Privacy Policy

My Insure Bank ("MIB", "we", "us") is an insurance marketplace operated as a product of PRA Insurance Brokers Limited, an insurance broker licensed and regulated by the National Insurance Commission (NAICOM), Registration No. RBC-1015, and a member of the Nigerian Council of Registered Insurance Brokers. PRA Insurance Brokers Limited is the data controller responsible for the personal data described in this policy.

This policy explains what personal data we collect through myinsurebank.com and the MIB mobile app, why we collect it, who we share it with, and the rights you have under the Nigeria Data Protection Act, 2023 (the "NDPA") and the regulations and frameworks issued by the Nigeria Data Protection Commission (NDPC).

Depending on how you use MIB, we may collect:

• Identity and contact data — your name, email address, phone number, date of birth, gender and residential or business address.
• Risk and quote data — details of the person, vehicle, device, property, journey or health profile you ask us to insure, including vehicle registration, device IMEI/serial, sums insured and prior claims history.
• Policy and claims data — the policies you buy or renew, certificates, claims you file and supporting documents you upload.
• Verification data — where a product or regulation requires it, identifiers such as your NIN, BVN or a government-issued ID for Know-Your-Customer (KYC) checks.
• Payment data — transactions are processed by our licensed payment partner (Paystack). We receive a payment reference and status; we do not store your full card number.
• Technical and usage data — device and browser information, IP address, and cookies and similar technologies (see our Cookies Policy).

We process your personal data to:

• generate quotes and compare cover from our partner insurers;
• arrange, place, issue, renew and administer your insurance policies as your broker;
• process payments and send you certificates, receipts and renewal reminders;
• handle and progress claims with the relevant insurer;
• verify your identity and meet our KYC, anti-fraud and anti-money-laundering obligations;
• provide customer support and respond to your enquiries;
• comply with NAICOM, NDPC and other legal and regulatory requirements; and
• improve and secure our services.

Our lawful bases under the NDPA include performance of a contract with you, compliance with a legal obligation, your consent (which you may withdraw at any time), and our legitimate interests in operating a secure, lawful marketplace.

As an insurance broker, we share your data with the underwriters and parties needed to arrange your cover. We share data with:

• Insurers and underwriters — the NAICOM-licensed insurance companies you request a quote from or buy a policy with, so they can rate the risk, issue cover and handle claims;
• Payment and verification providers — Paystack and KYC/ID verification services;
• Service providers — hosting, communications and analytics partners who process data on our behalf under contract; and
• Regulators and authorities — where we are required to disclose data by law or to NAICOM, the NDPC or law enforcement.

We do not sell your personal data.

We retain your personal data for as long as you hold an account or policy with us, and afterwards for the period required to meet our legal, regulatory, tax and accounting obligations and to resolve disputes. Insurance and broking records are generally retained for a minimum of six years after a policy ends, or longer where the law or a regulator requires. When data is no longer needed, we securely delete or anonymise it.

We use appropriate technical and organisational measures — including encryption in transit (SSL/TLS), access controls and secure hosting — to protect your data against unauthorised access, loss or misuse. No method of transmission or storage is completely secure, but we work to safeguard your information and to notify you and the NDPC of any breach as required by the NDPA.

Subject to the NDPA, you have the right to:

• access the personal data we hold about you and request a copy;
• ask us to correct inaccurate or incomplete data;
• ask us to delete your data where there is no overriding legal reason to keep it;
• object to or restrict certain processing, and withdraw consent at any time;
• request portability of data you provided to us; and
• lodge a complaint with the Nigeria Data Protection Commission.

To exercise any of these rights, contact us at support@pra.insure. We may need to verify your identity before acting on a request.

Deleting your account and data. You can request deletion of your account and the personal data linked to it from our account deletion page, or by emailing support@pra.insure with the subject "Delete my account". We complete deletion within 30 days, except for records that insurance or financial regulations require us to retain (such as policies you have held and related transactions), which are removed once the statutory retention period ends.

We may update this policy from time to time. Material changes will be posted on this page with a revised "last updated" date. Please review it periodically.

For privacy questions or to reach our data protection contact, write to PRA Insurance Brokers Limited, 37 Sunmola Street, Mende, Maryland, Lagos 100211, Nigeria, or email support@pra.insure.