Personal Data Protection Notice for Ceylinco Life Insurance Limited

By interacting with Ceylinco Life Insurance Limited (“Company”), submitting information to the Company, enrolling or signing up for any products or services offered by the Company, you are providing personal information to the Company.

What is Personal Information?

“Personal information” means any information which relates to you and which has been provided by you to the Company, including but not limited to your name, bio-data or personal profile, National Identity Card (NIC) number, passport number, address, telephone number, email address, images, your personal preferences, particulars of any third party life assured or beneficiary, and financial and banking account information and any information which may identify you, any life assured, trustee or beneficiary, that has been or may be collected, stored, used and processed by the Company from time to time. The term “personal information” also includes sensitive personal data which means any personal data consisting of information as to physical or mental health or condition, political opinions, religious beliefs or other beliefs of a similar nature, the commission or alleged commission of any offence.

If you provide us with any personal information relating to a third party, including where you have named them as a life assured, trustee or beneficiary, or where you refer a third party to us for the purposes of us offering our products and/or services to that third party, by submitting such information to us, you represent to us that you have obtained the consent of the third party to you providing us with their personal information for the purposes set out herein. References to “your personal information” shall include the personal information of third parties provided by you.

What are we doing with your Personal information?

Your personal information may be used, recorded, stored, archived, disclosed or otherwise processed by or on behalf of the Company (and its successors in title) for the following purposes:

1. to carry on insurance business, as may be applicable and to carry out any activity or duty as an insurer, including but not limited to any operational or internal management purposes;
2. to assess or process any proposals or applications made for any of the Company’s products and services, including any future underwriting;
3. any claim or investigation or analysis of such claim, including to ascertain your claims history in order to improve claims processing and prevent fraudulent claims, including any future claims assessment;
4. to manage and service the Company’s relationship with you and to provide you with improved customer service;
5. to match and update any personal information held by the Company and the Ceylinco Life Insurance Limited (“Ceylinco Life”) relating to you from time to time (for more information on Ceylinco Life, log on to ceylincolife.com);
6. to offer and/or process any alterations, variations, cancellation or renewal of products or services by the Company or by Ceylinco Life;
7. Direct marketing and general marketing of insurance products and services of the Company and Ceylinco Life, and of third party products, that may be of interest to you. Please be assured that marketing information in respect of third party products and services will only be sent to you if you have expressly consented to the same;
8. research and audit including but not limited to historical and statistical purposes;
9. to exercise any right of subrogation or recovery;
10. to prevent, investigate, or report any actual or suspected money laundering, terrorist financing, bribery, corruption, actual or suspected fraud including but not limited to insurance fraud, evasion of tax or of economic or trade sanctions, and other criminal or unlawful activities;
11. for reinsurance;
12. for litigation or potential litigation; and
13. if required by law or in good faith, if such action is necessary:
    • to comply with any law enforcement, court orders or legal process, and/or
    • to protect and defend the rights or property of the Company and Ceylinco Life (for information, log on to ceylincolife.com).

The Company may also collect and/or verify your personal information from third parties, such as a policyholder who has taken up a policy on you or for your benefit, agents, brokers, business partners and third parties from whom you have been referred to the Company, or third parties from whom we seek or receive information on you in connection with your policy, policy applications, or claims, for example, from any of the other insurers providers, insurance associations, hospitals, clinics and the relevant authorities.

How long we will keep your Personal information?

The Company may retain your personal information for such time as deemed to be necessary for the purpose of fulfilling any operational, audit, investigation, legal, regulatory, tax or accounting requirements, including but not limited to any potential litigation, and future underwriting and claims assessment purposes.

Is it required to collect your Personal information?

The information that you have provided to the Company is necessary. If you do not provide the Company with such information, the Company may not be able to provide you with insurance or to provide services relating to insurance.

With whom we may disclose your Personal information?

The Company may disclose and/or provide your personal information to the following parties (within and outside Sri Lanka) for the purposes stated above:

1. the authorized representatives of the Company;
2. in relation to third party policies, the policy owner;
3. in relation to group policies, the policyholder and/or its brokers;
4. third party service providers (who provide administrative, telecommunications, computer, payment, data processing or storage, or other services to the Company in connection with the operation of our business) to fulfil the Company’s obligations to you;
5. banks and financial institutions;
6. insurance providers, fraud detection and prevention services, reinsurance companies, insurance associations and insurance industry regulatory authorities;
7. any credit reference agencies or, in the event of default, any debt collection agencies;
8. any insurance rating organizations that collect information about credit history, accident fault, injury description and amounts paid and share it with other insurance providers and others entitled to see it;
9. any person, who is under a duty of confidentiality and has undertaken to keep such data confidential, which the Company has engaged to fulfil its obligations to you;
10. any actual or proposed assignee, transferee, participant or sub-participant of the Company’s rights or business;
11. any person to whom the Company is under an obligation to make disclosure under the requirements of any law, rules, regulations, codes of practice or guidelines binding on the Company including, without limitation, any applicable regulators, governmental bodies, or insurance associations, and where otherwise required by law;
12. other companies in Ceylinco Life, and the Company’s affiliates; and
13. any business or strategic partners. within and outside Sri Lanka

Can I access my Personal information that Ceylinco Life is holding?

You may access certain personal information held by the Company based on the applicable data protection laws of Sri Lanka.

You may access your personal information at any time by calling Customer Service Care or visiting our Customer Portal. If you have any inquiry such as limiting the processing of certain information, including the withdrawal of consent to receive marketing information, you may contact our Customer Care Service, or write to the Company.

To whom should I reach, should I have any concerns over my Personal information?

If you have any complaints in respect of your personal information, you may contact us via care@ceylife.lk. You also can reach our customer call center if you require more information on how the Company deals with your personal information.

What if my Personal information held by Ceylinco Life is not accurate?

If you can show that the personal information held by the Company is not accurate, complete and up to date, the Company will take reasonable steps to ensure it is accurate, complete and up to date upon receiving your verification or feedback.

What is Ceylinco Life is doing to protect my Personal information?

The company has taken all responsible best efforts to safeguard the confidentiality and security of all Personal information, including appropriate procedural, organizational and technical steps to protect Personal information from accidental or unlawful destruction or accidental loss, alteration or disclosure.

The company do not accept any responsibility whatsoever for any unauthorized access or loss of Personal Information that is beyond our control.

What information you collect when accessing Ceylinco Life websites?

The company reserves the right to record anonymous/aggregated information (such as the time, date and web address of the request) of you accessing Ceylinco Life websites. This information shall be used by the company to improve the customer experience of the company websites and monitor performance of these websites. Such analysis of these anonymous/aggregated information may be conducted by the company or our authorized third party representative.

You shall be required to provide Ceylinco Life with standard information such as your Login ID, Password, and Personal Information for verification purposes when accessing the company websites, to make available the Services requested by you. It shall be the sole responsibility of you to maintain the confidentiality of your Login ID and Password.

The company may use IP addresses, cookies and session identifiers to record details such as a user identity and general registration details on your device(s) to assist us to recognize you on subsequent visits to carry out aforesaid activities. You may disable such recordings of details by configuring the respective internet browser/ client application.

Will Ceylinco Life communicate any updates to this Personal Data Protection Notice when such occurs?

The Company may review and update this Personal Data Protection Notice from time to time to reflect changes in the law, changes in the business practices, procedures and structure of our Company and Ceylinco Life, and changes in the community’s privacy expectations. It is not generally feasible to notify you of changes to this Personal Data Protection Notice and as such, you can log on to our website to obtain the latest version of the Personal Data Protection Notice at any time.

Consent

By interacting with the Company, submitting information to the Company, enrolling or signing up for any products or services offered by the Company, you consent (and where required, explicitly consent) to such use of your personal information including sensitive personal data, in the manner set out in this notice. Such consent and authorization herein shall extend to any information obtained from any of the insurance policy(ies) presently provided to you, any new application to the Company for insurance, and claim processing, such historical financial or credit records, data or information whether or not provided personally.