@svg('intro')1. Introduction

Mutual Global Insurance Broking Pvt. Ltd. (“we”, “our”, “us”) is committed to maintaining the confidentiality, integrity, and security of personal data entrusted to us. We respect your privacy and handle all personal information in accordance with applicable laws, including:

• The Digital Personal Data Protection Act, 2023 (India)
• IRDAI Guidelines on Information and Cyber Security for Insurance Intermediaries (2023)
• Any other applicable data protection and regulatory requirements

By using our website www.mutualglobal.com, our mobile application, or our services, you agree to this Privacy Policy.

@svg('collect')2. Information We Collect

We collect and process the following categories of data to provide insurance broking and related services:

a. Personal Information

• Full name, address, contact number, and email ID
• Date of birth, gender, and KYC documents (PAN, Aadhaar, etc.)
• Policy, proposal, premium, and claim details
• Financial or banking details for premium payments

b. Non-Personal Information

• IP address, browser type, and device identifiers
• Website usage statistics, page visits, and clickstream data

c. Mobile App Information

• Name, email address, phone number, user ID, employee ID, customer ID, and login details
• Policy, proposal, premium, claim, service request, and insurance-related details
• Documents, images, or files uploaded by users for policy, claim, KYC, or service-related purposes
• Device information, app usage details, crash logs, and diagnostics
• Precise location data, where required for app features such as attendance, tracking, field visit verification, nearby services, or other location-based functionality
• Physical activity and sensor data, such as step count or activity-related information, where required for wellness, activity tracking, or step-count features within the app

Location data and physical activity data are collected only when required for the relevant app feature and with user permission. We use this data only to provide app functionality such as attendance, tracking, field visit verification, location-based services, wellness features, activity tracking, and step-count features. We do not sell location data or physical activity data.

We collect information directly from you, from insurers or TPAs, and through secure digital channels as part of legitimate business operations.

@svg('purpose')3. Purpose of Data Collection

We collect and use your data for:

• Providing insurance broking, advisory, and claims management services
• Processing quotations, proposals, renewals, and endorsements
• Communicating policy updates and regulatory information
• Fulfilling legal, regulatory, and IRDAI compliance obligations
• Conducting internal audits, analytics, and service improvement
• Preventing fraud and ensuring information security
• Providing mobile app login, user profile, service request, and support features
• Enabling attendance, tracking, field visit verification, and location-based services where applicable
• Enabling wellness, activity tracking, and step-count features where applicable
• Processing uploaded documents, images, KYC details, claim documents, and policy-related files
• Monitoring app performance, troubleshooting issues, and improving app stability

We will not use your personal data for purposes other than those specified unless required by law or with your consent.

@svg('shield')4. Data Protection and Compliance

We are a licensed Insurance Broker regulated by the IRDAI, and we comply with its data protection directives. Key compliance principles:

• Data collected is limited to what is necessary for service delivery.
• Data is processed lawfully, fairly, and transparently.
• Access to data is granted strictly on a need-to-know basis.
• Confidentiality and integrity of policyholder data are maintained at all times.
• Any data shared with insurers, TPAs, or service partners is done under contractual safeguards and for authorized purposes only.

@svg('lock')5. Data Security

We adopt stringent technical and organizational controls in line with IRDAI’s Cyber Security Framework, including:

• Data encryption in transit and at rest (SSL/TLS)
• Firewalls, intrusion detection, and vulnerability management systems
• Multi-factor authentication and role-based access control
• Regular IT and security audits
• Employee background checks and confidentiality training
• Business continuity and disaster recovery protocols

In the event of a suspected or confirmed data breach, we will follow the IRDAI’s incident reporting procedure and notify affected parties as required.

@svg('cookie')6. Cookies Policy

Our website uses cookies and similar technologies to improve your browsing experience and website performance.

Types of cookies we use:

• Essential Cookies: Required for core site functionality and session security.
• Performance & Analytics Cookies: Used to understand visitor behavior and improve website usability.
• Functional Cookies: Remember user preferences and form inputs.

You can manage or disable cookies through your browser settings. Disabling cookies may limit some features of our website.

@svg('chart')7. Data Analytics

We use analytics tools (such as Google Analytics and LinkedIn Insight Tag) to measure website traffic and improve content relevance. These tools collect anonymized data like page visits, session duration, and device type. We do not use website analytics to identify or track individual users.

For our mobile application, we may collect app usage details, crash logs, and diagnostics to monitor app performance, troubleshoot issues, improve stability, and enhance user experience.

@svg('share')8. Data Sharing and Third-Party Disclosure

We may share your information with:

• Insurance companies, TPAs, surveyors, and reinsurers to process policies and claims
• Regulatory or government authorities (IRDAI, FIU-IND, etc.) where disclosure is legally required
• Technology vendors (cloud storage, communication tools, analytics) under strict confidentiality agreements

All partners and vendors are required to implement robust data protection and cybersecurity measures consistent with IRDAI guidelines. For mobile app services, user data including contact details, policy information, uploaded documents, location data, physical activity data, step-count data, and diagnostics may be shared with authorized insurers, TPAs, service providers, technology vendors, or regulatory authorities only when required to provide app features, process insurance services, support claims, meet compliance requirements, or ensure security.

We do not sell, rent, or trade your personal data, location data, physical activity data, or step-count data.

@svg('user')9. Your Rights

You have the right to:

• Access and obtain a copy of your personal information
• Request correction or deletion of inaccurate or obsolete data
• Withdraw consent for processing (where applicable)
• Lodge a grievance if you believe your personal data has been mishandled

Requests can be sent to support@mutualglobal.com. We will respond in accordance with applicable laws and within prescribed timelines.

@svg('time')10. Data Retention

Personal data is retained only for as long as necessary to:

• Provide services or complete a transaction
• Fulfil legal or regulatory obligations (e.g., IRDAI record-keeping requirements)
• Defend legal claims or audits

After the retention period, personal data is securely deleted or anonymized.

App accounts may be created after verifying eligible policyholder, employee, customer, or service-related details against insurer records, service partner records, or Mutual Global's internal database. If the associated policy expires, the user is no longer eligible, or the account remains unused for an extended period, the app account may be marked inactive.

Inactive app accounts may be deleted after 6 months of inactivity, subject to applicable insurance, legal, regulatory, audit, fraud prevention, dispute resolution, and compliance retention requirements.

Users may also request deletion of their Insura app account and associated data through our Account Deletion Request page.

@svg('link')11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the content, privacy, or security practices of these sites. Please review their privacy policies before sharing information.

@svg('refresh')12. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in legal, regulatory, app functionality, or business requirements. All updates will be published on this page with a revised “Last Updated” date. Continued use of our website, mobile application, or services constitutes acceptance of the updated policy.