Effective date: 16 June 2026 ·
Last updated: 16 June 2026 ·
v1.0
This Privacy Policy explains how Ontech Solutions Limited
(“Ontech”, “we”, “us”, or “our”) collects, uses, shares, and protects your
personal information when you use the Ontech Life Assurance
mobile application, USSD service (*388#), and web portals
hosted at life.ontech.co.zm
(collectively, the “Services”).
We are committed to handling your data in accordance with the
Zambia Data Protection Act, 2021, the
Cyber Security and Cyber Crimes Act, 2025,
the Insurance Act No. 38 of 2021, and applicable
regulations of the Pensions and Insurance Authority (PIA).
Quick summary: we collect your name, NRC, contact details,
and policy information to issue and service life-assurance policies,
process claims, and meet our legal obligations. We do not sell your data.
Your data is hosted in Zambia (Infratel Data Centre) and encrypted in
transit and at rest.
1. Who we are
Data Controller: Ontech Solutions Limited
Lilayi Police Camp Area, Lusaka, Zambia
Email: privacy@ontech.co.zm ·
Phone: +260 211 448 275 / +260 972 718 518
Our Data Protection Officer (DPO) can be reached at
dpo@ontech.co.zm.
2. Information we collect
2.1 Information you give us
- Identity: full name, date of birth, gender, NRC / passport number, nationality.
- Contact: mobile number, email address, residential and postal address.
- Financial: occupation, employer, monthly income range, mobile money number, bank details (for premium payments and benefit payouts).
- Health (for underwriting where required): declared medical history, smoking status, and — for high-value policies — results of medical examinations.
- Beneficiary information: names, relationship, NRC, contact details and allocation percentages of persons you nominate as beneficiaries.
- Claim documentation: photographs, death certificates, medical reports, police reports and similar evidence you upload.
2.2 Information we collect automatically
- Device data: device model, operating system, app version, language, time zone, IP address.
- Usage data: pages viewed, features used, session timestamps, crash logs.
- Location: approximate location (province/city) derived from IP. Precise GPS location is only used when you explicitly tag a claim or DSA visit.
- Biometric authentication: if you enable Face ID / Touch ID, the biometric template is stored only on your device — we never receive it.
2.3 Information from third parties
- Mobile money payment status from Airtel, MTN and Zamtel.
- Bank confirmations from licensed Zambian banks during disbursement.
- Identity verification from the National Registration Card (NRC) database, where lawfully integrated.
- Reinsurance and co-insurance partners where a policy is jointly carried.
3. How we use your information
| Purpose | Lawful basis (Data Protection Act, 2021) |
|---|
| Issue, underwrite and service your life-assurance policies | Contract performance |
| Process premium payments and benefit payouts | Contract performance |
| Investigate and settle claims | Contract performance / legitimate interests |
| Comply with Insurance Act 2021, PIA reporting, AML and tax laws | Legal obligation |
| Detect and prevent fraud, money-laundering and abuse | Legitimate interests / legal obligation |
| Send SMS/email reminders for premium due, policy renewal, claim status | Contract performance / consent |
| Marketing of additional Ontech products | Consent (you can opt out) |
| Improve our services and security | Legitimate interests |
4. Permissions used by the mobile app
- Camera — to capture photos of supporting documents for claims and beneficiary verification.
- Photos / Storage — to upload existing documents from your gallery and save your digital life cover card.
- Biometric (Face ID / Touch ID / Fingerprint) — for secure sign-in. The biometric data never leaves your device.
- Microphone — optional, only used if you record voice notes when filing a claim.
- Contacts — optional, only to quickly populate beneficiary phone numbers if you choose.
- Location — optional, only used to geotag a claim incident or DSA field visit.
- Internet & network state — to communicate with our servers and detect offline conditions.
You can revoke any of these permissions at any time in your device settings.
5. How we share your information
We share your data only with:
- The insurer underwriting your policy (Ontech Life Assurance or partner insurer).
- Reinsurance partners for high-value policies.
- Mobile money operators (Airtel Money, MTN MoMo, Zamtel Kwacha) to collect premiums and pay benefits.
- Licensed Zambian banks for bank-account-based disbursements.
- Regulators: the Pensions and Insurance Authority (PIA), Bank of Zambia, Zambia Revenue Authority, and the Financial Intelligence Centre, when required by law.
- Service providers: SMS gateway (CloudServiceZM / Ontech SMS), email delivery, hosting (Infratel Data Centre, Zambia), all under written data-processing agreements.
- Law enforcement only in response to a lawful court order or statutory request.
We do not sell your personal data to any third party.
6. International transfers
Your data is hosted in Zambia at the Infratel Data Centre. Where any third-party
sub-processor (for example, a global SMS aggregator or email provider) processes
data outside Zambia, we ensure the transfer is subject to written safeguards
consistent with section 70–71 of the Data Protection Act 2021.
7. How long we keep your information
- Active policy data: for the life of the policy plus 10 years after expiry, in line with PIA record-keeping requirements.
- Claim records: 10 years after final settlement.
- Financial transaction records: 10 years (per BoZ and ZRA rules).
- Marketing preferences: until you withdraw consent.
- App device logs: 90 days, then deleted.
8. Security
- AES-256 encryption of personal data at rest.
- TLS 1.2+ for all data in transit.
- Role-based access control with mandatory multi-factor authentication for staff.
- Continuous monitoring, intrusion detection, and immutable audit trails.
- OTP-based authentication for client portal and mobile app sign-in.
- Optional biometric authentication on supported devices.
9. Your rights
Under the Zambia Data Protection Act 2021 you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate or incomplete data.
- Request deletion of data we no longer need to retain.
- Object to or restrict certain processing.
- Withdraw consent at any time (where consent is the lawful basis).
- Receive your data in a portable format.
- Lodge a complaint with the Data Protection Commissioner — Office of the Data Protection Commissioner of Zambia.
To exercise any of these rights, email
dpo@ontech.co.zm. We will respond
within 30 days.
10. Children
The Services are not directed at children under 18. We do, however, collect
information about minor beneficiaries (children named as
beneficiaries on a policy) from the adult policyholder, with their consent
and only as required to administer the benefit. No mobile-app account is
ever issued to a child.
11. Cookies and similar technologies
Our web portals use functional cookies to keep you signed in and to remember
your preferences. We do not use third-party advertising cookies. You can
disable cookies in your browser but parts of the Service may not function.
12. Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated"
date at the top will reflect the most recent change. Material changes will
be communicated to you by email or in-app notice.
13. Contact us
Questions, complaints or requests:
Ontech Solutions Limited — Data Protection Officer
Email: dpo@ontech.co.zm
Email (general): privacy@ontech.co.zm
Phone: +260 211 448 275 / +260 972 718 518
Postal: Lilayi Police Camp Area, Lusaka, Zambia
Regulator: Pensions and Insurance Authority (PIA) ·
www.pia.org.zm