Lending money means asking you for a great deal about yourself. This says exactly what we collect, why each piece is needed, and who else sees it.
Last updated 14 September 2026. Effective from the same date.
Probfix Holdings is a financial services group registered in Zimbabwe, with its head office at 18, Armadale Road, Borrowdale West, Harare. We provide microfinance, property, buy on credit, foreign exchange, insurance broking and wealth services.
For everything described here, Probfix Holdings decides what information is collected and why, which makes us the data controller. This policy covers www.probfix.co.zw, the Probfix mobile app, and what happens in our branches when the information ends up in the same systems.
Almost all of it comes from you, on an application form or at a counter. We do not buy personal information from anybody.
| Information | What it includes |
|---|---|
| Account | Your name, email address, phone number, and a password we store only as a one way hash, so nobody here can read it. |
| Identity | National ID number, date of birth, gender. |
| Where you live | Province and district, plus either a street address or, for a rural homestead, your village, ward and chief. |
| Work and income | Employer, how you are paid, your net salary, and your EC number if you are a civil servant or a pensioner. |
| Documents | The files you upload: national ID, payslip, bank statement, company paperwork. |
| Your loan | What you asked for, what we quoted, the decision, your repayment schedule and every payment against it. |
| Security offered | Collateral you declare, its description and value, and photographs of it. |
| Next of kin | A name and a phone number for somebody we can reach. Please tell them you have given it to us. |
| Business details | For a business application: trading name, registration number, revenue and costs. |
| Technical | Your IP address, browser and pages visited, and a record of sign ins and failed sign in attempts. |
Each piece earns its place, and we ask for nothing we do not use:
We do not sell your information, and we do not use it to advertise to you on other companies' websites.
Only these, and only the parts each one actually needs:
| Who | What they get, and why |
|---|---|
| The Salary Service Bureau, or the Pensions Office | Only if your loan is repaid by a deduction from your salary or pension. They receive your first name, surname, national ID number, EC number, the instalment amount and the dates it runs between. That is the whole record, and it is what lets them collect on our behalf. |
| Paynow | When you pay us by EcoCash, InnBucks or card. Your payment is handled on Paynow's own page: card numbers are entered there and never reach us or our systems. |
| Amazon Web Services | Your uploaded documents are stored on AWS servers in their Cape Town region. They hold the files for us and do not use them. |
| If you choose to sign in with Google, and for the website analytics described below. | |
| Our email provider | To deliver the status emails and password resets we send you. |
| Courts, regulators and law enforcement | Where we are legally required to produce records, or where we need to establish or defend a legal claim. |
If we ever engage a debt collector or sell a debt, the buyer receives what they need to collect it, and no more. We will tell you before that happens.
Using the "Continue with Google" button is optional. You can always use an email address or phone number and a password instead.
If you do use it, Google tells us your name, your email address, and whether Google has confirmed that address belongs to you. That is all we ask for and all we receive. We never see your Google password, and we get no access to your Gmail, your contacts, your calendar, your files or anything else in your Google account.
We use the address to find your Probfix account, or to open one if you do not have one yet. You can stop Probfix having this access at any time from your Google account permissions page. Doing so does not close your Probfix account or affect a loan you already have; it only removes that way of signing in.
We set a small number of cookies that the site cannot work without: one keeps you signed in, and one protects forms against being submitted from another site.
We also use Google Tag Manager and Google Analytics to understand which pages people use and where they get stuck. That tells us things like how many people started an application and did not finish it. It is about pages, not about individuals, and we do not send your name, your ID number or your loan details to it. Most browsers let you block these, and the site still works if you do.
While your loan is live, and afterwards for as long as the law requires a lender to keep its records. That period is set by financial services and tax legislation rather than by us, and it is why an account cannot simply be erased on request while a balance is outstanding.
Once no legal obligation remains, we delete the information or reduce it to figures that are no longer about an identifiable person.
No system is perfectly secure. If information of yours is ever exposed, we will tell you and the relevant authority promptly rather than quietly.
Under Zimbabwe's Data Protection Act, you can ask us to:
Ask by emailing info@probfix.co.zw. We will not charge you, and we will answer within a reasonable period. If you are not satisfied with how we have handled it, you may complain to the Postal and Telecommunications Regulatory Authority of Zimbabwe, which oversees data protection.
Questions about this document, or about the information we hold on you, go to the same place as everything else: