Privacy Policy

What personal information we collect from you (“discloser”) depends on your relationship with us at the time of collection, i.e. insured, claimant, or prospect, as well as your request – the information of which may include the following:

1. Personal Details
   This may include name, date of birth, age, gender, marital status, and occupation.
2. Contact Information
   This may include address, phone number, telephone/mobile number, email address, and social media.
3. Financial Information
   This may include your bank account number, credit history, income and other financial details.
4. Health Information
   This may include, height, weight, medical record, other insurance policies held, hospitalization in the past, smoking habits, pre-existing conditions, family medical history, and other information you have given to us related to your or your family medical history.
5. Vehicle Information
   This may include vehicle brand, vehicle type, vehicle production’s year, vehicle's accessories, engine number, chassis number, vehicle identification number (surat tanda nomor kendaraan or STNK) or its equivalent, certificate of vehicle ownership (buku pemilik kendaraan bermotor or BPKB) or its equivalent, driver's driving license (surat izin mengemudi or SIM) or its equivalent, and other details.
6. Other Information
   Information that supports the provision of optimal services, including information required by regulations other than those we mentioned above.

Your personal information will be collected and stored, directly or indirectly, when:

1. You enter our Website;
2. You disclose to us;
3. Any persons related to you or appointed by you (including but not limited to your spouse or family member, a person whose name is under the same policy as yours, and any other persons under the purpose of validation of application, claim, and compensation) discloses to us, and
4. Relevant third parties (including but not limited to our insurer, other insurers and financial institutions, regulatory bodies e.g. Financial Services Authority of the Republic of Indonesia (Otoritas Jasa Keuangan or OJK), Directorate General of Tax of the Ministry of Finance of the Republic of Indonesia (DGT), Directorate General of Population and Civil Registration of the Ministry of Home Affairs of the Republic of Indonesia (DGPCR) , Indonesian Financial Transaction Reports and Analysis Center (Pusat Pelaporan dan Analisis Transaksi Keuangan or PPATK), Indonesian National Police (Kepolisian Negara Republik Indonesia or POLRI), and other reliable sources e.g. Indonesian General Insurance Association (Asosiasi Asuransi Umum Indonesia or AAUI) or Indonesian Life Insurance Association (Asosiasi Asuransi Jiwa Indonesia or AAJI)). In the case of (c), when the information concerning about other persons (“data subject”) than the discloser is given to us, it is the sole responsibility of the discloser to ask for a consent from and notify the data subject of the disclosure of his/her personal information and the terms and conditions of this Privacy Policy.
5. You perform vehicle inspection with us.

Your personal information may be collected and used for the following purposes:

1. To provide you with our services and products which shall include performing our relevant contractual or regulatory obligations
2. To enhance our existing services and products and develop new services and products
3. To communicate with you about our existing or up-coming services or products, including but not limited to, terms and conditions, promotion, activities, and advertisement
4. For Website administration and business operation and
5. To be a reference that we could rely on, for the purpose of fulfilling obligations that we are subject to, by collecting your personal data as per the requirements under the law such as the applicable insurance laws, personal data protection laws and other related laws.

We will retain your personal information as long as it is necessary for the purposes of collection and use, unless required or permitted by applicable law. For most of the cases, your personal information will be retained for five years after the date of termination or cancellation of your policy, whereas for financial information related to you, such as the amount of payment of premiums, claims and other ancillary payments, as per the applicable laws and regulations on Corporate Documents, will be retained for at least ten years after the date of termination or cancellation of your policy.

In order to perform our contractual obligations towards you or our regulatory obligations towards regulators and authorities, your personal information may be disclosed, and/or disseminated to third parties for the relevant mentioned purposes only. These third parties may include insurers, reinsurers, our business partners, financial institutions, regulators e.g. OJK, authorities e.g. DGT, PPATK, POLRI, or other relevant government institutions, other service providers e.g. data storage service providers, call centre service providers, First Notice of Loss service providers, payment system provider or payment gateway provider, and repair shops, hospitals, health clinics, other health service providers, repair garage, claim system provider, and salvage buyer.

Moreover, in order to improve your experience in using our Website and traffic optimization during access by users, we will also track your behaviour using analytical tools. These analytical tools will be provided by third-party providers that we have engaged, and we hereby reserve the right to add, stop or change existing providers to other third-party analytical tools providers. The information that we have gathered for this purpose will be anonym and shall not be identifiable to you. For our business operation, where our legitimate interest is not less important that the data subject’s fundamental rights, your personal information may be disclosed and/or disseminated to our group companies and third parties such as external auditors, advisors, survey/data analytics service providers, and investors.

In any case, your personal information will not be disclosed and/or disseminated to any other persons other than the cases of the above two paragraphs, without your consent, except for the following cases:

1. Providing that it is required by any applicable law;
2. Provided that it is necessary for preventing emergencies or protecting others from danger;
3. For the public interest.

In case where we disclose and/or disseminate your personal information to any third parties, we shall notify the said third parties of its confidential nature and their obligations to restrict the use of such information to any person involved for the permitted purposes as necessary only, and to handle the information appropriately in accordance with this Privacy Policy and the applicable laws and regulations in Indonesia concerning personal data protection.

In order to provide you with our services, especially for documentation, your personal information will be stored in Indonesia, whereas other non-personal information will be stored outside Indonesia with the encryption and tokenization method mentioned above. None of your personal information with direct reference to you will be stored abroad. In any case, we will take any necessary steps to ensure that your personal information is stored and secured appropriately.

Subject to the applicable laws and regulations in Indonesia concerning personal data protection, by using our Website, receiving our services and/or purchasing our products, the protection of your personal data will cover the following process.

1. Procurement and Collection
   In accordance with the applicable laws and regulations on personal data protection applicable in Indonesia, procurement and collection of personal data will be carried out by respecting your rights as the owner of the personal data, which will be carried out by providing options for confidentiality or non-confidentiality of your personal data, as well as other provision of options to change, add, or update the personal data. In this matter, procurement and collection of your personal data by us will be based on your consent, or according to the applicable laws and regulations.
2. Processing and Analyzing
   In accordance with the applicable laws and regulations on personal data protection applicable in Indonesia, processing and analyzing or your personal data will only cover matters that we have clearly stated when procuring or collecting your personal data. This will be based on your consent.
3. Storing
   In accordance with the applicable laws and regulations on personal data protection applicable in Indonesia, your personal data will be stored at least 5 (five) years since you are no longer becoming a user in our website. As mentioned above, your personal data will be stored in data center and data recovery center placed within the territory of the Republic of Indonesia. Other non-personal data, may be stored outside the territory of the Republic of Indonesia, by using tokenization and encryption so that the data that we stored outside the territory of the Republic of Indonesia will not be identifiable to you.
4. Displaying, publishing, transmitting, disseminating, and/or access opening
   In accordance with the applicable laws and regulations on personal data protection applicable in Indonesia, activity of displaying, publishing, transmitting, disseminating, and/or access opening of your personal data, will be done based on your consent.
5. Destroying
   In accordance with the applicable laws and regulations on personal data protection applicable in Indonesia, your personal data will be destroyed when it has passed the Storing provision that we mention above, or it you request the destruction of your data.

By using Our Services, You declare and guarantee that all data and personal information provided is up-to-date, true, accurate, not misleading, and given in good faith under applicable and valid legal rights.

You are prohibited from uploading or publishing content that is protected by copyright, trademarks, or other intellectual property rights of third parties without written permission from the rightful owner. Any losses arising from such rights violations or the provision of unauthorized information are entirely the responsibility of the User.

You agree to indemnify and hold harmless We and our affiliated companies (including directors, officers, employees, and agents) from any claims, demands, losses, or legal costs arising from:

1. Violation of this Privacy Policy;
2. Your activities related to the use of the Services, Website, or Application; or
3. Information provided by You to Us through the Service platform.

By using the Services we provide, you acknowledge and agree that we are not responsible for any losses arising from or related to your use or inability to use the Services, Website, App, or any content and links available within them. This includes, but is not limited to: 

1. losses caused by errors, negligence, interruptions, defects, delays in operation or transmission, computer viruses, or system or network failures,
2. as well as negligence or behavior of users or other third parties. Furthermore, we are not liable for indirect, special, incidental, exemplary, or consequential damages, even if we have been informed of the possibility of such losses.
3. The exchange and sharing of Personal Data done by the User themselves, including between Users; included in this provision are any and all mistakes made by the User that result in the leakage of Personal Data;
4. the authenticity, genuineness, truth, accuracy, and completeness of Personal Data entered by the User through the Site;

By using the services we provide, you are considered to have given consent to waive any claims, losses, demands, and lawsuits that may arise from the acquisition, storage, use, utilization, and/or disclosure of data, including Personal Data, if done not in accordance with this Privacy Policy.

We are not responsible for any Personal Data leaks that occur due to and/or during Force Majeure events. Force Majeure includes, among others: (i) strikes, company closures, and other industrial actions; (ii) riots, civil unrest, invasions, terrorist attacks or threats, war (declared or not) or threats of war preparation; (iii) fires, explosions, storms, floods, earthquakes, epidemics, or other natural disasters; (iv) unavailability or disruptions of telecommunications, IT, and/or electricity networks; (v) system failures caused by third parties occurring beyond our control; (vi) the malfunctioning of banking systems and/or networks; (vii) actions, decisions, laws, regulations, or restrictions issued by the government.