Privacy Policy
Issued by
- Company
- SAGA Insurance Brokers Private Limited
- Registered office
- Plot No. 177, H&I Industrial Area Phase 1, Chandigarh 160002
- IRDAI CoR
- No. 1181, Direct Broker (Life & General). Valid until suspended, cancelled or surrendered (perpetual).
- CIN
- U66220CH2025PTC046472
- Last updated
- 12 October 2026
Introduction & Regulatory Scope
SAGA Insurance Brokers Private Limited (“Company”, “We”, “Us”, or “Our”) is committed to protecting your privacy and safeguarding your personal, financial, and health-related data. As an insurance intermediary, we assist clients in identifying their insurance requirements, accessing suitable insurance solutions, facilitating insurance arrangements and coordinating policy administration and claims-related services. In performing our role, we may interact with different participants. Each participant performs a distinct function and may have separate responsibilities concerning the information it receives and processes. These participants include:
Independent Data Fiduciaries
Insurers, reinsurers, Third-Party Administrators (TPAs), surveyors and loss assessors, who receive information from us to perform their own functions and process it as independent Data Fiduciaries in accordance with their own privacy policies.
Data Processors
Our vendors and service providers (such as technology, cloud hosting, payment, KYC verification and communication service providers), who process information only on our behalf and under our instructions as Data Processors.
This Privacy Policy outlines how we collect, process, store, disclose, and protect personal information obtained through our website, sagainsurancebrokers.com (the “Platform”), as well as through our customer care channels and offline interactions.
We handle your information in accordance with the applicable laws and regulatory requirements, including, where applicable:
- The Digital Personal Data Protection Act, 2023 (DPDP Act) and the Digital Personal Data Protection Rules, 2025 (DPDP Rules)
- The Insurance Act, 1938, the Insurance Regulatory and Development Authority of India (Insurance Brokers) Regulations, 2018 and other regulations and directions issued by the Insurance Regulatory and Development Authority of India
- The Prevention of Money-laundering Act, 2002 and the rules made thereunder
- The Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
Where we rely on your consent, we will seek it through a clear affirmative action (such as ticking an unticked box or clicking “I agree”) after giving you notice of the personal data to be collected and the purposes for which it will be processed, in accordance with Sections 5 and 6 of the DPDP Act. Our Platform is intended for use by individuals aged 18 years or above. Where personal data of a child (an individual below 18 years of age) is required, for instance where a minor is a proposed insured person or nominee, we will process it only with the verifiable consent of the parent or lawful guardian, in accordance with Section 9 of the DPDP Act. Where you provide personal data of other individuals (such as family members, insured persons or nominees), you confirm that you are authorised to do so and have informed them of this Privacy Policy.
Categories of Information We Collect
To act as your insurance broker and assist in risk assessment, quotations, policy issuance, renewals, and claim servicing, we may collect:
Personal Identification Information
Personal data (also referred to in this Privacy Policy as “personal information”) means any data about you by which you are identifiable, as defined under Section 2(t) of the DPDP Act. We may collect personal identification information from you in a variety of ways, including, but not limited to, when you visit the Platform, fill out a form, or in connection with other activities, services, features or resources we make available on the Platform. We collect personal information directly from you when you voluntarily submit it to us, and may also receive it from insurers, TPAs, the Central KYC Records Registry and other sources, where permitted by law. You can always refuse to supply this information, except that it may prevent you from accessing or using any or all of the activities, services, features or resources available on the Platform. You may be asked for, as appropriate, the following personal information:
- Contact information, such as name, email address, phone number, address;
- Gender;
- Date of birth;
- Marital status;
- Occupation;
- Financial information, such as bank account details for premium payments, refunds and claim settlements (payment card details are processed by our payment service providers and are not stored by us);
- Health information, such as medical history, prior medical conditions and medical examination reports, where required by the insurer for underwriting or claims;
- Details of insured persons, family members and nominees, including their relationship with you;
- Details of existing insurance policies and claims history;
- KYC documents and identifiers, such as PAN, Aadhaar (with the first eight digits masked), passport, voter ID or driving licence, and your CKYC identifier;
- Any other sensitive personal data or information relevant for the purpose of your use of the Platform or any of its functionalities.
- Certain personal information and/or sensitive personal data or information such as name, age, gender, email, identity card details such as Aadhaar, PAN, address, profession details, health details and other details may be made mandatory to be submitted by the user as may be required to get price quotations from insurers and for issuance of the policy document.
Non-personal Identification Information
We may collect non-personal identification information about you whenever you interact with our Platform. Non-personal identification information may include the browser name, the type of computer or other communication device and technical information about your means of connection to our Platform, such as the operating system and the internet service provider utilised, an IP address assigned to the computer which you use, the domain server through which you access the Platform, and other similar information. While this information does not by itself identify you, certain technical information (such as IP address or device identifiers) may constitute personal data when linked with other information, and we treat it as personal data in such cases. We use cookies and similar technologies to operate and improve the Platform; you may manage cookie preferences through your browser settings.
Customer Service Communications Information
We may collect personal information, non-personal information or other information when you submit comments, questions, complaints or suggestions regarding services.
Other Information
We also collect information regarding your usage of the activities, services, features or resources available on the Platform. This other information includes, but is not limited to, patterns of your use of the Platform, pages visited, etc.
Purpose of Processing
We process personal data as a Data Fiduciary (as defined under Section 2(i) of the DPDP Act) for the following specified and lawful purposes:
Insurance Advisory and Quotations: Evaluating your insurance needs and soliciting quotations from multiple IRDAI-registered insurance companies.
Proposal Processing and Verification: Assisting you in submitting proposal forms and facilitating electronic KYC (e-KYC) verification.
Policy Administration: Coordinating policy issuance, premium payments, endorsements, renewals and related servicing activities.
Claims Assistance: Facilitating claims-related documentation, communication and coordination with insurers, TPAs, surveyors and other relevant participants.
Regulatory Compliance: Complying with statutory record-keeping and reporting requirements under the Insurance Act, 1938, the Prevention of Money-laundering Act, 2002 (PMLA), and the regulations, guidelines and directions issued by IRDAI.
Communications: Communicating service updates, policy schedules, payment receipts, and statutory notices.
Grievance Redressal and Fraud Prevention: Responding to your queries and complaints, and detecting and preventing fraud or misuse of the Platform.
Marketing: With your consent, informing you of other insurance products and services that may be of interest to you. Such calls and other communications are handled by SAGA’s separate insurance calling team. If you submit an enquiry or your contact details on the Platform, those details will be passed to this team so that they can contact you about your enquiry. You may withdraw such consent at any time.
Data Retention & Security Measures
Security
We apply technical, administrative, and physical safeguards, including industry-standard encryption (such as TLS) for data in transit and at rest, firewalls, role-based data access controls, and periodic vulnerability testing. These measures are intended to meet the reasonable security safeguards required under Section 8(5) of the DPDP Act and the DPDP Rules, and the IRDAI Information and Cyber Security Guidelines, 2026.
Personal Data Breach
In the event of a personal data breach, we will intimate the affected individuals and the Data Protection Board of India in the manner and within the timelines prescribed under the DPDP Rules, and will report cyber incidents to CERT-In and IRDAI as required under applicable law.
Retention
Policy records, client proposals, claim records and transaction logs are retained for the periods prescribed under applicable law, including Regulation 16 of the IRDAI (Maintenance of Information by the Regulated Entities and Sharing of Information by the Authority) Regulations, 2025 (a minimum of ten years from the date of the last transaction or expiry of the policy, or such longer period as required by law) and the Prevention of Money-laundering Act, 2002. Personal data that is no longer required for the specified purpose or under any law will be erased or anonymised. Logs of processing are retained for a minimum period of one year, as required under the DPDP Rules.
Your Rights Regarding Personal Data
Subject to applicable law and regulatory record-retention requirements, you may have the right to:
Access
Request access to a summary of personal data held about you and the identities of other Data Fiduciaries and Data Processors with whom it has been shared, along with a description of the personal data so shared (Section 11 of the DPDP Act).
Correction and erasure
Request correction, completion or updating of inaccurate, incomplete or outdated personal data, and erasure of personal data that is no longer necessary for the specified purpose, unless its retention is required by law (Section 12 of the DPDP Act).
Withdraw consent
Withdraw your consent to data processing (processing completed prior to withdrawal remains valid; withdrawal may limit our capacity to service existing policies or assist with claims). You may withdraw consent with the same ease with which it was given (Section 6(4) of the DPDP Act).
Nominate someone
Nominate an individual to exercise these rights in the event of your death or incapacity, in accordance with Section 14 of the DPDP Act.
Grievance redressal
Have your grievances in respect of our processing of your personal data redressed by us, before approaching the Data Protection Board of India (Section 13 of the DPDP Act).
To exercise any of these rights, please write to the Grievance Officer at the contact details set out in Section 7, providing sufficient details to identify you. We may verify your identity before acting on your request.
Grievance Redressal & Grievance Officer
If you have questions, disputes, or complaints concerning data handling, contact our designated Grievance Officer:
- Name
- Mr. Vivek Kumar
- Designation
- Grievance Officer
- Phone
- +91 99109 11883
- Postal address
- SAGA Insurance Brokers Private Limited, Plot No. 177, H&I Industrial Area Phase 1, Chandigarh 160002
We acknowledge grievances within 48 hours and strive to resolve matters within 30 days. If your privacy-related grievance is not redressed satisfactorily, you may approach the Data Protection Board of India after exhausting the grievance redressal mechanism set out above (Section 13(3) of the DPDP Act). Grievances relating to insurance services may be escalated to IRDAI through the Bima Bharosa portal (bimabharosa.irdai.gov.in) or to the Insurance Ombudsman, as applicable.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time. The updated version will be posted on the Platform with a revised “Last Updated” date. Where a change is material or requires fresh consent, we will notify you and, where required, seek your consent.