Privacy Policy

1. Information We Collect

We collect the following categories of information in connection with the Platform:

• Account & Identity Data: your name, RSA PIN, and login credentials used to access the client portal.
• Personal & Next-of-Kin Details: personal profile information and next-of-kin records associated with your RSA account.
• Financial & Contribution Data: contribution history, transaction records, fund balances, benefit applications, bank account and payment details you submit for benefit processing.
• Correspondence Data: information you submit through inquiry, contact, or account-update forms.
• Technical Data: for the mobile application, only the internet connectivity permission is used to communicate with our servers; we do not access your device's contacts, location, camera, or storage.

2. How We Use Your Information

We use the information we collect to: authenticate you and maintain your portal session; retrieve and display your RSA balance, contribution history, and benefit status; process benefit applications, ECRS record-update requests, and fund transfer instructions you submit; generate statements, welcome letters, and other documents on request; respond to inquiries submitted through our contact forms; and meet our statutory and regulatory obligations as a licensed Pension Fund Administrator.

3. How We Share Your Information

We do not sell your personal information. We may share it only with: the National Pension Commission (PenCom) and PenCom-approved Pension Fund Custodians (PFCs), as required for the statutory administration of your RSA; the CVI Partner core pension processing system that powers our portal and mobile application; and regulators, courts, or law enforcement where disclosure is required by law.

4. Data Security

We apply reasonable administrative and technical safeguards to protect your information, including session-based authentication and access controls on the client portal. Your login password is never stored on your device beyond the moment it is needed to complete a request. That said, no method of transmission or storage is completely secure, and you acknowledge that use of the Platform carries inherent data-transmission risk.

5. Data Retention

We retain your personal and financial information for as long as your RSA account remains active with PenAm, and thereafter for the period required to meet our statutory record-keeping obligations under the Pension Reform Act 2014 and applicable PenCom guidelines.

6. Your Rights

In accordance with the Nigeria Data Protection Act (NDPA) 2023, you have the right to request access to, correction of, or deletion of your personal information held by us, subject to our statutory record-keeping obligations as a licensed Pension Fund Administrator. To exercise these rights, contact us using the details in Section 9 below.

7. Cookies

Our website uses session cookies that are strictly necessary to keep you signed in to the client portal. We do not use third-party advertising or tracking cookies.

8. Children's Privacy

The Platform is intended for registered RSA holders and is not directed at children. We do not knowingly collect personal information from minors.

9. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact:
Pension Asset Managers (PenAm) Limited
No. 6, Bissau Street, Wuse Zone 6, Abuja, F. C. T., Nigeria
Email: info@penampensions.com
Phone: +234 (0) 800 222 3333

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable regulation. The "Last updated" date at the top of this page indicates when this Policy was last revised. Continued use of the Platform after a revision constitutes acceptance of the updated Policy.