1. Introduction

Alliance Africa General Insurance Limited ("Alliance", "we", "us") is committed to protecting your personal data in compliance with the Data Protection and Privacy Act, 2019 of Uganda. This notice explains how we collect, use, store and protect your information.

2. Who We Are: Data Controller, Data Processor and Data Collector

Alliance Africa General Insurance Limited
Email: info@allianceug.com
Phone: +256 392 177 281/2
Address: 2nd Floor, Wings A & B, Plot 9, Yusuf Lule Road, Kampala

We are registered as a Data Controller, Data Processor and Data Collector with the Personal Data Protection Office (PDPO), NITAU Registration Number PDPO-202609-15366.

3. What Personal Data We Collect

We collect data necessary to provide and administer our insurance services, including:

• Personal Identifiers: Name, NIN, Passport, Date of Birth, Gender and Signature.
• Contact Data: Phone number, Email address and Physical address.
• Financial Data: Bank details, Mobile Money number, Salary information, Premium payments and Claims payouts.
• Sensitive Personal Data: Where applicable and where there is an appropriate legal basis, this may include health/medical records for GPA/WC claims,Biometrics, Criminal records for fraud checks and Location data from accident scenes.

4. How We Collect Your Data

We may collect your personal data from:

• Directly from you through Proposal Forms, KYC documents, Claims Forms and our website.
• Your employer for Group Insurance Schemes.
• Brokers, Agents and Bancassurance partners.
• Service providers such as garages, assessors and investigators.
• Relevant authorities and institutions, including Police and URA, where applicable.
• CCTV and our Visitor Registration Book at our premises.

5. Why We Use Your Data – Lawful Basis and Purpose

Under Section 7 of the Data Protection and Privacy Act, 2019, we process personal data on the following lawful bases:

• Contract: To underwrite and issue policies, collect premiums and process and settle claims.
• Legal Obligation: To comply with requirements of the Insurance Regulatory Authority (IRA), Uganda Revenue Authority (URA), Financial Intelligence Authority (FIA), courts and other competent authorities.
• Legitimate Interest: To prevent and detect fraud, improve our services and, where permitted, conduct direct marketing subject to applicable opt-out requirements.
• Consent: Where required, including for marketing communications, WhatsApp Channel updates and use of your image or testimonial. You may withdraw your consent at any time, subject to applicable legal limitations.

6. Who We Share Your Data With

We do not sell your personal data. We may share your personal data only where necessary and lawful, including with:

• Service providers and third-party processors subject to appropriate contractual obligations.
• Regulatory and government authorities where required by law.
• Affiliates within the Alliance Insurance Group where necessary for legitimate business purposes.
• Other third parties where required or permitted for legitimate business purposes and in accordance with applicable data protection requirements.

7. International Data Transfers

Your personal data is primarily stored in Uganda. Where personal data is transferred outside Uganda, for example to reinsurers or cloud service providers, we will take appropriate measures to ensure that the transfer complies with applicable data protection requirements, including ensuring adequate protection or obtaining consent where required under the Data Protection and Privacy Act, 2019.

8. Data Security and Retention

We maintain appropriate technical and organisational measures designed to protect your personal data against unauthorised access, loss, misuse, alteration, disclosure or destruction.

Data Retention: We may retain your personal data only for as long as reasonably necessary for the purposes for which the personal data is processed and thereafter in accordance with the Company's legal and regulatory obligations, including but not limited to the Company's records retention policy.

9. Your Rights Under the Data Protection and Privacy Act, 2019

Subject to applicable legal limitations and exceptions, you may have the right to:

1. Be informed about the processing of your personal data.
2. Access your personal data through an official communication to the Company.
3. Request correction or rectification of inaccurate or incomplete personal data.
4. Request the erasure or blocking of personal data where applicable.
5. Object to certain processing activities, including direct marketing.
6. Request data portability where applicable.
7. Not be subject to certain decisions based solely on automated processing, where applicable.
8. Lodge a complaint concerning the processing of your personal data.

Please note that these rights are not absolute and may be limited by applicable legal exceptions.

For questions or to exercise your data protection rights, please contact our Data Protection Officer:

Email: info@allianceug.com

10. Complaints

If you are not satisfied with our response to your data protection concern, you may lodge a complaint with:

11. Children's Data

We do not knowingly collect personal data from children under the age of 18 without appropriate parental or guardian consent, where such consent is required by law.

12. Marketing

We may send you insurance product information, updates and other marketing communications through SMS, Email and our WhatsApp Channels where permitted by applicable law.

You may opt out of marketing communications at any time by following the unsubscribe or opt-out instructions provided in the communication or by contacting us using the details provided in this notice.

13. Changes to This Notice

We may update this Privacy Notice from time to time to reflect changes in our practices, legal requirements or regulatory requirements.

The latest version will be posted on our website: www.allianceug.com and may also be made available at our offices.