Minerva Risk Advisors
Privacy Notice
Minerva is committed to protecting your privacy. This commitment reflects the value we place on earning and keeping the trust of our employees, customers, clients, business partners and others who share their personal information with us directly or indirectly.
What does this Privacy Notice do?
This Privacy Notice explains Minerva’s information processing practices as a data Controller as defined in the Cyber and Data Protection Act [Chapter12:07] and the Regulations. This Notice applies to any personal information you provide to Minerva and any personal information we collect from other sources unless you are provided with a more specific privacy statement at the time of data collection.
1. Who is responsible for your information?
Throughout this Notice, “Minerva” refers to Minerva Risk Advisors, including its affiliated companies (Minerva Risk Solutions, Minerva Benefits Consulting, Minerva Reinsurance, Minerva Healthcare and Equiva Actuaries & Partners) also referred to as “we,” “us,” or “our”). Personal information is collected by each member of the Minerva group who is responsible for its processing in their capacity as a controller. Minerva entities also provide services to our clients as a processor. Where this is the case, we will process your personal information in line with our legal obligations and contractual commitments with our clients.
2. How do we collect your information and what information do we collect?
The personal information we collect varies depending upon the nature of our services. This Notice provides an overview of the categories of personal information we collect and the purposes for which we use it. More information about the personal information collected for each of our services, together with the purpose and legal basis for collecting the information, may be provided to you in separate privacy notices relevant to the applicable services.
a. Minerva collects personal information in the following ways:
i. Information you provide to us
- Minerva collects information directly from you when you:
- Request a service from us;
- Visit a Minerva site or attend a Minerva event;
- Apply for a position at Minerva;
- Contact us with a complaint or query
- Engage with us over social media;
- Register with or use any of our websites or applications; or
- Any other ways not listed above.
You are required to provide any personal information we reasonably require (in a form acceptable to us) to meet our obligations in connection with the services we provide to you, including any legal and regulatory obligations.
Where you provide personal information to Minerva about third-party individuals (e.g., information about your spouse, child(ren), dependents or next of kin we may require you to provide explicit consent on their behalf.
ii. Information we automatically collect
In some instances, we automatically collect certain types of information when you visit our websites and through e-mails that we may exchange. Automated technologies may include the use of web server logs to collect IP addresses and “cookies”
iii. Information we collect from clients or third parties
When we provide the services to our clients, we may collect personal information from our clients about you, such as your name, contact details, date of birth, gender, marital status, financial details, employment details, and benefit coverage. We may also collect (in each case as strictly relevant to the services we provide) sensitive personal data information about you, such as race, health information in relation to life, biometric, images, professional liability or employee benefit programs sponsored by your employer. or criminal history— as defined under the Act. Such sensitive personal information is processed only after obtaining written consent from you.
b. The information we collect about you may include the following:
i. Basic personal details, such as your name, address contact details, date of birth, age, gender and marital status;
ii. Identification Data such as National Insurance Number or pension scheme reference number;
iii. Demographic details, such as information about your age, gender, race, marital status, lifestyle, and insurance requirements;
iv. Employment data such as role, employment status (such as full/part time, contract), salary information, employment benefits, and employment history;
v. Health data such as information about your health status and medical records;
vi. Financial data such as bank account details, salary, tax code, third-party deductions, bonus payments, benefits and entitlement data;
vii. Claims details such as information about any claims concerning you
viii. Your marketing preferences;
ix. Online information: e.g., information about your visits to our websites;
x. Events information such as information about your interest in and attendance at our events, including provision of feedback forms;
xi. Social media information such as interactions (e.g., likes, mentions, posts or any content shared about us) with our social media presence
3. How we use your personal information?
The following is a summary of the purposes for which we use personal information.
- To provide insurance, reinsurance, pensions or retirement, health, and data and analytics services,
- To carry out Minerva’s regulatory and compliance obligations, for example “Know Your Customer” checks and screening, as per IPEC regulations or we keep it silent?
- To address inquiries and complaints,
- To administer claims and benefits.
- To confirm and verify evidence of continued existence for pensioners.
- To communicate with our clients,
- To share marketing material such as newsletters, promotional material and other marketing communications,
- To invite our clients to events, including arranging and administering those events.
- To maintain and improve processes used in providing the services.
If we wish to use your personal information for a purpose which is not compatible with the purpose for which it was collected, we will request your consent unless your personal information is processed to satisfy our legal and regulatory obligations.
4. Do we collect information from children?
Our websites are not directed to children, and we do not knowingly collect personal information from children on our websites.
Certain Minerva solution lines may process data related to children, such as their date of birth, address, and other identifiable information. This information is not collected directly from children, but from other parties such as from our client or directly from you as the parent or guardian of the child (e.g., so that the child may be named a beneficiary to an insurance policy or pension plan).In that case, we will put in place mechanisms to obtain parental consent for the processing of children’s data. We may request evidence to verify parental authority presented by the alleged parent or guardian over the child.
5. How long do we retain your personal information?
How long we retain your personal information depends on the purpose for which it was obtained and its nature. We will keep your personal information for the period necessary to fulfil the purposes described in this Notice unless a longer retention period is permitted. Your personal information will be securely destroyed when it is no longer required.
6. How do we disclose your personal information?
We generally share your personal information with the following categories of recipients where necessary to offer, administer and manage the services provided to you:
- Third-party vendors, where we outsource our processing operations to suppliers that provide services on our behalf
- Law enforcement bodies, when required to do so by law, legal process or regulation
- Internal and external auditors where necessary for the conduct of company audits
- Within Minerva: we may share your personal information with other Minerva Divisions.
7. Transborder Data Transfers
Any transfer of data across the Zimbabwean borders is done in accordance with the Cyber and Data Protection Act and the Regulations
8. Security of your Personal Information
The security of your personal information is important to us and Minerva has implemented reasonable physical, technical and administrative security standards in an effort to protect personal information from loss, unauthorised access, misuse, alteration or destruction and to ensure that such information is processed in accordance with Cyber and Data Protection Act.
9. Your Privacy Rights
You have the following rights regarding the processing of your personal information according to the Cyber and data Protection Act:
- Right to Access personal information which Minerva holds about you.
- Right to Correction of your personal information where it is inaccurate or out of date.
- Right to be Deletion if your data is no longer necessary for the purpose for which it was collected, and there is no other legal ground for processing the data or where data is inaccurate
- Right to Object to the processing of all or part of your personal information
- Right to be informed of the use to which we use your personal information
When you exercise these rights, we may need to ask you for additional information to confirm your identity, before disclosing information to you or responding to your request. You can exercise your rights by contacting us.
10. Automated Decisions
Where a decision is taken solely by automated means involving the use of your personal information, you have the right to challenge the decision and ask us to reconsider the matter, with human intervention. If you wish to exercise this right, you should contact us.
11. Accountability
We maintain internal policies, documented procedures, and logs to demonstrate compliance with data protection obligations, including regular audits and risk assessments.
12. Contact Us
If you have any questions, would like further information about our privacy, would like to withdraw consent or would like to make a complaint about the handling of your personal information, please contact us at:
Attention: The Data Protection Officer
Address: Minerva House
Block 2 Kenilworth Gardens 1
Kenilworth Road
Newlands,
Harare
Email: dpo@minerva.co.zw
Telephone: +263(242)776900-1 / 779962-70
13. Changes to this Notice
We may update this Notice from time to time. When we do, we will post the current version on this site, and we will revise the version date located at the bottom of this page.
We encourage you to periodically review this Notice so that you will be aware of our privacy practices.
This Notice was last updated on 1 August 2025