Privacy Policy

We, at Ageas Federal Life Insurance Co Ltd ("Ageas Federal Life Insurance"), are committed to the protection of customer privacy. Towards that end, we have taken reasonable steps to protect customers' online privacy of personal information provided by them.

This Company Policy is applicable to the Ageas Federal Life Insurance website (www.ageasfederal.com) and all products & services offered through our digital & physical modes. All customers using or availing these services are covered under this Policy.

• Password
• Financial information such as bank account, credit card, debit card or other payment instrument details
• Physical, physiological and mental health condition
• Sexual orientation
• Medical records and history
• Biometric information
• Any detail relating to the above as provided to a body corporate for providing service
• Any of the above information received by a body corporate for processing, stored or processed under lawful contract or otherwise

Ageas Federal Life Insurance collects the following categories of personal information:

• Information provided via our website or physical forms in connection with purchase of insurance products & services — including name, photograph, date of birth, address, email address, occupation, country, and telephone number.
• Information about customer's computer and site usage — such as IP address, demographics, operating system, browser type, and information collected via cookies.
• Cookies (HTTP cookies) — small pieces of data stored on your computer by the web browser while browsing, used to remember previously entered information.

Sensitive Data Collected & Processed

We collect sensitive personal data for the purpose of issuing insurance policies, undertaking business transactions, and making monetary payments.

Biometric data is required only for Aadhaar e-KYC authentication. It is captured on a UIDAI-approved Registered Device within a PID (Personal Identity Data) block and is never stored in any Ageas Federal systems — it is used for transmission only.

Personal information is used for the following purposes:

• Underwriting and determining the premium amount to be paid
• Issuance of insurance policy
• Creating a user ID and password for online customers to track their insurance policy
• Sending periodic policy-specific updates via mobile number and email
• Sending news and other opted-in updates

Ageas Federal Life Insurance processes personal information when it is necessary for the performance of a contract to which the customer is a party, or in order to take steps at the customer's request prior to entering into a contract.

To provide the best experience of our products & services, Ageas Federal Life Insurance may engage third-party vendors. Sensitive personal data may be disclosed in connection with activities such as:

• Data entry, tele-calling, medical examination, printing
• Reinsurance, expert review, audit, legal proceedings
• Monetary payment, digital & physical communication
• Verification & collation of information, digital & physical storage

The last 4 digits of Aadhaar along with related demographic information (name, DOB, address) shall be shared with the Central Know Your Customer Registry (CKYC) maintained by CERSAI, as required under PML Act 2002 & related Rules.

Ageas Federal Life Insurance will not share information with any other entity without the customer's explicit permission, except where disclosure is mandated by law.

Cross-Border Transfers

Presently, Ageas Federal Life Insurance does not transfer sensitive personal data to any other body corporate or person in India or abroad. If such a transfer is ever made in the future, it will only be:

• With the consent of the provider of sensitive personal data
• Effected only if necessary for the performance of a contract with such provider
• Upon the transferee agreeing to be bound by the level of data protection prescribed under law

Subject to the laws of India, you have the right to:

• Access, correct, delete, or transfer the personal information we hold
• Object to certain processing activities
• Withdraw consent where consent was the basis for processing
• Object where we process your personal information on the basis of a legitimate interest

Insurance policies offered by Ageas Federal Life Insurance also cover minors. In such cases, the parent or guardian of the minor is required to provide personal information and sensitive personal data on behalf of the minor.

Ageas Federal Life Insurance has a full-fledged Information Security Department addressing all vital aspects of information security, including personal data. Our information security matters are audited annually by an external auditor in accordance with the checklist mandated by IRDAI.

As a financial institution engaged in life insurance, Ageas Federal Life Insurance is required under the PML Act 2002 and IRDAI Guidelines to comply with Know Your Customer (KYC) norms. Every person purchasing a policy or receiving monetary payment must comply with KYC and provide proof of identity and address.

Aadhaar is a legally recognized mode for KYC. Customers may opt for authentication via CIDR (Central Identities Data Repository) or for offline verification under Sec 8A of the Aadhaar Act 2016. Ageas Federal Life Insurance will provide a notice in an understandable language on the nature of information that may be shared and alternatives available.

Consent

Customers must give specific consent before data is fetched from UIDAI. For eKYC of a child, consent must be given by the parent or guardian as per Sec 8 of the Aadhaar Act 2016.

Information Collected for eKYC

The Aadhaar number or Virtual ID is entered by the customer and used for OTP-based or Biometric-based authentication. In both cases, the data is captured in a PID Block, which is not stored by Ageas Federal Life Insurance and is used for transmission only.

Security Practices for Aadhaar

• The full 12-digit Aadhaar number or 16-digit VID will not be stored
• No hard copy of Aadhaar Card is obtained in case of eKYC
• Physical or electronic copies provided by customers are redacted before storage
• Authentication servers are within the territorial boundaries of India only
• Authentication devices for biometrics comply with UIDAI stipulations only
• Hardware Security Modules are implemented in line with UIDAI requirements

Disclosure of Aadhaar Information

Identity information collected from CIDR will not be disclosed to any third party without the explicit permission of the Aadhaar holder, unless required by law. It may be shared with Government agencies mandated under law for identity verification, or for prevention, detection, and investigation of cyber incidents and offences.

Ageas Federal Life Insurance retains data in accordance with the laws of India and a data retention policy approved by the Board. Generally, data is retained for a period of up to 10 (ten) years from the date of cessation of transactions between you and Ageas Federal Life Insurance.

To understand the exact retention duration for any specific data, you may write to the Grievance Redressal Officer at the contact details provided below.