1. Personal Information

We collect data through various means including but not limited to this mobile application and website in the course of our business dealings with you.

2. Data That We Collect

The data we may collect about you and other individuals related to you depends on your relationship with us. These may include the following:

• Identification and contact information:
  

  Name, age, address, e-mail address, telephone number, race, gender, marital status, date of birth, educational background, physical attributes, records, such as driving records, photographs, current occupation, employer’s details, employment history, skills and experience, professional licenses and affiliations, family members and data about them, person covered or claimant, and date and cause of death, injury or disability.

• Identification numbers issued by government bodies, authorities or agencies
  

  Your nationality, national registration card number, Employee Provident Fund number, passport number, military/police identification number, or driver’s driving licence or other license number.

• Financial information and account details
  

  Payment card number, bank account number and account details, annual income, financial position such as assets, income, investments/savings and other required financial information including credit bureau checks.

• Sensitive information
  

  Your medical condition/history and health records – current or previous physical, mental and/or medical condition, height and weight, health status, injury or disability information, medical procedures performed, personal habits (for example, smoking, consumption of alcohol or drugs), prescription information, death certificate and reports on medical diagnoses, tests and treatment.

  We may also receive other sensitive information about your hobbies and interests, genetic information, and genetic test results in some cases. We may also obtain information about your criminal record or civil litigation history in the process of preventing, detecting and investigation of fraud. We may also receive sensitive information if you voluntarily provide it to us.

  Other information may also include but is not limited to your family health or morbidity history, number of children and name, age, and gender of children.

• Telephone recordings
  

  Telephone call recordings to our staff, representatives or contact centers.

• Information enabling us to provide products and services
  

  Location and identification of property covered (for example, type of property, property address, and home valuation), vehicle license plate or identification number, travel plans, categories of individuals you wish to cover, certificate, underwriting of insurance such as managing and processing insurance claims, claim histories/numbers, coverage/peril details, cause of loss, prior accident or loss history, ownership or management interest in an organization, and other takaful and/or insurance you hold.

• Your Company’s Information (as and where applicable)
  

  Your Company’s name, registration type and number, business nature, Company’s office, correspondence and e-mail address, telephone number, Form X, business registration, a certified copy of its Memorandum and Articles of Association, board resolution, form of annual returns, list and any other required information.

• Marketing preferences and customer feedback
  

  You may inform us of your marketing and promotional preferences, enter a contest or prize draw or other sales promotion, or respond to a customer satisfaction survey.

3. How We Use the Data

We use this data to:

• Establish relationship, provide our services to you and also by companies related to or affiliated with us including our service providers and business partners;
• Communicate with you and others as part of our business;
Send you important information regarding changes to our policies, other terms and conditions, the website and other administrative information;
• Make decisions about our services and products whether to provide takaful cover, takaful assistance services, including claim assessment, review, processing and settlement, and, where applicable, manage claim disputes;
• Assess your eligibility for takaful plans, and process your contribution and other related payments;
• Provide improved services, quality, training and security (for example, with respect to recorded or monitored phone calls to our contact numbers);
• Perform due diligence and checks to prevent, detect, analyze, manage and investigate crime, including fraud, money laundering and other crimes;
• Carry out market research, development and data analysis, including satisfaction surveys;
• Provide and promote marketing information to you (including information about other products and services offered by our business partners) in accordance with preferences you have expressed;
• Personalize your experience on our website and other digital platforms by presenting information and advertisements tailored to you;
• Allow you to participate in contests, prize draws and any similar promotions. Some of these activities have additional terms and conditions, which may contain additional information on how we use and disclose your data, so we suggest that you read them carefully;
• Manage our infrastructure and business operations, and comply with internal policies and procedures, including those relating to risk assessment, auditing, finance and accounting, billing and collections, IT systems, data and website hosting, actuarial, artificial intelligence and automation, business continuity, and records, document and others;
• Manage and resolve complaints, and handle requests for data access or correction;
• Comply with any applicable laws and regulatory obligations (including laws outside of Brunei Darussalam which we are asked to comply), such as those relating to anti-money laundering and anti-terrorism, comply with legal process, and respond to requests from public and governmental authorities (including those outside your country of residence);
• Establish and defend our and any third parties legal rights, protect our operations or those of any takaful business partners, our rights, privacy, safety or property, you or others, and pursue available remedies or limit our damages; and
• For any purposes as permitted by the applicable law or with your consent.

4. How We Collect Data

We collect data via various channels and mediums which we offer our products and services. The usual channels we do so are when:

• you request a quotation for our products;
• you submit a proposal form to us for the participation in our products and services;
• you submit a claim form or other forms related to our takaful products and services;
• you interact with us via telephone, e-mails or other means of communication with us;
• you interact with any of our customer service officers, agents or representatives;
• you respond to our request for additional personal data;
• you access our website to access product-related information or perform an online transaction;
• you are contacted by, and respond to, our telemarketers;
• you participate in any of our contests, prize draws or promotions;
• you access software applications made available for use on or through computers and mobile devices; and/or
• you visit our social media pages, and other social media content, tools and applications.

5. Transfer of Data Outside Brunei

Due to the nature of some of our products, for the purposes set out above and to facilitate you, we may transfer data to parties located in other countries. For example, we may transfer data in order to process international travel takaful claims and provide emergency medical assistance services when you are abroad. We may transfer information internationally to our service providers, business partners and/or governmental or public authorities.

7. We Require Your Consent

When applying for our products and services, you will be required to provide your data to us for the purpose of obtaining takaful coverage with us. With this consent, it is deemed that you have given consent (including explicit consent to data of other individuals related to your certificate) for the related processes above. Failing to provide the required data may result in us being unable to provide takaful coverage and/or services to you.

We may collect, use or disclose your existing data for secondary purposes that differ from the primary purpose for which it was initially gathered pursuant with section 3 and 6. If we intend to use deemed consent by notification for such secondary purposes, we will notify you via appropriate mode(s) of communication of the proposed collection, use, or disclosure of your data.

For the following purposes in particular, we may rely on deemed consent by notification to the collect, use or disclose of your data for the following purposes:

• Research and modelling;
• Predictive analytics; and
• Artificial Intelligence.

We will assess and determine that the collection, use and disclosure of the data will not likely have an adverse effect on you before relying on deemed consent by notification.

8. Withdrawal your consent

The consent that you provide for the collection, use, and disclosure of your data will remain valid until such time it is withdrawn or opt-out by you in writing or via any other means as may be prescribed by us from time to time. You may withdraw consent and request us to cease collecting, use and/or disclosing your data for any or all the purposes listed above by submitting your request in writing or via e-mail to the contact details provided.

Upon receipt of your request to withdraw your consent, we may require reasonable time (depending on the complexity of the request and its impact on our relationship with you) to process your request for us to notify you of the consequences of us acceding to the same, including any legal consequences which may affect your rights and liabilities to us.

Whilst we respect your decision to withdraw your consent, please note that depending on the nature and scope of your request, we may not be able to continue offering our Takaful products or services to you and we shall, in such circumstances, notify you before concluding the processing of your request. Where your request to withdraw your consent has been approved, such withdrawal shall constitute as your request to terminate your relationship with us.

Should you decide to cancel your withdrawal consent or opt-out, please inform us in writing or via e-mail to the contact details provided.

For your request to opt-out from data collected, used or disclosed for the secondary purposes above, we aim to comply with your opt-out request(s) within a reasonable time period. Please note that if you opt-out as described above, we will not be able to remove your data from the databases of third parties with whom we have already shared your data. Please also note that if you do opt-out of receiving marketing communications from us, we may still send you other important administrative communications from which you cannot opt-out.

Please note that withdrawing consent does not affect our right to continue to collect, use and disclose data where such collection, use and disclose without consent is permitted or required under applicable laws.

9. Information on Minors

Generally, we do not knowingly collect, solicit data from or market to minors under 18 years of age. By using our platform, you represent that you are at least 18 years of age or that you are the parent or guardian of a minor and consent to the minor dependent’s use of our platform. Unless, it is for a particular product or service, if it has come to our attention that the personal information of a minor has been collected without parental consent, the account or participation will be void. If it has come to your attention that any data we have collected from children is under age of 18 years old, please contact us as per section 17 below.

10. Data of other individuals

If you provide data to us regarding other individuals, you and the individual agrees: (a) to the content of this Privacy Notice, and (b) to give us consent for the collection, use, disclosure, and transfer (including cross-border transfer) of data about the individual in accordance with this Privacy Notice.

11. Security

We will take all appropriate measures to protect the security of your data, which are consistent with all applicable laws. Unfortunately, no data transmission over the Internet or data storage system can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure (for example, if you feel that the security of any data you might have with us has been compromised), please immediately notify us.

When we provide data to a service provider, the service provider will be selected carefully and required to take and use appropriate measures to protect the confidentiality and security of the data.

12. Retention of Data

We take reasonable steps to ensure that the data we process is reliable for its intended use, and as accurate and complete as is necessary to carry out the purposes described in this Privacy Notice. We will retain data in accordance to the record retention requirements to fulfill the purposes outlined in this Privacy Notice unless a longer retention period is required or permitted by the applicable laws.

13. Access and Correction Requests, Questions and Concerns

You are responsible to provide us with accurate and complete information to us about yourself and any other individuals related to you whose data you provide to us and to update this data as and when it becomes incorrect or out to date by contacting us at the e-mail address in section 17 below.

14. Other Information We Collect

“Other Information” is any information that does not reveal your specific identity, such as:

• Browser information;
• Information collected through cookies, pixel tags and other technologies;
• Demographic or geolocation information and other information provided by you; and
• Aggregated information.

We and our third-party service providers may collect such Other Information in a variety of ways, including:

• Through your internet browser: Certain information is collected by most websites, such as your IP address (i.e., your computer’s address on the internet), screen resolution, operating system type (Windows or Mac) and version, internet browser type and version, time of the visit and the page(s) visited. We use this information for purposes such as calculating website usage levels, helping diagnose server problems, and administering the website.
• Using cookies: Cookies are pieces of information stored directly on the computer you are using. Cookies allow us to recognize your computer and to collect information such as internet browser type, time spent on our website, pages visited, language preferences. We may use the information for security purposes, to facilitate navigation, to display information more effectively, to personalize your experience while visiting our website, or to gather statistical information about the usage of our website. Cookies further allow us to present to you the advertisements or offers that are most likely to appeal to you. We may also use cookies to track your responses to our advertisements and we may use cookies or other files to track your use of other websites.
• From you: Some information (for example, your location or preferred means of communication) is collected when you voluntarily provide it. Unless combined with data, this information does not personally identify you.

Please note that we may use and disclose Other Information for any purpose, except where we are required to do otherwise under the applicable law. If we are required to treat Other Information as data under the applicable laws, then, in addition to the uses listed in the “Other Information We Collect” section above, we may use and disclose Other Information for all the purposes for which we use and disclose data.

15. Third Party Websites

This Privacy Notice does not address, and we are not responsible for, the privacy, information or other practices of any third parties, including any third party operating any site to which this website contains a link. The inclusion of a link on this website does not imply endorsement of the linked site by us.

16. Changes to this Privacy Notice

We review this Privacy Notice from time to time and reserve the right to make changes at any time to take account of changes in our business, regulatory and legal requirements. We will place updates on our website, or any other appropriate communication means as may be determined by us.

Please take a look at the “LAST UPDATED ON” below to see when it was last revised.

17. How to Contact Us

For any inquiries on this Privacy Notice, complaints, data access, correction or change of your data request, please contact us at the following details:

Website: https://www.insuranstaib.com.bn/