Privacy Policy & Data Protection

ASK Insurance Broker Private Limited ('ASK', 'we', 'us', or 'our') is registered as a Direct Insurance Broker (Life & General) with the Insurance Regulatory and Development Authority of India (IRDAI) under License No. 882 (Category: Direct Broker - Life & General) in accordance with the IRDAI (Insurance Brokers) Regulations, 2018.

This Privacy Policy sets out how we collect, process, store, and protect your personal and financial data across our website (askinsurance.in), mobile applications, and customer portal in strict compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and IRDAI cybersecurity guidelines.

To provide quotes, facilitate policy underwriting, and process cashless claims, we collect the following categories of data:

• Identity Data: Full Name, Date of Birth, Gender, PAN Card number, Aadhaar / CKYC identifier.
• Contact Information: Mobile Number, Email Address, Residential and Communication Postal Address with PIN code.
• Vehicle & Asset Data: Vehicle Registration Number, Engine Number, Chassis Number, Manufacturing Year, Previous Policy Copy, and Claim History.
• Health & Medical Declarations: Pre-existing medical conditions, surgical history, hospitalization records, lifestyle habits (tobacco/alcohol usage).
• Financial & Payment Data: Bank Account / UPI VPA for commission payouts or claim reimbursements. Payment card details are processed directly by RBI-authorized PCI-DSS Level 1 payment gateways and are never stored on our servers.
• Technical & Log Data: IP address, browser type, device identifier, session cookies, and security telemetry.

Your personal data is processed strictly for legitimate insurance purposes:

• To compare insurance products from 40+ IRDAI-registered insurance companies and generate personalized quotes.
• To transmit proposal forms and KYC records to chosen insurers for policy issuance.
• To verify customer identity as mandated by IRDAI Anti-Money Laundering (AML) and CKYC norms.
• To assist with 24/7 cashless hospital admissions, accident towing, surveyor inspection, and claim advocacy.
• To send statutory policy renewal notices, endorsement updates, and claims status communications via SMS and Email.
• To detect and prevent fraudulent claims and cybersecurity threats.

We share your data only on a strictly need-to-know basis with:

• Authorized Insurance Companies: (e.g., HDFC ERGO, ICICI Lombard, Star Health, Tata AIG, Care Health, LIC) to underwrite and issue your policy.
• Third Party Administrators (TPAs) & Cashless Garages: To authorize cashless hospitalization and repair claims.
• Regulatory Authorities: IRDAI, Financial Intelligence Unit (FIU-IND), and statutory law enforcement bodies when mandated by Indian law.

As a Data Principal under India's Digital Personal Data Protection Act 2023, you have the right to:

• Right to Access: Request a full summary of your personal data processed by ASK Insurance.
• Right to Correction: Update inaccurate or out-of-date personal, contact, or nominee records.
• Right to Erasure: Request deletion of your account and data, subject to the mandatory 5-year record retention requirement prescribed by IRDAI for insurance intermediaries.
• Right of Grievance Redressal: File a formal grievance regarding any data processing concern.
• Right to Nominate: Nominate a representative to exercise your data rights in the event of death or incapacity.

All customer data is hosted in ISO 27001 and SOC-2 certified tier-4 cloud data centers located physically within the territory of India (Mumbai / Delhi NCR).

We employ 256-bit AES encryption for stored data, TLS 1.3 encryption for data in transit, automated vulnerability assessments, and strict multi-factor authentication (MFA) for employee access.

If you have any questions, feedback, or grievances regarding this Privacy Policy, please contact our designated officer: