AIG Privacy Policy

Summary:

The Personal Information we collect and hold depends on our relationship with you.

It will often include information relating to:

• contact details
• identification
• administration of your insurance policy or claim (which may include medical or health information)
• finance and banking
• marketing preferences

In detail

The Personal Information we collect and hold about you and other individuals will differ depending on our relationship, including the type of communications between us and the products and services we provide. Different types of Personal Information will be held depending on whether you hold insurance with us or are a claimant, or you have enquired about our services, compared to where you benefit from insurance coverage under an insurance policy taken out by another policyholder.

Likewise, we will hold different Personal Information if you are a broker, an agent, a financial adviser, medical practicitioner, a witness, or another individual with whom we have a relationship.

As we are in the business of providing insurance, claims handling, assistance and related services, the Personal Information we hold and process, depending on our relationship, includes:

Summary:

We use Personal Information for different purposes depending on our relationship with you.

The main purposes are to:

• provide insurance and other services and make related assessments and decisions (automated and non-automated)
• manage claims
• communicate with you
• obtain feedback and manage complaints
• detect, investigate and prevent crime
• manage, develop and improve our business, products and services (including using data analysis)
• advertise and market our services

In detail:

We use Personal Information to carry out our business activities. The purposes for which we use your Personal Information will differ based on our relationship, including the type of communications between us and the services we provide. Personal Information will be used for different purposes if you are a policyholder, insured or claimant under an insurance policy, a broker, an agent, a financial adviser, a witness or another individual with whom we have a relationship.

The main purposes for which we use Personal Information are to:

Summary:

We may use Personal Information to detect, investigate and prevent fraud, and this may include sharing Personal Information with other insurers and law enforcement agencies.

In detail:

We are committed to detecting and preventing fraud, and other financial crime. We take this commitment very seriously and use Personal Information in a number of ways for this purpose.

For example, if relevant to our relationship with you we will (where permitted by applicable law):

• submit your Personal Information (including details of any claims you make, for example, details of injuries) so that they appear on registers of claims which are shared between different insurance providers;
• search registers of previous claims when assessing a claim; and
• share your Personal Information with other insurers and law enforcement agencies.

For further details, please see the section below ‘Who is Personal Information shared with?' or please contact us using the details provided below (see section below ‘Who to contact about your Personal Information?’).

Summary:

Sometimes we use automated decision making tools (i.e. where a person is not involved in the decision).

We typically use these tools when making straightforward decisions about you (for example, in certain claims handling and medical screening processes).

Where this is the case we provide you with more information so you understand what is involved.

In detail:

Sometimes, as part of our business operations, decisions about you are taken using automated computer software and systems. These decisions do not involve human input, and the software and systems apply pre-defined logic programming and criteria to make a decision and assess how we deal with you in connection with the provision of services.

For example, we use automated decision making to assess your eligibility for insurance and to determine the premium amount.

We will provide you with more information in relation to any automated decision processes before or at the time that we intend to make decisions in this way. You have the right in certain circumstances not to be subject to a decision which is based solely on automated processing. Please see the section below 'What are your Personal Information rights?' for further details of this right.

Summary:

AIG Life is responsible for looking after the Personal Information we collect, hold and use. We may share your Personal Information in accordance with this Privacy Policy with other companies in the Aviva group.

In detail:

We may also share your information with third parties (see section below 'Who is Personal Information shared with?'). Those third parties will assume certain responsibilities under data protection law for looking after the Personal Information that they receive from us.

Summary:

Personal Information may be shared between AIG Life, other companies in the Aviva group and other third parties, including:

• other insurance and insurance distribution parties
• medical practitioners 
• service providers
• recipients of your social media sharing activities
• government authorities
• third parties involved in legal proceedings

In detail:

In connection with the purposes described above (see section 'How do we use Personal Information?'), we sometimes need to share your Personal Information with third parties (this can involve third parties disclosing Personal Information to us and us disclosing Personal Information to them).

These third parties may include:

Personal Information may also be shared by you on message boards, chat, profile pages and blogs, to which you are able to post information and materials (including, without limitation, our Social Media Content). Please note that any information you post or disclose through these services will become public information, and may be available to visitors and to the general public.

Summary:

We may process Personal Information both nationally and internationally.

This may include transferring Personal Information outside the UK.

We take additional steps to ensure the security of Personal Information when we transfer it outside the UK.

In detail:

Due to the global nature of our service providers, for the purposes set out above (see section entitled 'How do we use Personal Information?'), depending on the nature of our relationship with you, we will transfer Personal Information to parties located in other countries (including the USA, Philippines and other countries that have data protection regimes which are different to those in the country where you are based, including countries which have not been found to provide adequate protection for Personal Information by the UK Government).

For example, we may transfer Personal Information in order to help detect, investigate and prevent financial crime. We may transfer information internationally to our group companies, service providers, business partners, government or public authorities, and other third parties.

When making these transfers, we will take steps to ensure that your Personal Information is adequately protected and transferred in accordance with the requirements of data protection law.

This typically involves the use of data transfer agreements in the form approved by the UK Government and permitted under Article 46 of the UK GDPR (as defined in section 3(10) (as supplementented by section 205(4)) of Data Protection Act 2018)(the relevant data protection law). If there is no data transfer agreement in place, we may use other mechanisms recognised by the UK GDPR as ensuring an adequate level of protection for Personal Information transferred outside the UK.

For further information about these transfers and to request details of the safeguards in place, please contact us using the details below (see section below ‘Who to contact about your Personal Information?’).

Summary:

Information security is extremely important to us.

We put in place technical and physical security measures to keep Personal Information safe and secure.

If, despite our efforts, you believe that Personal Information is no longer secure, please tell us so that we can resolve any security issue.

In detail:

AIG uses appropriate technical, physical, legal and organisational measures, which comply with data protection laws to keep Personal Information secure.

As most of the Personal Information we hold is stored electronically we have implemented appropriate IT security measures to ensure this Personal Information is kept secure. For example, we may use anti-virus protection systems, firewalls, and data encryption technologies. We have procedures in place at our premises to keep any hard copy records physically secure. We also train our staff regularly on data protection and information security.

When AIG engages a third party (including our service providers) to collect or otherwise process Personal Information on our behalf, the third party will be selected carefully and required to use appropriate security measures to protect the confidentiality and security of Personal Information.

Unfortunately, no data transmission over the Internet or electronic data storage system can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure (for example, if you feel that the security of any Personal Information you might have sent to us has been compromised), please immediately notify us (see section below ‘Who to contact about your Personal Information?’).

Summary:

To comply with the law, we need to tell you the justification we rely on for using your Personal Information. The justification depends on the purpose for using your Personal Information, but it will usually be considered to be in our legitimate interests or involve your consent.

In detail:

Data protection law seeks to ensure that the way Personal Information is used is fair.

To comply with the law, we need to tell you the justification we rely on for using your Personal Information.

While the law provides several justifications, the table below describes the main justifications that apply to our purposes for using Personal Information.

We may be required to obtain Personal Information from you to comply with applicable legal requirements, and certain Personal Information may be needed to enable us to fulfil the terms of our contract with you (or someone else), or in preparation of entering into a contract with you (or someone else). We may inform you of this at the time that we are obtaining the Personal Information from you. In these circumstances, if you do not provide the relevant Personal Information to us, we may not be able to provide our products or services to you. If you would like further information, please contact us using the details below (see section ‘Who to contact about your Personal Information?’).

Sensitive Special Categories of Personal Information

For more sensitive special categories of Personal Information we will rely on either:

• your consent; or
• one or more of the other justifications set out in the table below and typically one of the following two additional justifications (however other justifications may be available):

1. the use is necessary for the establishment, exercise or defence of legal claims, or whenever courts are acting in their judicial capacity (for example, when a court issues a court order requiring the processing of Personal Information); or

2. the use is necessary for medical diagnosis .

These more sensitive special categories of Personal Information include Personal Information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning an individual’s sex life or sexual orientation.

Additional justifications may also be available in the country in which you are based and we may also rely on these justifications from time to time.

Processing of Personal Information relating to criminal convictions and offences is subject to the requirements of applicable law.

Where we rely on our legitimate business interests or the legitimate interests of a third party to justify the purposes for using your Personal Information, those legitimate interests will be set out in a supplemental privacy notice (which is tailored to our relationship with you where this is useful to provide you with a full picture of how we collect and use Personal Information), but in any event our legitimate interests will usually be:

• pursuit of our commercial activities and objectives, or those of a third party (for example, by carrying out direct marketing);
• compliance with applicable legal and regulatory obligations, and any guidelines, standards and codes of conduct (for example, by carrying out background checks or otherwise, detecting, investigating and preventing fraud or money laundering);
• improvement and development of our business operations and service offering, or those of a third party;
• protection of our business, shareholders, employees and customers, or those of a third party (for example, ensuring IT network and information security, enforcing claims, including debt collection); and
• analysing competition in the market for our services (for example, by carrying out research, including market research).

We may need to collect, use and disclose Personal Information in connection with matters of important public interest, for instance when complying with our obligations under anti-money laundering and terrorist financing laws and regulations, and other laws and regulations aimed at preventing financial crime. In these cases, the justification for our use of Personal Information is that the use is necessary for matters of public interest. Additional justifications may also apply depending on the circumstances.

Summary:

To protect you, our business and third parties we may record calls and monitor communications between us.

In detail:

We may record telephone calls with you so that we can:

• improve the standard of service that we provide by providing our staff with feedback and training;
• address queries, concerns or complaints;
• detect, investigate and prevent crime, including fraud and money laundering, and analyse and manage other commercial risks; and
• comply with our legal and regulatory obligations.

In addition, we monitor electronic communications between us (for example, emails) to improve the service to you and to protect you, our business and IT infrastructure, and third parties including by:

• identifying and dealing with inappropriate communications; and
• looking for and removing any viruses, or other malware, and resolving any other information security issues.

Summary:

We will keep your Personal Information only as long as necessary for the purposes for which we collected it and to comply with applicable law.

Depending on our relationship with you, we may keep your Personal Information for a number of years after our relationship ends.

In detail:

We will keep Personal Information for as long as is necessary for the purposes for which we collect it. The precise period will depend on the purpose for which we hold your information. In addition, as a regulated financial services institution, there are laws and regulations that apply to us which set minimum periods for retention of Personal Information. We will provide you with further information if appropriate to give you a full picture of how we collect and use your Personal Information.

For example:

• Where we hold Personal Information to comply with a legal or regulatory obligation, we will keep the information for at least as long as is required to comply with that obligation.
• Where we hold Personal Information in order to provide a product or service (such as an insurance policy and claims handling), we will keep the information for at least as long as we provide the product or service, and for a number of years after expiry of the policy and the handling of any related claim.

The number of years varies depending on the nature of the product or service provided. For example, for most insurance policies it may be necessary to keep your Personal Information for several years after the expiry of the policy. Among other reasons, we retain the information in order to respond to any queries or concerns that may be raised at a later date with respect to the policy or the handling of a claim. Typically, we retain Personal Information for the duration of your policy and then seven years thereafter, unless a claim is made (in which case Personal Information is retained for fourteen years following our final decision). Specifically in relation to phone calls, we will typically retain phone recordings for seven years from the date of the call.

For further information about the period of time for which we retain your Personal Information, please contact us using the details (see section below ‘Who to contact about your Personal Information?’).

Summary:

You can change your marketing preferences at any time. If you would like to stop receiving marketing information from us, please contact us:

by email: DataProtectionOfficer@aiglife.co.uk

by writing to: Data Protection Officer, AIG Life Limited,The AIG Building, 58 Fenchurch Street, London, EC3M 4AB

In detail:

We will provide you with regular opportunities to tell us your marketing preferences, including in our communications to you.

To tell us your marketing preferences, and to change your preferences if required, you can contact us by email at: DataProtectionOfficer@aiglife.co.uk or by writing to: Data Protection Officer, AIG Life Limited, The AIG Building, 58 Fenchurch Street, London, EC3M 4AB.

In addition, you can also opt-out of receiving marketing communications as follows:

• Receiving email messages and text messages from us: If you no longer want to receive marketing emails or text messages from AIG, you can opt-out of receiving these marketing-related messages by clicking on the link to “unsubscribe” provided in each email message, following the stop instructions in a text message, or by contacting us using the addresses above.
• Receiving telephone communications and postal mail from us: If you no longer want to receive marketing via telephone communications or postal mail from AIG, you may opt-out of receiving these marketing communications by contacting us using the addresses above. You may also be able to contact a "Do not call" registry in your country to opt-out on a general basis from receiving marketing communications by telephone, although we may still contact you if you are listed on such a register if you have given your consent.
• Sharing of your Personal Information with our group companies for their marketing purposes: With your consent we may share your Personal Information with our group companies for their own marketing purposes. If you change your mind, you may opt-out of this sharing by contacting us using the addresses above.
• Sharing of your Personal Information with selected third party partners for their marketing purposes: If you have provided your consent we may share your Personal Information with our third party partners for their own marketing purposes. If you change your mind, you may opt-out of this sharing by contacting us using the addresses above.

We aim to comply with your opt-out requests within a reasonable time period and in any event within any period prescribed by law. Please note that if you opt-out as described above, we will not be able to remove your Personal Information from the databases of third parties with whom we have already shared your Personal Information (i.e. to those to whom we have already provided your Personal Information as of the date on which we respond to your opt-out request).

Please also note that if you do opt-out of receiving marketing communications from us, we may still send you other important service and administration communications relating to the services which we provide to you, and you cannot opt-out from these service and administration communications.

Summary:

Individuals in the UK have a number of rights in connection with their Personal Information. These rights only apply in certain circumstances and are subject to certain exemptions. These rights include a right to request a copy of the Personal Information we hold about you.

If you wish to exercise these rights, please contact us using the details below (see section 'Who to contact about your Personal Information?')

In detail:

The following is a summary of the data protection rights available to individuals in the UK in connection with their Personal Information. These rights may only apply in certain circumstances and are subject to certain legal exemptions.

If you wish to exercise your rights, please contact us using the details below (see section ‘Who to contact about your Personal Information?’).

Summary:

If you have any questions or concerns about the way your Personal Information is used by us, you can contact us by email or post.

In detail:

If you have any questions, concerns or complaints about the way your Personal Information is used by us, you can contact us by email or post using the details below.

• Email: DataProtectionOfficer@aiglife.co.uk
• Post: Data Protection Officer, AIG Life Limited, The AIG Building, 58 Fenchurch Street, London, EC3M 4AB.
• The Data Protection Officer for AIG Life Limited is Carmel Kelly.

Summary:

In addition to Personal Information, we may collect other information about the devices you use to interact with us , from which you may not be identifiable, including:

• internet browser and electronic device information
• app usage data
• information collected through cookies, pixel tags and other technologies
• demographic information
• aggregated data

In detail:

User and device data is collected when you interact with us electronically. This information may not reveal your specific identity and therefore may not be Personal Information which is used as described in the earlier sections of this Privacy Policy.

Examples of this type of user and device data are:

• internet browser and electronic device information
• app usage data
• information collected through cookies, pixel tags and other technologies
• demographic information
• data grouped together so that it is not possible to link the data to a particular individual, known as aggregated data

We and our third party service providers may collect user and device data in a variety of ways when you use our online services, including:

Please note that, where user and device data is not Personal Information, we may use and disclose that data for any purpose to the extent we are allowed to by law. If we are required to treat user and device data as Personal Information under applicable law, or if we combine user and device data with identifiable Personal Information, then, in addition to the uses listed in this section, we may use and disclose user and device data for all the purposes for which we use and disclose Personal Information.

Summary:

We are not responsible for the privacy, information or other practices of any third parties, including any third party operating any site or service to which our online services link.

In detail:

This Privacy Policy does not address, and we are not responsible for, the privacy, information or other practices of any third parties, including any third party operating any site or service to which our online services link. The inclusion of a link on AIG Life's website does not imply endorsement of the linked site or service by us or by other companies in our group.

Please note that we are not responsible for the collection, usage and disclosure policies and practices (including the information security practices) of other organizations, such as Facebook®, Twitter®, Apple®, Google®, Microsoft®, RIM/Blackberry® or any other app developer, app provider, social media platform provider, operating system provider, wireless service provider or electronic device manufacturer, including any Personal Information you disclose to other organizations through or in connection with our online services.

Summary:

This Privacy Policy was last updated on 9^th April 2024. We may review this policy and make changes from time to time.

In detail:

This Privacy Policy was last updated on 9^th April 2024.

We review this Privacy Policy regularly and reserve the right to make changes at any time to take account of changes in our business activities, legal requirements, and the manner in which we process Personal Information. We will place updates on this website and where appropriate we will give reasonable notice of any changes.