Privacy Policy
Introduction And Background
Square Insurance Brokers Private Limited ("Square Insurance", "the Company", "we", "us" or "our") recognises and respects the privacy expectations of its customers, business partners, employees, and other individuals whose personal data is processed by the Company.
This Data and Information Privacy Policy ("Policy") is adopted in line with the Digital Personal Data Protection Act, 2023 ("DPDP Act"), applicable rules, the Information Technology Act, 2000, and regulations issued by the Insurance Regulatory and Development Authority of India (IRDAI).
The objective of this Policy is to ensure that personal data is processed in a lawful, fair, transparent, and secure manner and only for specified and lawful purposes.
Personal Information That We May Collect
We only collect Personal Information that you choose to provide us or for which we have a lawful basis under the Digital Personal Data Protection Act, 2023 ("DPDP Act"), including your consent, contractual necessity, or compliance with applicable law. Through your use of this Site, we will not collect Personal Information unless you voluntarily provide the same or such collection is permitted by law. For safety and security purposes, we may monitor usage of the Site through cookies as mentioned in our Terms of Use. Depending on the nature of your interaction with Square Insurance Brokers Private Limited, we may collect and process the following categories of personal data:
Identity and Contact Information : Name, address, email address, mobile number, date of birth.
Identification and KYC Information : PAN, Aadhaar or other officially valid documents, where permitted under applicable law and regulatory requirements.
Insurance and Transaction Data : Proposal details, policy information, premiumpayment details, claim-related information, and insurer communications.
Demographic Information : Age, gender, occupation, and location.
Technical and Usage Data : IP address, device identifiers, browser type, operating system, website or application usage data.
Employment-related Information : Where applicable, for employees, consultants, or authorized persons.
Any other personal data voluntarily provided by you in connection with availing our services.
The Personal Information provided by you shall be accurate and complete to the best of your knowledge. Any deliberate provision of false or misleading information may result in suspension or discontinuation of services, subject to applicable law.
Consent And Withdrawal
By accessing or using Squareinsurance.in and by voluntarily providing your Personal Information, you acknowledge that you have read and understood this Policy and consent to the processing of your Personal Information for the purposes stated herein. Square Insurance Brokers Private Limited, its authorised representatives, and service partners may contact you via email, telephone calls, or SMS for purposes related to products or services requested by you and for service-related communications.
Where required by law, promotional or marketing communications shall be sent only after obtaining your explicit consent and in compliance with applicable legal and regulatory requirements. Consent obtained under this Policy shall be free, specific, informed, unconditional, and unambiguous. You may withdraw your consent at any time in the manner prescribed by the Company; however, such withdrawal shall not affect the lawfulness of processing carried out prior to withdrawal and may impact the availability of certain services.
Purpose Of Processing
Personal Information is processed for purposes including but not limited to:
Providing insurance broking and allied services in accordance with applicable law
Customer onboarding, verification and KYC compliance
Policy servicing, renewals, endorsements, and claims assistance
Communication regarding products, updates, and regulatory requirements and services
Internal analytics, risk assessment, service improvement, and business continuity
Marketing communications, subject to consent and applicable law
Legal, regulatory, and audit compliance
Legal Basis For Processing
Personal Information is processed on the basis of:
Consent of the Data Principal
Performance of a contract
Compliance with legal obligations
Lawful purposes permitted under the DPDP Act
Rights Of Data Principals
As a Data Principal, you have the right to:
Access information about your Personal Information processed by us
Request correction or erasure of your Personal Information
Withdraw consent for processing
Seek grievance redressal
Nominate another person to exercise your rights in the event of death or incapacity
Location Data
We access location data only where strictly necessary and with your explicit consent. For Employees: We use location data solely to record attendance through our portal. This helps us maintain accurate records and ensure transparency in attendance management. For Partners: Location data is used for geotagging as required under the guidelines of the Insurance Regulatory and Development Authority of India (IRDAI). This ensures compliance with regulatory requirements and facilitates seamless service operations.
Location data is used exclusively for the stated purposes and is not shared with third parties except where required by law. You may revoke location permissions through device settings, subject to impact on service functionality.
Children's Privacy
The Company does not knowingly process Personal Information of individuals below eighteen (18) years of age without verifiable parental or guardian consent. If the Company becomes aware that personal data of a child has been collected without such consent, appropriate steps shall be taken to delete such data.
Consequences Of Not Providing Personal Data
Where the provision of Personal Information is mandatory to process your request or provide services, failure to provide such information may result in the Company being unable to offer the corresponding services or fulfil contractual or regulatory obligations.
Cookies And Technical Data
We may automatically collect non-personal and technical information such as browser type, device information, IP address, pages visited, and usage patterns. Such information is used for website administration, security monitoring, fraud prevention, analytics, and performance improvement and does not directly identify you.
Reasonable Security Practices
We implement reasonable physical, technical, and organizational safeguards to protect Personal Information against unauthorized access, misuse, alteration, disclosure, or destruction. While we strive to use commercially acceptable security measures, no method of electronic transmission or storage is completely secure. We recognize the importance of protecting your personal and financial information. We assure that the information parted to us will be kept in strict confidentiality and to use the information only for to help us service your account, to improve our services to you, to provide you with products you have requested, and to inform you about additional products or services that may be of interest to you. We do not sell your personal information to third parties.
Links to Other Websites
Our Service may contain links to other websites that are not operated by us. If you click on a third party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit.
We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.
Data Sharing
The Company does not sell Personal Information. Personal Information may be shared strictly on a need-to-know basis with insurers, service providers, professional advisors, regulatory authorities, or law enforcement agencies for lawful purposes and subject to appropriate contractual, technical, and organizational safeguards.
Data Retention And Deletion
Personal data shall be retained only for such period as is necessary to fulfil the purposes for which it was collected, to comply with legal or regulatory obligations, or to enforce contractual rights. Upon completion of such purposes, personal data shall be securely deleted, anonymised, or archived in accordance with applicable law and internal retention policies.
Personal Data Breach
In the event of a personal data breach, we shall take appropriate remedial measures and notify affected individuals and the Data Protection Board of India and affected Data Principals where required under law.
Grievances Redressal
If you have any grievances regarding processing of your Personal Information, you may contact our Grievance Officer / Data Protection Officer at: https://www.squareinsurance.in/grievance-redress-policy, and mail at: Grievances@squareinsurance.in. Grievances shall be addressed within timelines prescribed under applicable law
Policy Updates
We may update this Privacy Policy from time to time to reflect changes in law or business practices. Material changes shall be notified on the website. Continued use of the Site after such changes shall constitute acceptance of the revised Policy, subject to applicable law.
Governing Law
This Policy shall be governed by and construed in accordance with the laws of India.