Customer Data Privacy Notice

Alliance Insurance P.S.C is committed to ensuring that your privacy is protected. This privacy policy explains how we use the information we collect about you, how you can instruct us if you prefer to limit the use of that information and procedures that we have in place to safeguard your privacy.

Definitions

Data Subject: A natural person about whom the entity holds personal identification information and  protected health information and who can be identified, directly or indirectly, by reference to that information

Personal Identifiable Information (PII): Personally identifiable information (PII) is any data that could potentially identify a specific individual

Personal Health Information (PHI): Protected health information (PHI), also referred to as personal health information, is the demographic information, medical histories, test and laboratory results, mental health conditions, insurance information and other data that a healthcare professional collects to identify an individual and determine appropriate care.

Controller: The Controller is Alliance, or any person or entity authorized by Alliance insurance, that holds and determines — individually or jointly with others — the purposes and methods of processing Personal Data, based on the nature of its activities.

Processing: Processing refers to any action or set of actions carried out on Personal Data through electronic or other means. This includes, but is not limited to, the collection, storage, recording, organization, adaptation, alteration, retrieval, exchange, sharing, usage, classification, disclosure (via transmission, distribution, or availability), coordination, merging, restriction, blocking, erasure, destruction, or creation of derivatives from the data.

Processor: A natural person, public entity, or private legal entity that processes Personal Data on behalf of and as directed by the Controller.

Overview

This Privacy Policy for Alliance Insurance P.S.C (here after referred as Alliance Insurance) has been formulated to assist Data Subjects to understand how their personal information will be treated by Alliance Insurance Company when they use its digital services, as Alliance Insurance’s objective is to make available a good experience and quality service to all Data Subjects. This policy is in alignment with Alliance Insurance Company’s “Data Protection & Privacy Policy” which is based on UAE Federal Decree Law No. 45/2021 on the Protection of Personal Data (UAE PDPL) and Abu Dhabi Healthcare Information and Cyber Security Standard (ADHICS) Version 2 and CBUAE consumer protection regulation.

1. Collection of Personally Identifiable Information while accessing Alliance Insurance website

Whenever a Data Subject visits Alliance Insurance Website, the server used by Alliance Insurance Web Host will make a record of

• Data Subject IP Address,
• The date and time of Data Subject visit,
• The type of Internet Browser Data Subject uses and
• The URL of any web site which referred Data Subject to Alliance Insurance Website.

Unless otherwise stated Cookies used (if any) in any part of Alliance Insurance website and/or digital services will NOT be deployed for collecting personally identifiable information (PII) or personal health information (PHI) of the data subject.

Note: Cookies are small computer files that can be stored in web surfers’ computers for the purposes of obtaining configuration information and analyzing web surfers’ viewing habits. Data Subject may refuse to accept Cookies (by modifying the relevant Internet options or browsing preferences of Data Subject computer system). Therefore, Data Subject may not be able to utilize or activate certain available functions in Alliance Insurance digital services.

2. Types of Personally Identifiable Information

(PII) / sensitive personal data collected during use of Alliance web site or otherwise

As part of Alliance Insurance digital services, Data Subject may be required to give her/his personally identifiable information (PII) / sensitive personal data including, but not limited to,

• Data Subject name,
• Gender,
• Age,
• EID number,
• Nationality
• Telephone number,
• Home & residential address,
• email address.
• Credit card details
• TIN/SSN
• Employment Details

• Health information such as Medical Assessment Forum etc.
• Motor Vehicle number

Alliance Insurance may use your personal information to:

• Administer this website.
• Personalize the website.
• Enable Data Subject access to and use of the website / digital services.
• Collect payments from Data Subject; and
• Comply with applicable legal, regulatory, and reporting obligations, including but not limited to anti-money laundering, tax reporting, and financial supervision requirements.

3. Purpose / Use of Personally Identifiable Information Collected as part of Alliance Insurance digital services

Specific purposes for which Data Subject personally identifiable information (PII) and personal health information (PHI) may be used are:

• Life / Medical Insurance Services
• Motor insurance services
• Non-Motor insurance / general insurance services
• Medical insurance services

If you use the services on behalf of someone else (such as your child) or an entity (such as your employer), you represent that you are authorized by such individual or entity to accept this privacy policy and to provide their information.

4. How we protect your information

We implement appropriate technical and organizational measures (ToM) to secure your Personal Data against unauthorized access, disclosure, alteration, or destruction.

As part of its due care/ due diligence, Alliance Insurance employs various data protection and data security measures to secure its  Digital Services as part of its wider information security & privacy program which is based out of best practices like ADHICS standards. It is worth noting that such measures do not guarantee that use of the Alliance Insurance Website and its digital services (e-mail) is invulnerable to all security risks, nor does Alliance Insurance make any warranty, guarantee, or representation that use of the Alliance Insurance Website and digital services is protected from all viruses, worms, and other vulnerabilities.

The personal data collected shall be stored only till the storage is mandated by UAE PDPL, ADHICS or any other UAE existing laws and regulations. Data shall be purged upon the elapse of the retention time, mandated by law. It shall be noted that as a policy, Alliance Insurance will not transfer customer personal data outside UAE without the explicit approval of Central Bank of UAE and/or Department of Health Abu Dhabi.

5. Data Sharing and Disclosure

In the course of providing insurance services, Alliance may share your personal data, including Personal Identifiable Information (PII) and Personal Health Information (PHI), that may include, without limitation, reinsurers, Third-Party Administrators (TPAs), medical networks, Insurance and Reinsurance brokers, verification and screening platforms, IT service providers, and regulatory authorities. This is strictly for purposes including but not limited to underwriting, claims processing, policy servicing, fraud prevention, and regulatory compliance.

Such data sharing is conducted under strict confidentiality agreements and data protection obligations that ensure compliance with applicable UAE laws, including the UAE Personal Data Protection Law (PDPL), ADHICS Standards, and the Central Bank of the UAE Consumer Protection Regulations.

Alliance take reasonable steps to ensure that any third party receiving your data maintains appropriate technical and organizational safeguards and uses the data solely for the intended and authorized purposes.

To meet our regulatory obligations under applicable tax reporting frameworks such as CRS and FATCA, Alliance may verify tax identification information through secure, authorized third-party services. These services are used strictly for validation and compliance purposes.

6. Association with Third party websites/Services

The website / digital services may, from time to time, contain links to and from the websites of third parties. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these third party websites. Please note that Alliance have no access or control of the cookies or web beacons set by third parties

7. Credit Card Security

All your transactions are protected by powerful Secure Sockets Layer (SSL) encryption technology. SSL encrypts your credit card number, name, address, and telephone number before they travel over the Internet. We do not store any of the credit card related information in our server. This is captured and processed directly by the payment gateway service provider and hence provides the highest level of security possible.

8. Your Rights as a Data Subject

At any point while we are in possession of or processing your personal data, you, the Data Subject, have the following rights:

• Right of access – you have the right to request a copy of the information that we hold about you.
• Right of rectification – you have a right to correct data that we hold about you that is inaccurate or incomplete.
• Right to be forgotten – in certain circumstances you can ask for the data we hold about you to be erased from our records.
• Right to restriction of processing – where certain conditions apply to have a right to restrict the processing.
• Right of portability – you have the right to have the data we hold about you transferred to another organization.
• Right to object – you have the right to object to certain types of processing such as direct marketing.
• Right to object to automated processing, including profiling – you also have the right to be subject to the legal effects of automated processing or profiling.

9. Can I find out the personal data that Alliance Insurance holds about me?

You as Data Subject, you can request Alliance Insurance to find out about the personal data that it holds and how its processed by writing ‘Data Subject Access Request’  to Alliance Insurance at data.privacy@alliance-uae.com You can request the following information:

• Identity and the contact details available with the Alliance Insurance.
• Contact details of the data protection officer (DPO), where applicable.
• The purpose of the processing as well as the legal basis for processing.
• If the processing is based on the legitimate interests of the Alliance Insurance or a third party, information about those interests.
• The categories of personal data collected, stored and processed.
• Recipient(s) or categories of recipients that the data is/will be disclosed to.
• Transfer of the personal data to a third country or international organization, information about how the Alliance Insurance ensure this is done securely.
• How long the data will be stored.
• Information about your right to withdraw consent at any time.
• The source of personal data if it wasn’t collected directly from you.
• Any details and information of automated decision making, such as profiling, and any meaningful information about the logic involved, as well as the significance and expected consequences of such processing.

10. What forms of ID will I need to provide in order to access this?

The Alliance Insurance accepts the following forms of ID when information on your personal data is requested:

e.g.: Emirates ID, Passport, driving license, birth certificate etc.

If any third party is raising Data Subject Request on behalf of you, third party shall submit required authorization from you

11. Association with Third party websites/Services

The website / digital services may, from time to time, contain links to and from the websites of third parties. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these third party websites.

12. Data Security

As part of its due care/ due diligence, Alliance Insurance employs various data protection and data security measures to secure its Digital Services as part of its wider information security & privacy program which is based out of best practices like ADHICS standards(latest version). It is worth noting that such measures do not guarantee that use of the Alliance Insurance Website and its digital services is invulnerable to all security risks, nor does Alliance Insurance make any warranty, guarantee, or representation that use of the Alliance Insurance Website and digital services is protected from all viruses, worms, and other vulnerabilities. The personal data collected shall be stored only till the storage is mandated by UAE PDPL, ADHICS or any other UAE existing laws and regulation. Data shall be purged upon the elapse of the retention time, mandated by law. It shall be noted that as a policy, Alliance Insurance will not transfer customer personal data outside UAE without the explicit approval of Central Bank of UAE and/or Department of Health Abu Dhabi.

13. Addressing Customer Complaint associated with Alliance Insurance Digital services

If you want to contact the Alliance Insurance on data privacy related topics, have any grievance or you suspect a breach with respect to our use of your information, or if you have any complaint on handling your data, you may communicate such grievance to data.privacy@alliance-uae.com or at our postal address: P.O. Box 5501, Dubai, U.A.E, which will be addressed by the Alliance Insurance Company’s Data Protection Officer (DPO).

If you wish to make a complaint about how your personal data is being processed by the Alliance Insurance or its associated processors or how your data right request has been handled, you have the right to lodge a complaint directly with the regional supervisory authority and the Alliance Insurance’s data protection officer.

If Alliance Insurance identify any data breach under any circumstances, the regulators (DOH / CBUAE) will be notified within 72 hours

If the data breach is found to be posing high risk to the privacy / financial impact on Data Subjects, the Data Subject will be notified immediately.

Communication will be routed through customer’s respective e-mail ID, or through a public notice as appropriate along with the procedural measures taken to handle / manage the breach.

The details for each of these contacts are:

14. Customer Consent

Consent is required for Alliance Insurance to process all types of personal data, but it must be explicitly given. Where we are asking you for sensitive personal data, we are always bound to tell you why and how the information will be used.

By consenting to this privacy notice you are giving us permission to process your personal data specifically for the purposes identified.

15. If Broker is sharing the customer PII / PHI data

By consenting to this privacy notice you are giving us permission to process your customers personal data specifically for the purposes identified, on their behalf.

Through this consent, you are confirming the collection and storage of customer consent at your end and will be able to share them on demand.

You may withdraw consent at any time by submitting ‘Data Subject Consent Withdrawal Request’ by writing to data.privacy@alliance-uae.com. Please note that it will take us 30 days to complete the processing and give you a confirmation.

By using the digital services or by otherwise giving us your information in any form, you will be deemed to have read, understood and agreed to the practices and policies outlined in this policy.

Please note that Alliance Insurance may amend this policy from time to time without prior notice. Data Subjects are advised to check this Policy on regular basis. If you do not agree with this policy at any time, do not use any of the digital services or give us any of your information.

16. Marketing Communications and Consent

Alliance Insurance may occasionally inform you about products and services provided by us or our approved partners.

You will only receive such communications. You may withdraw your consent at any time by contacting us at data.privacy@alliance-uae.com.