Privacy Policy

This Privacy Policy is prepared in accordance with the provisions of the Nigeria Data Protection Act (NDPA), 2023, and by extension, applicable international standards including the EU General Data Protection Regulation (GDPR). It sets out how Prestige Assurance PLC applies and complies with data privacy principles when processing the personal data of customers, staff, vendors, visitors, and third parties that interact with us.

We are committed to continuously reviewing and updating this policy to ensure it reflects best practices and meets our transparency obligations to you.

Prestige Assurance PLC has designated a Data Protection Officer (DPO) who is responsible for ensuring this policy remains accurate, current, and compliant with applicable regulations. The DPO also ensures that data subjects are duly notified before the collection and processing of their personal data, including data collected via our website.

All employees and staff of Prestige Assurance PLC who interact with personal data are required to adhere to the provisions of this policy at all times.

Prestige Assurance PLC is committed to protecting the privacy and security of personal data entrusted to us. As the data controller, we are responsible for determining how we hold and use personal information about our data subjects.

Pursuant to the Nigeria Data Protection Act (NDPA), 2023, Prestige Assurance PLC is required to notify data subjects of the information contained in this policy, including the legal basis on which their personal data is processed.

We collect only the minimum personal data necessary for the purposes described in this policy. This may include:

• Identity data — full name, date of birth, gender, nationality
• Contact data — email address, phone number, postal address
• Policy & claims data — insurance details, claim history, risk information
• Financial data — bank account details, payment history (where applicable)
• Technical data — IP address, browser type, device information, cookies
• Location data — general location information for risk assessment purposes

We do not knowingly collect sensitive personal data unless required for underwriting or claims purposes, and only with your explicit consent or as permitted by law.

Prestige Assurance PLC processes your personal data for the following purposes:

• To assess and underwrite insurance risks and provide you with appropriate cover
• To administer and manage your insurance policy throughout its lifecycle
• To process and settle insurance claims efficiently and fairly
• To communicate with you about your policy, renewals, and related matters
• To comply with our legal and regulatory obligations under Nigerian law
• To detect, prevent, and investigate fraud or other unlawful activity
• To improve our products, services, and digital platforms

Prestige Assurance PLC does not sell, rent, or trade your personal data. We may share your data only in the following limited circumstances:

• With reinsurers and co-insurers as necessary to underwrite or settle claims
• With authorised agents, brokers, and intermediaries acting on your behalf
• With service providers and processors who support our operations under strict confidentiality obligations
• With regulatory authorities such as NAICOM, NDPC, or law enforcement agencies when required by law
• With successor entities in the event of a merger, acquisition, or business transfer

Any third party that receives your personal data is required to handle it in accordance with applicable data protection laws and our data sharing agreements.

We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulation.

In general, insurance-related records are retained for a minimum of six (6) years following the expiry or termination of a policy, in accordance with Nigerian insurance and corporate law requirements. After this period, data is securely deleted or anonymised.

Under the Nigeria Data Protection Act (NDPA), 2023, you have the following rights with respect to your personal data:

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 10. We will respond to all verified requests within 30 days in accordance with the NDPA.

Prestige Assurance PLC implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction.

These measures include access controls, encryption where appropriate, staff training, and regular security assessments. Where a data breach is identified that poses a risk to your rights and freedoms, we will notify the relevant authority and, where required, the affected individuals in accordance with the NDPA.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact our Data Protection Officer:

You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) if you believe your personal data has been processed unlawfully. For more information, visit ndpc.gov.ng.

We may update this Privacy Policy from time to time to reflect changes in law, regulation, or our business practices. Any material updates will be communicated via our website. Please review this page periodically.