Privacy Notice

1Introduction

Metro Peril Insurance Brokers Limited (“Metro Peril” “we”, “us”, or “our”) is a licensed insurance brokerage firm committed to delivering tailored and reliable insurance solutions to individuals, businesses, and institutions across Nigeria. We leverage industry expertise, innovative technology, and strong partnerships with underwriters to provide our clients with seamless risk advisory and insurance placement services.

This Privacy Notice (“Notice”) governs your use of our website, artificial intelligence chatbot, or application (collectively, the “Platform”). We provide this Notice because you have a right to know what information we collect, why we collect it, how it is protected and used, and the circumstances under which it may be disclosed.

2The data that we process

Personal data is any information about an individual that can be used to identify that person directly or indirectly. While using the Platform, we process personal information from you to contact or identify you, and some information may be collected automatically for our website to function properly. We also collect personal data through your use of our services, such as when you create a profile or register to join our community. We collect the following information:

3Lawful bases for processing data

We are required to process your data under at least one of these lawful bases, as specified under the relevant data protection laws:

Legitimate interest:

Processing your data is necessary for our legitimate interests or the legitimate interests of a third party, unless our legitimate interests are outweighed by your interest, in which case we may not rely on this lawful basis.

Consent:

You have given explicit consent for us to process your data for a specific purpose.

Contract:

If the data processing is necessary for a contract with us or because we have asked you to take specific steps before entering that contract.

Legal obligation:

If the processing of your data is necessary where there is a statutory obligation on us.

5Your Rights as a Data Subject

You are vested with certain rights as a data subject. They include the right to:

• access personal data we hold about you by requesting a copy;
• rectify such information where you believe it to be inaccurate or outdated;
• restrict the processing of your data in certain circumstances;
• object to the processing of your data where we intend to process such data for marketing purposes;
• where feasible, receive all personal data you have provided to us—in a structured, commonly used, and machine-readable format—and transmit the information to another data controller;
• request the erasure of your data (also known as the right to be forgotten);
• withdraw your consent to processing your data;
• lodge a complaint with the regulatory authority where you have reason to believe that we have violated the terms of this Notice. (You may complain or seek redress from us within 30 days from when you first detected the alleged violation.)

You may seek to exercise any of the above rights by emailing us at [email protected].

9Who do we disclose data to?

We may share your data with third parties. When using the Platform, we share your data with the following third parties:

10Retention of your data

The personal data we process will be stored for as long as necessary to fulfil the purposes described in this Notice. However, we will also retain data subject to relevant provisions of applicable laws, resolve disputes, prevent fraud and abuse, and enforce our legal agreements and policies. In addition, we delete your data for targeted marketing purposes once you unsubscribe from our marketing communications and request that the data be deleted.

Please note that your data may be retained for a longer period, notwithstanding your request to remove it, where there is a legal requirement to do so.

11Security of data

We prioritise your privacy and use advanced measures to protect your data. While no online platform is entirely foolproof, we are dedicated to safeguarding your information against loss, misuse, and unauthorised access. If a significant breach occurs, we will promptly inform you and act swiftly to address it.

12International transfer of data

We transfer personal data outside our country of operation. We ensure any cross-border data transfers adhere to all necessary data protection regulations. This means that before transferring personal data, we either confirm that the recipient country has robust data protection laws or, if not, employ specific contractual terms and other safeguards to protect the data. In cases where the destination country might not meet stringent data protection standards, we will leverage the relevant data transfer mechanism, seek authorisation from the regulator, or obtain your consent before proceeding and inform you of any risks. Should you wish to learn more about how we ensure data protection during these transfers, details will be provided upon request.

13Marketing and communications

We only send marketing communications to you with your consent. You can opt out of our marketing or object to further processing by contacting us via email at [email protected] and requesting to discontinue receiving marketing messages.

14Complaints

If you have any inquiries or complaints, please contact our Data Protection Officer (DPO) at [email protected]. Our DPO will examine your concerns and update you on the resolution process.