SAGA Insurance Brokers Pvt Ltd

Privacy Policy

Issued by

Company
SAGA Insurance Brokers Private Limited
Registered office
Plot No. 177, H&I Industrial Area Phase 1, Chandigarh 160002
IRDAI CoR
No. 1181, Direct Broker (Life & General). Valid until suspended, cancelled or surrendered (perpetual).
CIN
U66220CH2025PTC046472
Last updated
12 October 2026

Introduction & Regulatory Scope

SAGA Insurance Brokers Private Limited (“Company”, “We”, “Us”, or “Our”) is committed to protecting your privacy and safeguarding your personal, financial, and health-related data. As an insurance intermediary, we assist clients in identifying their insurance requirements, accessing suitable insurance solutions, facilitating insurance arrangements and coordinating policy administration and claims-related services. In performing our role, we may interact with different participants. Each participant performs a distinct function and may have separate responsibilities concerning the information it receives and processes. These participants include:

Independent Data Fiduciaries

Insurers, reinsurers, Third-Party Administrators (TPAs), surveyors and loss assessors, who receive information from us to perform their own functions and process it as independent Data Fiduciaries in accordance with their own privacy policies.

Data Processors

Our vendors and service providers (such as technology, cloud hosting, payment, KYC verification and communication service providers), who process information only on our behalf and under our instructions as Data Processors.

This Privacy Policy outlines how we collect, process, store, disclose, and protect personal information obtained through our website, sagainsurancebrokers.com (the “Platform”), as well as through our customer care channels and offline interactions.

We handle your information in accordance with the applicable laws and regulatory requirements, including, where applicable:

  • The Digital Personal Data Protection Act, 2023 (DPDP Act) and the Digital Personal Data Protection Rules, 2025 (DPDP Rules)
  • The Insurance Act, 1938, the Insurance Regulatory and Development Authority of India (Insurance Brokers) Regulations, 2018 and other regulations and directions issued by the Insurance Regulatory and Development Authority of India
  • The Prevention of Money-laundering Act, 2002 and the rules made thereunder
  • The Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011

Where we rely on your consent, we will seek it through a clear affirmative action (such as ticking an unticked box or clicking “I agree”) after giving you notice of the personal data to be collected and the purposes for which it will be processed, in accordance with Sections 5 and 6 of the DPDP Act. Our Platform is intended for use by individuals aged 18 years or above. Where personal data of a child (an individual below 18 years of age) is required, for instance where a minor is a proposed insured person or nominee, we will process it only with the verifiable consent of the parent or lawful guardian, in accordance with Section 9 of the DPDP Act. Where you provide personal data of other individuals (such as family members, insured persons or nominees), you confirm that you are authorised to do so and have informed them of this Privacy Policy.

Categories of Information We Collect

To act as your insurance broker and assist in risk assessment, quotations, policy issuance, renewals, and claim servicing, we may collect:

Personal Identification Information

Personal data (also referred to in this Privacy Policy as “personal information”) means any data about you by which you are identifiable, as defined under Section 2(t) of the DPDP Act. We may collect personal identification information from you in a variety of ways, including, but not limited to, when you visit the Platform, fill out a form, or in connection with other activities, services, features or resources we make available on the Platform. We collect personal information directly from you when you voluntarily submit it to us, and may also receive it from insurers, TPAs, the Central KYC Records Registry and other sources, where permitted by law. You can always refuse to supply this information, except that it may prevent you from accessing or using any or all of the activities, services, features or resources available on the Platform. You may be asked for, as appropriate, the following personal information:

  • Contact information, such as name, email address, phone number, address;
  • Gender;
  • Date of birth;
  • Marital status;
  • Occupation;
  • Financial information, such as bank account details for premium payments, refunds and claim settlements (payment card details are processed by our payment service providers and are not stored by us);
  • Health information, such as medical history, prior medical conditions and medical examination reports, where required by the insurer for underwriting or claims;
  • Details of insured persons, family members and nominees, including their relationship with you;
  • Details of existing insurance policies and claims history;
  • KYC documents and identifiers, such as PAN, Aadhaar (with the first eight digits masked), passport, voter ID or driving licence, and your CKYC identifier;
  • Any other sensitive personal data or information relevant for the purpose of your use of the Platform or any of its functionalities.
  • Certain personal information and/or sensitive personal data or information such as name, age, gender, email, identity card details such as Aadhaar, PAN, address, profession details, health details and other details may be made mandatory to be submitted by the user as may be required to get price quotations from insurers and for issuance of the policy document.

Non-personal Identification Information

We may collect non-personal identification information about you whenever you interact with our Platform. Non-personal identification information may include the browser name, the type of computer or other communication device and technical information about your means of connection to our Platform, such as the operating system and the internet service provider utilised, an IP address assigned to the computer which you use, the domain server through which you access the Platform, and other similar information. While this information does not by itself identify you, certain technical information (such as IP address or device identifiers) may constitute personal data when linked with other information, and we treat it as personal data in such cases. We use cookies and similar technologies to operate and improve the Platform; you may manage cookie preferences through your browser settings.

Customer Service Communications Information

We may collect personal information, non-personal information or other information when you submit comments, questions, complaints or suggestions regarding services.

Other Information

We also collect information regarding your usage of the activities, services, features or resources available on the Platform. This other information includes, but is not limited to, patterns of your use of the Platform, pages visited, etc.

Purpose of Processing

We process personal data as a Data Fiduciary (as defined under Section 2(i) of the DPDP Act) for the following specified and lawful purposes:

  1. Insurance Advisory and Quotations: Evaluating your insurance needs and soliciting quotations from multiple IRDAI-registered insurance companies.

  2. Proposal Processing and Verification: Assisting you in submitting proposal forms and facilitating electronic KYC (e-KYC) verification.

  3. Policy Administration: Coordinating policy issuance, premium payments, endorsements, renewals and related servicing activities.

  4. Claims Assistance: Facilitating claims-related documentation, communication and coordination with insurers, TPAs, surveyors and other relevant participants.

  5. Regulatory Compliance: Complying with statutory record-keeping and reporting requirements under the Insurance Act, 1938, the Prevention of Money-laundering Act, 2002 (PMLA), and the regulations, guidelines and directions issued by IRDAI.

  6. Communications: Communicating service updates, policy schedules, payment receipts, and statutory notices.

  7. Grievance Redressal and Fraud Prevention: Responding to your queries and complaints, and detecting and preventing fraud or misuse of the Platform.

  8. Marketing: With your consent, informing you of other insurance products and services that may be of interest to you. Such calls and other communications are handled by SAGA’s separate insurance calling team. If you submit an enquiry or your contact details on the Platform, those details will be passed to this team so that they can contact you about your enquiry. You may withdraw such consent at any time.

Lawful Grounds for Processing, Sharing & Disclosures

We process personal information on the basis of your consent or for the legitimate uses permitted under Section 7 of the DPDP Act, including where you have voluntarily provided personal data for a specified purpose, for compliance with any law or any judgment, decree or order, and for responding to medical emergencies, as applicable. Accordingly, we may collect, use and disclose personal information to relevant third parties where necessary for providing insurance broking and related services, conducting business operations, or complying with applicable legal and regulatory requirements.

Such disclosures may include sharing information with insurers, reinsurers, TPAs, surveyors and loss assessors, our service providers (acting as Data Processors), the Central KYC Records Registry, regulatory, statutory and law enforcement authorities (including IRDAI and the Financial Intelligence Unit – India) and other persons or entities involved in the relevant activities. This list is illustrative and not exhaustive.

Personal information may also be disclosed pursuant to lawful requests, to prevent or investigate fraud, to establish or defend legal claims, or in connection with a merger, acquisition or transfer of business, subject to applicable law.

We do not sell personal information to third parties for their independent marketing purposes. All disclosures will be made for relevant purposes, subject to applicable legal requirements and appropriate safeguards. Where required, we will provide the necessary notice or obtain consent before such disclosure.

Transfer outside India

Personal data collected by us, including through the Platform, is hosted and stored on servers located in India. Certain recipients, such as reinsurers, may be located outside India. Any transfer of personal data outside India will be subject to Section 16 of the DPDP Act and any restrictions notified by the Central Government thereunder, and to IRDAI requirements on the maintenance of records in India.

Data Retention & Security Measures

Security

We apply technical, administrative, and physical safeguards, including industry-standard encryption (such as TLS) for data in transit and at rest, firewalls, role-based data access controls, and periodic vulnerability testing. These measures are intended to meet the reasonable security safeguards required under Section 8(5) of the DPDP Act and the DPDP Rules, and the IRDAI Information and Cyber Security Guidelines, 2026.

Personal Data Breach

In the event of a personal data breach, we will intimate the affected individuals and the Data Protection Board of India in the manner and within the timelines prescribed under the DPDP Rules, and will report cyber incidents to CERT-In and IRDAI as required under applicable law.

Retention

Policy records, client proposals, claim records and transaction logs are retained for the periods prescribed under applicable law, including Regulation 16 of the IRDAI (Maintenance of Information by the Regulated Entities and Sharing of Information by the Authority) Regulations, 2025 (a minimum of ten years from the date of the last transaction or expiry of the policy, or such longer period as required by law) and the Prevention of Money-laundering Act, 2002. Personal data that is no longer required for the specified purpose or under any law will be erased or anonymised. Logs of processing are retained for a minimum period of one year, as required under the DPDP Rules.

Your Rights Regarding Personal Data

Subject to applicable law and regulatory record-retention requirements, you may have the right to:

Access

Request access to a summary of personal data held about you and the identities of other Data Fiduciaries and Data Processors with whom it has been shared, along with a description of the personal data so shared (Section 11 of the DPDP Act).

Correction and erasure

Request correction, completion or updating of inaccurate, incomplete or outdated personal data, and erasure of personal data that is no longer necessary for the specified purpose, unless its retention is required by law (Section 12 of the DPDP Act).

Withdraw consent

Withdraw your consent to data processing (processing completed prior to withdrawal remains valid; withdrawal may limit our capacity to service existing policies or assist with claims). You may withdraw consent with the same ease with which it was given (Section 6(4) of the DPDP Act).

Nominate someone

Nominate an individual to exercise these rights in the event of your death or incapacity, in accordance with Section 14 of the DPDP Act.

Grievance redressal

Have your grievances in respect of our processing of your personal data redressed by us, before approaching the Data Protection Board of India (Section 13 of the DPDP Act).

To exercise any of these rights, please write to the Grievance Officer at the contact details set out in Section 7, providing sufficient details to identify you. We may verify your identity before acting on your request.

Grievance Redressal & Grievance Officer

If you have questions, disputes, or complaints concerning data handling, contact our designated Grievance Officer:

Name
Mr. Vivek Kumar
Designation
Grievance Officer
Postal address
SAGA Insurance Brokers Private Limited, Plot No. 177, H&I Industrial Area Phase 1, Chandigarh 160002

We acknowledge grievances within 48 hours and strive to resolve matters within 30 days. If your privacy-related grievance is not redressed satisfactorily, you may approach the Data Protection Board of India after exhausting the grievance redressal mechanism set out above (Section 13(3) of the DPDP Act). Grievances relating to insurance services may be escalated to IRDAI through the Bima Bharosa portal (bimabharosa.irdai.gov.in) or to the Insurance Ombudsman, as applicable.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be posted on the Platform with a revised “Last Updated” date. Where a change is material or requires fresh consent, we will notify you and, where required, seek your consent.