Introduction
Precise Insurance Agency Ltd ("Precise Insurance", "we", "us" or "our") is an independent, licensed insurance intermediary regulated by the Insurance Regulatory Authority (IRA) of Kenya. We are committed to protecting your privacy and handling your personal data with the highest standards of care and integrity.
This Privacy Policy explains what personal information we collect when you use our website, request a quote, purchase insurance, or interact with our services. It details how we use your information, who we share it with, and the choices and rights available to you under Kenya's Data Protection Act, 2019 and the General Data Protection Regulation (GDPR) where applicable.
By using our website or engaging our services, you agree to the collection and use of information in accordance with this policy. We encourage you to read this document carefully.
Information We Collect
We collect information that is necessary to provide you with insurance quotes, manage your policies, process claims, and comply with regulatory requirements. This includes:
- Identity Details: Full name, date of birth, gender, National ID or Passport number, KRA PIN, and occupation.
- Contact Details: Phone number, email address, physical address, and postal address.
- Insurance-Specific Information: Vehicle logbook details, driving history, medical history, business operations, asset valuations, and property details relevant to your coverage.
- Financial Information: M-Pesa transaction details, bank account information, and payment history needed to process premium payments.
- Claims History: Past insurance claims made by you or related to the insured assets or individuals.
- Technical Information: IP address, browser type, operating system, device information, and pages visited on our website, collected automatically through cookies and similar technologies.
We collect this information directly from you when you complete forms on our website, communicate with us via phone, email, or WhatsApp, or interact with our team in person.
How We Use Your Information
Your personal information is used solely for legitimate business purposes related to providing insurance and risk advisory services. We use your data to:
- Provide you with accurate insurance quotations across our network of leading underwriters.
- Compare insurance products and recommend the most suitable coverage for your needs.
- Arrange, process, and manage your insurance policy on your behalf.
- Process premium payments and issue certificates, policy documents, and renewal notices.
- Assist you with claims, liaise with insurers, and advocate on your behalf throughout the claims process.
- Communicate with you regarding quotes, policies, renewals, claims, and other service-related matters.
- Improve our website, products, and customer service through analytics and feedback.
- Meet our legal and regulatory obligations, including those under the Insurance Regulatory Authority (IRA) of Kenya and the Kenya Data Protection Act, 2019.
- Prevent fraud and verify your identity when required.
We do not use your information for automated decision-making or profiling that produces legal or similarly significant effects without your explicit consent.
Legal Basis for Processing
Under the Kenya Data Protection Act, 2019, we process your personal data on the following legal bases:
- Contractual Necessity: Processing is necessary for the performance of a contract to which you are a party (e.g., providing you with an insurance quote or managing your policy).
- Legal Obligation: Processing is required to comply with our legal and regulatory obligations, including those under the Insurance Act and directives from the IRA.
- Legitimate Interests: Processing is necessary for our legitimate business interests, such as improving our services, preventing fraud, and ensuring the security of our systems, provided your rights and interests do not override these interests.
- Consent: Where we rely on your consent (e.g., for marketing communications), you have the right to withdraw that consent at any time.
International Transfers
In some cases, your personal information may be transferred to, stored at, or processed in jurisdictions outside Kenya. This may occur when:
- We use global service providers (e.g., cloud hosting, email platforms) that operate internationally.
- Your insurance policy involves a multinational underwriter or international coverage (e.g., travel insurance, marine insurance).
When we transfer your data internationally, we ensure appropriate safeguards are in place to protect your information, including:
- Standard Contractual Clauses approved by relevant data protection authorities.
- Ensuring our service providers are certified under recognized data protection frameworks.
- Conducting due diligence to ensure recipients implement adequate data protection measures.
You have the right to request information about the safeguards used for international data transfers.
Data Retention
We retain your personal information for as long as necessary to:
- Provide the insurance and advisory services you have requested.
- Comply with our legal and regulatory obligations, including those under the Insurance Act, the Kenya Data Protection Act, and directives from the Insurance Regulatory Authority (IRA).
- Resolve disputes and enforce our agreements.
- Maintain accurate records for audit and compliance purposes.
Generally, we retain your data for a period of seven (7) years after the expiry of your policy or the conclusion of our professional relationship, in line with industry best practices and regulatory requirements. After this period, your data will be securely anonymised or deleted, unless there is a specific legal or regulatory reason to retain it for longer.
Security Measures
At Precise Insurance Agency, we take the security of your personal information seriously. We implement comprehensive technical and organisational measures to protect your data against unauthorised access, loss, misuse, alteration, or destruction. These include:
- Encryption: All data transmitted between your browser and our website is secured using industry-standard SSL/TLS encryption.
- Access Control: Access to your personal information is restricted to authorised personnel only, on a need-to-know basis.
- Secure Infrastructure: We use reliable, secure hosting environments with firewalls, intrusion detection systems, and regular security audits.
- Staff Training: Our team undergoes regular training on data protection and privacy best practices.
- Incident Response: We have established protocols for responding to data breaches and will notify affected individuals and relevant authorities as required by law.
While no method of transmission over the internet or electronic storage is completely secure, we continually strive to improve our security measures to protect your information.
Your Rights
Under the Kenya Data Protection Act, 2019, you have the following rights regarding your personal information:
- Right of Access: You have the right to request a copy of the personal information we hold about you.
- Right to Correction: You have the right to request correction of inaccurate or incomplete information.
- Right to Deletion: You have the right to request deletion of your personal information, subject to our legal and regulatory retention obligations.
- Right to Object: You have the right to object to certain uses of your information, including processing for marketing purposes.
- Right to Restrict Processing: You have the right to request restriction of processing of your information under certain circumstances.
- Right to Data Portability: You have the right to receive your personal information in a structured, commonly used, and machine-readable format.
- Right to Withdraw Consent: Where we rely on your consent, you have the right to withdraw that consent at any time.
- Right to Complain: You have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) if you believe your rights have been violated.
To exercise any of these rights, please contact us using the details in the Contact Us section. We will respond to your request within 30 days as required by law.
Postal Address: P.O. Box 30917-00100, Nairobi, Kenya
Email: info@odpc.go.ke
Website: www.odpc.go.ke
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or regulatory guidance. Any significant changes will be communicated through our website, and we will update the "Last updated" date at the top of this page.
We encourage you to review this page periodically to stay informed about how we protect your privacy. Your continued use of our services after any changes indicates your acceptance of the updated policy.
Contact Us
If you have any questions about this Privacy Policy, our data protection practices, or wish to exercise any of your rights, please contact us at:
- Email: info@preciseinsurance.co.ke
- Phone: +254 726 439 278
- Address: Rongai Building, 2nd Floor, Kona Beach, Diani Beach Road, Ukunda, Kwale County, Kenya
Data Protection Officer: We have designated a Data Protection Officer (DPO) to oversee our data protection compliance. You can reach our DPO at dpo@preciseinsurance.co.ke.
We are committed to addressing your questions and concerns promptly and transparently.