Privacy Policy

At Policy Total, we prioritize the trust you place in us when sharing your personal and financial information. This Privacy Policy outlines how we collect, use, protect, and disclose your data in our capacity as an IRDAI-certified Point of Sales Person (POSP).

This policy is designed to be fully compliant with the Digital Personal Data Protection (DPDP) Act, 2023 of India, along with IRDAI's data security guidelines.

To provide accurate insurance quotes and facilitate policy issuance, we collect the following categories of data:

• Personal Identifiers: Name, age, gender, date of birth, and marital status.
• Contact Details: Phone numbers, email addresses, and residential/communication addresses.
• KYC & Regulatory Data: Aadhaar number, PAN Card details, and photographs (as mandated by IRDAI for policy issuance).
• Asset Information: Vehicle Registration Certificate (RC), engine/chassis numbers, and previous policy details.
• Health Data: Pre-existing medical conditions, lifestyle habits, and medical history (strictly for health and life insurance underwriting).

We use your personal data strictly for legitimate business and transactional purposes, including:

• Generating accurate insurance premium quotations.
• Facilitating the underwriting process and policy issuance with the chosen Insurance Company.
• Sending transactional communications, renewal reminders, and claim assistance updates via SMS, WhatsApp, Email, or Phone Calls.
• Cross-selling and offering relevant financial products or value-added services that align with your profile.
• Complying with legal, regulatory, and anti-money laundering (AML) obligations.

Policy Total does not sell, rent, or lease your personal data to unauthorized third parties. We only share your data with:

• Insurance Companies & Principal Entities: Your data is transmitted directly to the respective insurers and our Principal Broker/Corporate Agent for underwriting, risk assessment, and policy issuance.
• Payment Gateways: Necessary transactional data is shared with secure, RBI-approved payment gateways to process your premiums.
• Legal & Regulatory Authorities: We may disclose information if required by law, court order, IRDAI directives, or to investigate fraud.

We employ industry-standard encryption and security protocols to protect your data from unauthorized access, alteration, or disclosure. However, no digital transmission is entirely foolproof, and we cannot guarantee absolute security.

Retention: We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, or as mandated by IRDAI regulations (which often require retaining policy and claim records for several years even after policy expiration).

Under the Digital Personal Data Protection Act, you possess the following rights regarding your data:

• Right to Access & Correct: You may request a summary of your data and ask us to correct any inaccuracies.
• Right to Withdraw Consent: You may withdraw your consent for promotional communications at any time. However, withdrawing consent for core data processing may prevent us from servicing your active policies or claims.
• Right to Erasure: You may request the deletion of your data, provided such deletion does not violate IRDAI's mandatory record-keeping requirements or ongoing legal obligations.