Privacy Policy | ADZ Insurance Brokers

ADZ Insurance Brokers – Data Privacy Statement

Effective Date: 1^st March 2025

At ADZ Insurance Brokers (“we”, “our”, “us”), we are committed to protecting and respecting your privacy. This Data Privacy Statement outlines how we collect, use, disclose, and protect your personal data in accordance with the Personal Data Protection Act No. 9 of 2022 (the “PDPA”). By engaging in our services, you agree to the practices described in this statement.

What Personal Data We Collect

The term and expression “Personal Data”, for these purposes, may broadly be defined as information that relates to and can identify a particular natural person.

We may collect the following categories of personal data:

Identification Data: Name, gender, date of birth, nationality, NIC number.
Contact Information: Address, email address, phone number.
Financial Information: Bank account details, payment history, premium payment data.
Employment Details: Employer name, job title, employment status, EPF, Employee number.
Insurance-related Information: Insurance policy details, claim history, coverage information.
Health Data: In cases where necessary for the provision of insurance services, including but not limited to medical history or health conditions.

How We Collect Your Personal Data

As you interact with us, we may collect your Personal Data in a number of different ways, including from the following sources, when you:

Submit forms or applications for insurance products and services.
Use our website or mobile applications.
Communicate with us via email, phone, or other channels.
Provide information through our authorized agents or representatives.

How We Use Your Personal Data

We use your personal data which include, but are not limited to, for the following purposes:

To provide and manage insurance services.
To assess and process insurance claims.
To fulfill our legal obligations, including compliance with government, statutory or regulatory bodies.
To communicate with you about your insurance policies and services.
To send promotional materials and offers, where you have consented to receive them.
To conduct market research and improve our services.
For risk management, fraud prevention, and security purposes.

We may also anonymize, tokenize, and/or aggregate Personal Data in a manner where you may no longer be personally identifiable. In such instances, you acknowledge and agree that ADZIB may utilize such non-Personal Data for any lawful purpose without further notice to you.

Disclosure of Personal Data

For the fulfillment of the purposes set out in Part 3 above and in relying on the lawful bases for processing as permitted by applicable law, we may disclose and/or transfer your Personal Data to the following categories of third parties:

Within the ADZIB Group: We may, in limited circumstances, share your Personal Data within the Group to facilitate internal administration and business operations.
Third-Party Service Providers: We may engage third-party companies that provide us with services such as claim processing, customer support, and IT infrastructure.
Regulatory Authorities: In compliance with legal and regulatory requirements, we may disclose your personal data to governmental authorities, law enforcement, or other regulatory bodies.
Other Insurance Companies: In the event of claims processing or reinsurance, your data may be shared with other insurers or reinsurers.

We ensure that any third party with whom we share your data is compliant with the PDPA and has appropriate safeguards in place to protect your personal data.

We may also transfer your Personal Data to entities located outside Sri Lanka for the purposes outlined in this Policy – where the Personal Data protection laws are likely to differ from those of Sri Lanka. In such instances, we will ensure that such cross-border transfers are in accordance with and subject to the limitations imposed by the PDPA, the directions or orders of the Data Protection Authority of Sri Lanka, and any other applicable law.

Data Retention

We will retain your personal data for as long as necessary to fulfill the purposes outlined in this Data Privacy Statement, and for as long as required by law, including for the purpose of resolving disputes and complying with legal obligations.

As a general policy, we process your Personal Data for as long as it may be required to:

Make our services available to you;

Security of Your Personal Data

We take reasonable steps to protect the security of your Personal Data by implementing appropriate technical and commercially acceptable contractual, technical, and organizational measures to help prevent the loss, misuse of, and unauthorized access to your Personal Data.

However, no system is completely secure, and while we strive to protect your data, despite our best efforts, we cannot guarantee the absolute security of such Personal Data, given that no means of data transmission or storage is 100% secure.

Your Rights

Under the PDPA, as a data subject, you are vested with certain rights in respect of your Personal Data, subject to the specifications and restrictions imposed by applicable law.

You have the following rights concerning your personal data:

Right to Access: You have the right to request a copy of the personal data we hold about you.
Right to Rectification: You may request that we correct any inaccuracies in your personal data.
Right to Erasure: You may request that we delete your personal data, subject to applicable legal and contractual obligations.
Right to Restriction of Processing: You may request that we restrict the processing of your personal data under certain circumstances.
Right to Object: You may object to the processing of your personal data for specific purposes, including direct marketing.
Right to Data Portability: You may request to transfer your personal data to another service provider, where applicable.

In exercising such rights, you must, however, ensure that your requests are made in accordance with the relevant legal provisions.

Consent

By providing us with your personal data, you consent to the collection, use, and disclosure of your data as described in this Data Privacy Statement. If we need to use your data for purposes not covered in this statement, we will request your explicit consent.

Updates to This Data Privacy Statement

We may update this Data Privacy Statement from time to time to reflect changes in our practices or with the rapidly changing commercial, legal, regulatory, and technological landscape. For this reason, we encourage you to visit our website and this Policy to ensure that you are aware of and updated on the manner and extent to which your Personal Data is processed by us.

Contact Us

If you have any questions about this Data Privacy Statement or would like to exercise your rights under the PDPA, please contact us at:

ADZ Insurance Brokers (Pvt) Ltd
Email: info@adzib.aec.lk
Phone: +94 11 231 6050
Address: 140A, Vauxhall Street, Colombo 2