BIC Customer Data Privacy Statement
At Botswana Insurance Company (BIC) we are committed to your privacy and take protection of your personal data seriously.
This Data Privacy Statement outlines how we collect, use, store, and protect your personal information in compliance with applicable data protection laws. Our comprehensive data privacy statement is available on our company website, however, you may also request a copy of the data privacy policy from any of our offices.
Please take note that by using our services, you agree to the collection and use of information in accordance with this Data Privacy Statement.
1. Collection of Personal Data:
We collect personal data from you when you apply for insurance coverage or submit a claim. The types of personal data we collect may include, but are not limited to the following:
a) Personal Identification Information: name, contact details, date of birth, ID/Passport numbers, financial information.
b) Insurance Information: Details related to insurance policies you hold, including claims history, policy coverage, premiums and beneficiaries.
c) Payment Information: Billing details, payment history and bank account details (where applicable)
d) Health and Medical Information: Only when necessary for underwriting, claims processing or compliance with legal requirements.
2. Use of Personal Data: Your personal data will be used for the following purposes:
a) Assessing and underwriting insurance policies.
b) Managing and administering insurance policies.
c) Collection of payments
d) Assessing and processing amendments.
e) Placing reinsurance covers.
f) Processing claims and investigating fraud.
g) Communicating with you regarding your insurance coverage.
h) Providing customer support and assistance.
i) Complying with legal and regulatory obligations, including applicable prudential rules and codes of conduct in our industry.
j) Analysing our customer data.
k) Conducting Anti-Money Laundering / Counter Terrorism Financing and Counter-Proliferation Financing (AML/CFT & CPF) due diligence exercises and screening, including processing KYC information.
l) Any purposes related to the above.
3. Data Sharing
Your personal data may be shared with third parties as follows:
a) Insurance underwriters and reinsurers
b) Claims adjusters and investigators
c) Third Party Service providers who assist us in delivering insurance services
d) Legal and regulatory authorities as required by law.
3.1. We may also share your personal information with service providers outside Botswana for storage or further processing on BIC’s behalf. We will ensure that the transborder transfer of personal information is done in line with the provisions of the Data Protection Act.
3.2.BIC may, subject to compliance with applicable data protection laws, share your personal information with its subsidiaries and/or associates, including its parent company Botswana Insurance Holdings Limited (“BIHL”) and its subsidiaries and associates (collectively “the BIHL Group”) in connection with services rendered by the Group.
4. CCTV Monitoring
4.1. For security and safety purposes, we use CCTV surveillance in certain areas of our premises. CCTV cameras may record images of individuals who enter these areas. The footage is used solely for the following purpose:
- Ensuring the safety and security of individuals on our premises.
- Preventing, detecting, and investigating incidents of crime or misconduct.
- Monitoring and protecting company property and assets.
5. Direct Marketing
5.1. BIC may send you information about its products and other services and/or products and/or services offered by its subsidiaries and/or associates within the BIHL Group to your contacts shared with BIC, which may include text messages, emails, and other related platforms.
5.2.If you do not wish to receive such information, you have the right to opt out of receiving such messages at no cost to you by contacting BIC at any of our offices or through any other platform availed by BIC for such purpose.
6. Data Security
6.1. We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. We restrict access to your personal data to authorized personnel only and regularly review our security procedures to ensure the ongoing confidentiality and integrity of your information.
7. Data Retention:
7.1. We retain your personal data for as long as necessary to fulfill the purposes for which it was collected, as well as to comply with legal and regulatory requirements. When personal data is no longer needed, we will securely dispose of or anonymize it.
8. Your Rights
8.1. You have certain rights regarding your personal data, including the right to:
a. Right to Access Information about Personal Data: The right to obtain confirmation of whether personal data is being processed and, if so, to access that data.
b. Right to Withdraw Consent: The right to withdraw consent given for the processing of personal data at any time.
c. Right to Rectification: The right to request the correction or amendment of inaccurate or incomplete personal data.
d. Right to Erasure: The right to request the deletion or removal of personal data under certain circumstances. Please note that this right is subject to statutory limitations.
e. Right to Object Direct Marketing: The right to stop their data being used for direct marketing.
f. Right to Restriction of Processing of Data: The right to obtain from the data controller restriction of processing under certain circumstances.
g. Right to Data Portability: The right to receive personal data from a data controller in a structured, commonly used, machine-readable format and to transmit it to another data controller, provided that the processing is based on consent or contract and is conducted by automated means, with direct transmission where technically feasible.
8.2.Pease note that the above rights are subject to legal and regulatory requirements.
8.3.If you have any questions relating to the handling of your personal data or if you would like to invoke any of your rights under applicable privacy legislation, please contact our Data Protection Officer as follows:
Data Protection Officer (DPO): Ms Aobakwe Kwape
Email: info@bstiua.co.bw
Phone Number: +267 73886606
Postal Address: P O Box 715, Gaborone
9. Changes to the Data Protection Statement:
9.1. We may update this Data Protection Statement from time to time to reflect changes in our data protection practices as and when changes are required and in line with changing data protection laws and regulations. We encourage you to review this statement periodically for any update.
