Effective date: 21 August 2025

We specialize in protecting what powers the digital world. At Insart Insurance, we provide tailored insurance solutions for IT service providers, product-based tech companies, and tech unicorns operating across global markets. This Privacy Policy explains how we collect, use, disclose, and protect personal data when you visit our websites, use our services, or interact with us.

Scope

This Policy applies to personal data processed by Insart Insurance in connection with:

• Our public websites, portals, and marketing pages;
• Our insurance products and related brokerage/underwriting services;
• Events, webinars, surveys, and business development activities;
• Customer support and claims handling.

Personal Data We Collect

• Contact & Identity Data: name, business email, phone, job title, company, country/region.
• Account & Authentication Data: login identifiers, role, security settings (for portals, if applicable).
• Policy & Claims Data: policy numbers, risk profiles, proposal forms, underwriting questionnaires, loss history, incident reports, claim documentation (including communications and evidence you provide).
• Financial Data: billing address, payment records, premium amounts, refund details (processed via compliant payment providers—no full card data stored on our systems).
• Technical & Usage Data: IP address, device identifiers, browser/OS details, referring URLs, pages viewed, interactions, cookies and similar technologies.
• Marketing & Communications Data: preferences, engagement metrics, survey responses, event registrations.
• Third-Party & Public Sources: data from brokers, insurers, reinsurers, loss adjusters, fraud-prevention and sanctions screening providers, credit/reference sources, and public registers.

How We Use Personal Data

• Provide, administer, and improve our insurance products and services;
• Underwrite risks, assess eligibility, price and place coverage, and service policies;
• Process and manage claims, including investigation, loss adjustment, and resolution;
• Respond to inquiries, provide customer support, and operate portals;
• Conduct analytics, reporting, and product development;
• Send service communications and, with consent where required, marketing messages;
• Comply with legal and regulatory obligations (e.g., anti-fraud, sanctions, record-keeping);
• Protect the security and integrity of our systems and prevent misuse.

Legal Bases (EEA/UK)

Where GDPR/UK GDPR applies, we rely on one or more of the following:

• Performance of a contract (or steps prior to entering into it);
• Legitimate interests (e.g., providing and improving services, ensuring security, preventing fraud—balanced against your rights);
• Consent (for certain marketing/cookies or where required by law);
• Legal obligations (e.g., financial, regulatory, sanctions screening).

Sharing & Disclosures

We may share personal data with:

• Insurers, reinsurers, MGA/MGUs, brokers, coverholders, loss adjusters, claims administrators;
• Service providers and vendors (IT hosting, analytics, communications, payment processing, KYC/AML screening) under contract;
• Professional advisors (legal, audit, accounting);
• Authorities and regulators where required by law or to protect rights;
• In connection with a business transaction (e.g., merger, acquisition), subject to appropriate safeguards.

International Transfers

As a global provider, we may transfer personal data across borders. Where required, we implement appropriate safeguards such as Standard Contractual Clauses, UK IDTA/Addendum, or other lawful transfer mechanisms, plus supplementary measures as needed.

Retention

We retain personal data only as long as necessary for the purposes described above, including to comply with legal, regulatory, accounting, or reporting requirements, and to establish or defend legal claims. Retention periods vary by data category and jurisdiction.

Security

We employ technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, or alteration, including access controls, encryption in transit where appropriate, network monitoring, and vendor due diligence. No system is completely secure; we maintain incident response procedures to address potential events.

Your Rights

Depending on your location, you may have rights such as: access, rectification, deletion, restriction, portability, and objection to processing (including objection to direct marketing). Where processing is based on consent, you can withdraw consent at any time. We will honor applicable rights under GDPR/UK GDPR and, where relevant, CPRA/CCPA and other local laws.

To exercise rights, use the contact details below. We may need to verify your identity and the scope of your request. If we act as a processor on behalf of an insurer or corporate client, we will forward your request to the appropriate controller.

Cookies & Similar Technologies

We use necessary cookies to operate our sites and optional analytics/marketing cookies with consent where required. You can manage preferences via our cookie banner or your browser settings. For details, see our Cookie Policy.

Children’s Data

Our services are intended for business users and are not directed to children. We do not knowingly collect personal data from individuals under the age required by applicable law. If you believe a child has provided data to us, please contact us to request deletion.

Automated Decision-Making

We do not engage in solely automated decisions that produce legal or similarly significant effects without human involvement. If this changes for underwriting or fraud-prevention contexts, we will provide required notices and safeguards.

Third-Party Links

Our websites may contain links to third-party sites or services. We are not responsible for their privacy practices. We encourage you to review their policies.

Changes to This Policy

We may update this Policy from time to time. The “Effective date” will reflect the latest version. Material changes may be highlighted on our website or communicated directly where appropriate.

Contact Us

If you have questions or requests regarding this Policy or our data practices, please contact:

Insart Insurance
Privacy Office / Data Protection
Email: privacy@insart.insurance
Address: [Insert registered address]
EU/UK Representative (if applicable): [Insert details]

Note: This template is provided for general informational purposes only and does not constitute legal advice. Requirements vary by jurisdiction and line of business. Please consult your legal counsel to tailor this Policy to your specific operations.