Legal
Last updated: 22 August 2026
This Privacy Policy is issued by Flux Financial Technologies (Private) Limited ("Flux", "we", "us"), a pension fund administration software provider registered in Zimbabwe. It explains what personal information we collect through our platform and website, why we collect it, and the rights available to you under Zimbabwean law, including the Cyber and Data Protection Act [Chapter 12:07].
Depending on how you interact with us, we may collect:
We use personal information to provide and maintain the administration platform, process contributions and claims, generate statutory returns for IPEC and ZIMRA, respond to support requests, maintain the security and audit integrity of the system, and comply with our legal and regulatory obligations. We do not use member or fund data for advertising purposes.
Where Flux processes personal data on behalf of a pension fund or employer, that fund or employer remains the data controller and Flux acts as a data processor under a signed administration agreement. Processing is carried out to perform that agreement, to comply with legal obligations under the Pension and Provident Funds Act [Chapter 24:32] and IPEC regulations, and, where applicable, on the basis of consent.
We do not sell personal information. We share data only where necessary: with the regulators a fund is required to report to (IPEC, ZIMRA), with service providers who support the platform under confidentiality obligations, or where disclosure is required by law or court order. Any third party processing data on our behalf is bound by a written data processing agreement.
We apply technical and organisational safeguards appropriate to the sensitivity of financial and pension data, including access controls, encryption in transit, maker-checker approval on sensitive changes, and audit logging. No system is completely immune to compromise, and we will notify affected funds and, where required, the relevant regulator without undue delay in the event of a data breach affecting personal information.
We retain personal and fund data for as long as the administration relationship continues, and thereafter for the periods required by the Pension and Provident Funds Act, tax law, and IPEC record-keeping requirements, after which it is securely deleted or anonymised.
Subject to Zimbabwean data protection law, you may request access to, correction of, or deletion of your personal information, and may object to certain processing. Where Flux acts as a processor for a fund or employer, requests should generally be directed to that fund or employer in the first instance; we will assist them in responding. You may also contact us directly using the details below.
Our website uses browser session storage only to remember your theme preference during the current browsing session. That preference clears when the session is closed. We do not use third-party advertising or tracking cookies.
We may update this policy from time to time to reflect changes in our practices or legal requirements. Material changes will be notified to administered funds and posted on this page with an updated effective date.
Questions about this policy or requests concerning your personal information can be sent to hello@flux.co.zw.
This document is a general-purpose template and has not been reviewed by a Zimbabwean-qualified lawyer. It should be reviewed by legal counsel before being relied upon, particularly given the sensitivity of pension and financial data processed on this platform.
