust browser settings to block cookies, but this may affect website performance.
Updates to This Policy
We may revise this policy to reflect legal or operational changes. The updated version will be posted on our website with a new effective date. Continued use of our services will constitute your acknowledgment of the modifications and your consent to abide and be bound by the modified Privacy Policy.
Contact Us
For privacy-related inquiries or to exercise your rights, please contact:
Data Protection Officer
NM Risk Advisory Services
8 Buckingham Road, Eastlea
Harare, Zimbabwe
Phone: +263 242 746144
Email: dpo@nmservices.co.zw