PromoForInsurance Technologies India Pvt. Ltd. ("PromoForInsurance") is dedicated to ensuring data privacy and security for all individuals who access our services. Although our primary business operations and corporate headquarters are located in Gurugram, India, we recognize and respect the extraterritorial applicability of the European Union General Data Protection Regulation (GDPR) for visitors residing within the European Economic Area (EEA), the United Kingdom, and Non-Resident Indians (NRIs) purchasing Indian term or health coverage for parents back home.
1. Roles and Responsibilities
Under the GDPR:
- Data Controller: PromoForInsurance acts as the Data Controller with respect to personal data directly submitted to us through our website, such as email addresses provided via our subscription forms and inquiry submissions via our contact forms.
- Third-Party Insurers: When you navigate away from our platform to an insurer's checkout portal (e.g., to complete a policy proposal), that respective insurance company acts as an independent Data Controller for your health underwriting, financial records, and policy issuance.
2. Principles of Data Processing
We process personal data in accordance with the core principles of GDPR Article 5:
- Lawfulness, Fairness, and Transparency: We process data lawfully and clearly inform users about how their data is used.
- Purpose Limitation: Data is collected only for specified, explicit, and legitimate purposes (such as promo notifications or customer support).
- Data Minimization: We request only the minimum data required to deliver our service (e.g., email address only for newsletter subscriptions).
- Accuracy: We maintain up-to-date records and rectify inaccurate information promptly.
- Storage Limitation: Data is retained only as long as necessary to accomplish the intended purpose.
- Integrity and Confidentiality: Data is secured using encryption, access controls, and cybersecurity firewalls.
3. Lawful Basis for Processing (Article 6)
We rely on the following lawful bases under GDPR Article 6:
- Consent (Art. 6(1)(a)): You have provided clear, unambiguous, affirmative consent to receive insurance discount alerts or responses to your inquiries.
- Legitimate Interests (Art. 6(1)(f)): Processing necessary for our legitimate interests in securing our digital network, preventing fraud, and optimizing user experience, provided these interests do not override your fundamental rights.
4. Your Data Subject Rights under GDPR
If you are an EEA or UK resident, you have the following enforceable statutory rights:
- Right to be Informed: You have the right to know how your data is collected, stored, and used.
- Right of Access (Art. 15): You may request a machine-readable copy of any personal data we hold about you.
- Right to Rectification (Art. 16): You may request the correction of inaccurate or incomplete personal records.
- Right to Erasure / Right to be Forgotten (Art. 17): You may demand the complete deletion of your personal records from our databases.
- Right to Restrict Processing (Art. 18): You have the right to block or suppress further processing of your data under specific conditions.
- Right to Data Portability (Art. 20): You may request the transfer of your personal data to another service provider.
- Right to Object (Art. 21): You may object to data processing for direct marketing at any time.
- Rights in Relation to Automated Decision-Making (Art. 22): We do not conduct automated profiling that produces legal effects on you.
5. Cross-Border Data Transfers
Because PromoForInsurance operates servers within the Republic of India, when you interact with our website from the EEA, your personal data is transferred to India. We safeguard international data transfers by adhering to Standard Contractual Clauses (SCCs) approved by the European Commission, and maintaining equivalent technical and organizational security standards.
6. Exercising Your Rights & Data Protection Officer
To exercise any of your GDPR rights, or to submit questions regarding our European data protection practices, please contact our designated Data Protection Officer:
Designated DPO: Data Protection Officer
Entity: PromoForInsurance Technologies India Pvt. Ltd.
Address: Level 5, Tower B, DLF Cyber City, Gurugram, Haryana – 122002, India
Email: [email protected]
Response Time: We will process and confirm action on all verified GDPR requests within 30 calendar days without any administrative charge.
You also retain the right to lodge a complaint with an applicable European Supervisory Authority in the EU Member State of your habitual residence or place of work.