Wherever the name "Mycovergenius" is used in this policy, it implies one or more of the following MyCoverGenius Ltd subsidiaries, which may offer products or services on the website. Further details can be found on the respective company's website.

MyCoverGenius Ltd trading as "Cover Genius" is a private company limited by shares and registered with the Corporate Affairs Commission, with RC No. 1918634

This Data Privacy Policy stipulates the basis for the collection, use and disclosure of personal information from users of the website by MyCoverGenius Ltd and its subsidiaries in line with applicable data protection laws. Personal Data comprises all the details we hold or collect on our employees, customers, stakeholders vendors and other interested parties, directly or indirectly and includes any offline or online data that makes a person identifiable such as names, addresses, phone numbers, passport ID, usernames, passwords, digital footprints, photographs, financial data, assets and liabilities, insurance, savings and investments, health and high-risk information about products and services purchased from us (which are all collectively referred to as “Personal Information”. This information may be received from third parties or collected using our website(s), mobile app and other digital channels.

We use your personal information only for providing services to you and for improving the website. By using the website, you agree to the collection and use of information in accordance with this policy.

By abiding by this policy, we gather, store and handle data fairly, transparently and with respect towards individual rights. For the purposes of this Privacy Policy, references to "we" or "us" shall refer to Mycovergenius and its entities/subsidiaries.

The Personal Data you provide to us is:

• processed fairly, lawfully and in a transparent manner;
• collected for a specific purpose and is not processed in a way which is incompatible with the purpose which Mycovergenius collected it;
• adequate, relevant and limited to what is necessary in relation to the purposes for which it is processed;
• kept accurate, secure and, where necessary kept up to date
• kept no longer than is necessary for the purposes for which the Personal Data is processed;
• processed in accordance with your rights;

We will only transfer your Personal Data to another country or an international organization outside the European Economic Area where we have taken the required steps to ensure that your Personal Data is protected. Such steps may include placing the party we are transferring information to under contractual obligations to protect it to adequate standards;

Mycovergenius and its subsidiaries will not sell your Personal Data and we also will not permit the selling of customer data by any companies who provide a service to us.

We collect Personal Data:

• directly from you;
• via enquiry, registration, claim forms, feedback forms and forums;
• when you purchase any of our products or services;
• when you fill out a survey, or vote in a poll on our website;
• through quotes and application forms;
• via cookies. You can find out more about this in our cookies policy;
• via our telephone calls with you, which may be recorded;
• via live chat, chatbot and profilers
• through web analytics tags
• From several different sources including:
  • directly from an individual or employer who has a policy with us under which you are insured, for example you are a named driver on your partner's motor insurance policy;
  • directly from an employer which funds a Health Insurance policy that we administer where you are a beneficiary;
  • from social media, when fraud is suspected; and
  • Other third parties including:
    • your family members where you may be incapacitated or unable to provide information relevant to your policy;
    • contractors, consultants, business partners who sell our products and services via their platforms and channels
    • medical professionals and hospitals;
    • third parties such as companies who provide consumer classification for marketing purposes e.g. market segmentation data.

The information that we collect will depend on our relationship with you. Where other people are named on your policy, we may ask you to provide the information below in relation to those people too, if this is relevant to your insurance.

We collect the following details about you

• Personal Data contact details such as name, email address, home/office address and telephone number
• Details of any other persons included on the policy where they are named on your policy and the relationship to you as policyholder;
• Identification information such as your date of birth, national identity number, and Bank verification number including other identification numbers from your passport, driving license and other valid means of identification;
• Financial information such as bank details;
• Information relevant to your insurance policy such as details about your vehicle, property, previous policies or claims, recent damage, information about your travel plans, destination, planned activities and dates of travel;
• Information relevant to your claim or your involvement in the matter giving rise to a claim;
• Information about the nature of your business and commercial assets;
• Information is obtained through our use of cookies. You can find out more about this in our cookies policy;
• Your marketing preferences;
• Sensitive Personal Data;
• Details of your current or former physical or mental health;
• Details concerning sexual life or sexual orientation, for example marital status

We respect the privacy of children. We do not knowingly collect names, email addresses or any other Personal Data from children except where this is required to register them as beneficiaries in relation to a policy or other products. We do not knowingly market to children nor do we allow children under 18 to purchase any of our products or services.

Below are the reasons why we process your Personal Data and the applicable circumstances when we will do so:

• Processing is necessary in order for us to provide your insurance policy and services, such as assessing your application and setting you up as a policyholder or investments account holder, beneficiary, administering and managing your insurance policy or benefits, providing all related services, providing a quote, handling and paying claims and communicating with you. In these circumstances, if you do not provide such information, we will be unable to offer you a policy or process your claim.
• We may use Cloud storage solutions within or outside Nigeria which are chosen to ensure efficiency and improved performance through up-to-date technology.
• Where we have a legal or regulatory obligation to use such Personal Data, for example, when our regulators such as the National Insurance Commission (NAICOM), the National Health Insurance Scheme (NHIS), and our data protection regulator, the National Information Technology Development Agency (NITDA) wish us to maintain certain records of any dealings with you.
• To comply with: local or foreign laws, regulations, voluntary codes, directives, judgments or court orders, and agreements between Mycovergenius and any authority, regulator, or enforcement agency; policies (including the MyCoverGenius Ltd's policies), good practice, government sanctions or embargoes, reporting requirements under financial transactions legislation and demands or requests of any authority, regulator, tribunal, enforcement agencies including but not limited to the Nigerian Financial Intelligence Unit (“NFIU”) and the Economic and Financial Crimes Commission (“EFCC”), or exchange bodies;
• Where we need to use your Personal Data to establish, exercise or defend our legal rights, for example when we are faced with any legal claims or where we want to pursue any legal claims ourselves;
• Where we need to use your Personal Data for reasons of substantial public interest, such as investigating fraudulent claims and carrying out fraud, credit and anti-money laundering checks, identification checks;
• Where we need to communicate with you to resolve complaints or other issues;
• Where we have a specific legal exemption to process sensitive Personal Data for insurance purposes. This exemption applies where we need to process your Personal Data as an essential part of the insurance coverage, for example, health data.
• Where you have provided your consent to our use of your Personal Data. We will usually only ask for your consent concerning processing your sensitive Personal Data (such as health data) or when providing marketing information to you (including information about other products and services). This will be made clear when you provide your Personal Data. If we ask for your consent, we will explain why it is necessary. Without your consent in some circumstances, we may not be able to provide you with cover under the policy or handle claims or you may not be able to benefit from some of our services. Where you provide sensitive Personal Data about a third party, we may ask you to confirm and provide proof that the third party has provided his or her consent for you to act on their behalf;
• Where we have an appropriate legitimate business need to use your Data such as maintaining our business records, and developing and improving our products and services, all whilst ensuring that such business need does not interfere with your rights and freedoms and does not cause you any harm.
• Where we need to use your Sensitive Personal Data such as health data because it is necessary for your vital interests, this being a life or death matter.

We might share your Data with two types of organizations – companies inside MyCoverGenius Ltd., and other third parties outside the Group. For further details of disclosures, please see below. We will not share any of your Data other than for the purposes described in this Privacy Policy. If we share anything outside the Group, it will be kept strictly confidential and will only be used for reasons that we have described.

To provide our services your personal information may be shared with other companies in MyCoverGenius Ltd. Your personal information might be shared for our general business administration, efficiency and accuracy purposes or the prevention and detection of fraud.

We also disclose your Personal Data to the third parties listed below for the purposes described in this Privacy Policy. This might include

• Your relatives or, guardians (on your behalf where you are incapacitated or unable) or other people or organizations associated with you such as your insurance broker or your lawyer
• Where you have named an alternative contact (such as a relative) to speak with us on your behalf. Once you have told us your alternative contact, this person will be able to discuss all aspects of your policy (including claims and cancellation) with us and make changes on your behalf;
• A Mycovergenius recommended garage or panel beater or your designated garage or panel beater;
• Our insurance partners such as Underwriters;
• Other third parties who assist in the administration of insurance policies such as another Insurance Company if there has been an accident which requires a claim to or from that Insurance Company;
• Fraud detection agencies and other third parties who operate and maintain fraud detection registers;
• The police and other third parties or law enforcement agencies where reasonably necessary for the prevention or detection of crime;
• Nigerian Insurance Industry Database
• The police and other third parties or law enforcement agencies where reasonably necessary for the prevention or detection of crime;
• Nigerian Insurance Industry Database
• Our third-party services providers such as IT suppliers, actuaries, auditors, lawyers, marketing agencies, research specialists, document management providers and tax advisers;
• Other suppliers, providers of goods and services associated with this insurance and/or to enable us to deal with any claims you make;
• Customer satisfaction survey providers;
• Financial organizations and advisers;
• Overseas assistance companies;
• Loss Adjusters;
• Emergency Assistance Companies;
• Your healthcare practitioner;
• Other insurers for the purpose of obtaining a claim contribution where there is another insurance covering the same loss, damage, expense or liability.
• Selected third parties in connection with the sale, transfer or disposal of our products

We may also disclose your personal information to other third parties where:

• We are required or permitted to do so by law or by regulatory bodies such as where there is a court order, statutory obligation or Prudential Regulatory Authority / Financial Conduct Authority; or
• We believe that such disclosure is necessary in order to assist in the prevention or detection of any criminal action (including fraud) or is otherwise in the overriding public interest, or
• Exemptions under the data protection legislation allow us to do so.

Some of the recipients and technical solutions set out above may be in other countries outside Nigeria. Where we make a transfer of your Personal Data outside of Nigeria, in all cases where Personal Data is transferred to a country which is deemed not to have the same standards of protection for personal data as Nigeria, Mycovergenius will ensure appropriate safeguards have been implemented to ensure that your Personal Data is protected where standards are not the same or similar to those standards within Nigeria. Such steps may include placing the party we are transferring information to under contractual obligations to protect it to adequate standards. Occasionally, there may also be some circumstances where we are required to transfer your Personal Data outside of Nigeria and we shall rely on the basis of processing it for being necessary for the performance of your contract; for example, where you have a travel insurance policy and we need to contact you when you are outside Nigeria.

We keep your Personal Data for as long as reasonably necessary to fulfil the relevant purposes set out in this Privacy Policy and in order to comply with our legal and regulatory obligations. The length of time we retain Personal Data for depends on the purposes for which we collect and use it and/or as required to comply with applicable laws and to establish, exercise or defend our legal rights.

You can ask us to do various things with your Personal Data. For example, at any time you can ask us for a copy of your Personal Data, ask us to correct mistakes, change the way we use your information, or even delete it. We will either do what you have asked or explain why we cannot - usually because of a legal or regulatory issue.

You have the following rights in relation to our use of your Personal Data.

• The right to access your Personal Data: You are entitled to a copy of the Personal Data we hold about you and certain details of how we use it.
• The right to rectification: If you believe your Personal Data is inaccurate or incomplete, you can request that we update it.
• The right to erasure: Under certain circumstances, you can ask us to erase your Personal Data.
• Right to restriction of processing: You can ask us to stop using your Personal Data in specific situations.
• Right to data portability: You can request that we transfer your Personal Data to another provider.
• The right to withdraw consent: Where we rely on your consent, you can withdraw it at any time.

To the extent required by applicable law, you may be able to request that we inform you about the Personal Data we maintain about you and, where appropriate, withdraw your consent for certain data processing activity and/or request that we update, correct, delete, and/or stop processing your Personal Data.

When permitted by law, we may charge an appropriate fee to cover the costs of responding to the request.

We take reasonable measures to protect Personal Data from unauthorized access, disclosure, alteration, or destruction.

Our employees are trained in data protection and security to respect and preserve confidentiality, integrity and availability of information held by us.

In the event of a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal information, we shall report the details of the breach to NITDA within 72 hours.

We may share information with other Mycovergenius subsidiaries in order to inform you of other products and services that may be of interest to you or members of your family, but we will only do this where you have provided your consent.

If you wish to unsubscribe from emails sent by us, you may do so at any time by following the unsubscribe instructions in all emails.

We would like to keep you informed, from time to time about relevant products and services through various communication channels.

From time to time, we may run specific marketing campaigns through social media and digital advertising that you may see which are based on general demographics and interests.

We may also share information that we collect about you for marketing within MyCoverGenius Ltd. If you do not want to receive such promotional materials from us, you can opt out at any time by sending an email to [email protected] .

Please note that we may retain any data provided to us on our websites for a limited period, even if you do not complete your quote.

If you would like any more information about the way we use your information, or if you wish to exercise your rights, please contact us using the details below: