In this Policy, unless the context otherwise requires (any changes/modifications made by Law or amendments thereof shall be deemed to have been automatically incorporated in this policy including the change of definition or addition of new definitions etc).
3.1 “Affiliates” shall mean with respect to Us, any entity directly or indirectly controlling or controlled by or under direct or indirect common control with such Party. For the purposes of this definition, “control”, “controlled” or “controlling” mean with respect to any entity, any circumstance in which such entity is controlled by another entity by virtue of the latter entity controlling the composition of the Board of Directors or owning the largest or controlling percentage of the voting securities of such entity or by virtue of any contractual arrangements or otherwise.
3.2 “Aadhaar Regulations”: shall include Aadhaar (Targeted Delivery of Financial and other subsidies, Benefits and Services) Act, 2016, Aadhaar and other laws (Amendment) Act, 2019, Aadhaar (Authentication) Regulations 2016, Aadhaar (Data Security) Regulations, 2016 and other applicable regulations issued by Unique Identification Authority of India from time to time;
3.3 “Child”: means an individual who has not completed the age of 18 (eighteen) years;
3.4 "Data": means a representation of information, knowledge, facts, concepts, opinions or instructions, which are being prepared or have been prepared in a formalized manner suitable for communication or interpretation or is intended to be Processed, is being Processed, or has been Processed by human being or in an automated form in a computer, computer resource, computer system or computer network, and may be in any form (including computer print outs magnetic or optical storage media, punched cards, punched tapes) or stored internally in the memory of the computer, and shall also include Information, Personal Data, or SPDI;
3.5 “Data Fiduciary”: means “The Company”, who alone or in conjunction with other persons determines the purpose and means of processing Data.
3.6 "Data Principal"/ “You”/ “Your”: means the individual specifically includes the customer, individual agents, licensed corporate agents, insurance intermediaries, brokers, referral companies, service providers providing various services and or infrastructure and or facilities, consultants, suppliers and vendors or any visitor of the website or platform or office of “The Company” to whom the Data relates, and where such Data Principal is – (i) a Child, includes the parents or lawful guardian of such a Child; (ii) a person with disability, includes her lawful guardian, acting on her behalf;
3.7 “Data Processor”: means any person who processes Data on behalf of a Data Fiduciary.;
3.8 "Grievance Officer": shall have the meaning attributed to it in Clause 14.
3.9 Data Protection Laws”, shall have the meaning attributed to it in Clause 4.
3.10 “Digital Property” shall mean and include (a) the website (b) the Company’s App or any Mobile application(s) / SDK / API owned by the Company.
3.11 "Information": includes data, message, text, cookies, images, sound, voice, codes, computer programmes, software and data bases or microfilm or computer-generated micro fiche.
3.12 “Lawful Purpose”: means any purpose which is not expressly forbidden by law.
3.13 “Personal Data”: means any data information that relates to a natural person which, either directly or indirectly, in combination with other information available or likely to be available with a body corporate, and specifically includes the customer, individual agents, licensed corporate agents, insurance intermediaries, brokers, referral companies, service providers providing various services and or infrastructure and or facilities, consultants, suppliers and vendors or any visitor of the website or platform of the Company who is identifiable by or in relation to such data. This includes SPDI;
3.14 “Sensitive Personal Data or Information”/“SPDI”: of a person means such data which consists of information relating to:
3.14.1. password;
3.14.2. financial information such as bank account or credit card or debit card or other payment instrument details;
3.14.3. Aadhaar details;
3.14.4. physical, physiological and mental health condition;
3.14.5. sexual orientation;
3.14.6. medical records and history as to any type of ailments [including HIV/AIDS] and health status of insured and his/her family members;
3.14.7. biometric information;
3.14.8. any detail relating to the above clauses as provided to “The Company” for providing services; and
3.14.9. Any of the information received under above clauses by “The Company” for Processing, stored or Processed under lawful contract or otherwise.
Provided that any information that is freely and legally available or accessible in public domain or furnished under any statutory provisions for the time being in force shall not be regarded as SPDI.
Provided further that even if any SPDI is freely available or accessible in public domain but the person who has put such information in public domain has put so illegally or by committing some offenses, then such SPDI shall not be treated as legally available.
3.15 “Processing”: means a wholly or partly automated operation or set of operations performed on digital Data, and includes operations such as collection, recording, organisation, structuring, storage, adaptation, retrieval, use, alignment or combination, indexing, sharing, disclosure by transmission, dissemination or otherwise making available, restriction, erasure or destruction.
