Privacy Policy

1. Who we are

Aurevian Risk & Capital (“Aurevian”, “we”, “us” or “our”) is an insurance broker licensed by the Insurance Regulatory and Development Authority of India (IRDAI), operating the website aurevian.co and providing insurance broking and risk-advisory services across corporate, specialty, employee-benefits and retail insurance lines.

For the purposes of the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the rules made thereunder, Aurevian acts as a Data Fiduciary in respect of the personal data it determines the purpose and means of processing.

Registered & Corporate Office: Jubilee Hills, Hyderabad, Telangana, India.

2. Scope of this policy

This policy applies to personal data we collect through the Website, through our forms, emails and communications, and in the course of providing insurance broking, placement, servicing and claims-support services. It does not apply to the independent privacy practices of insurers, reinsurers, third-party administrators (TPAs) or other third parties whose services you may separately engage.

3. Key definitions

• Personal Data — any data about an individual who is identifiable by or in relation to such data.
• Data Principal — the individual to whom the personal data relates (this includes you).
• Data Fiduciary — the entity that determines the purpose and means of processing personal data (Aurevian).
• Processing — any operation performed on personal data, including collection, storage, use, sharing, or erasure.

4. Information we collect

Depending on how you interact with us, we may collect:

• Identity & Contact Info: Name, date of birth, postal address, email, telephone number, and KYC identifiers such as PAN where required for insurance transactions.
• Insurance & Risk Data: Asset details, commercial operations, policy history, claims history, and risk assessment details.
• Health & Financial Info: Medical declarations for group health/life schemes, income details, and bank account info for premium/claims settlement.
• Technical & Usage Data: IP address, device specs, browser type, and interactions via cookies.

5. How we collect it

• Directly from you via forms, emails, calls, and application documents.
• Automatically via Website cookies and technical diagnostics.
• From IRDAI-registered insurers, TPAs, surveyors, or your employer for group corporate schemes.

6. Purposes & lawful basis

We process personal data on the basis of consent and statutory compliance under the DPDP Act for:

• Evaluating risk requirements and structuring suitable insurance programmes;
• Soliciting quotes from and placing policies with licensed insurers;
• Processing endorsements, policy renewals, and claims advocacy;
• Fulfilling statutory KYC, Anti-Money Laundering (AML), and IRDAI compliance obligations.

7. Disclosure & sharing

We share personal data strictly as necessary with IRDAI-registered insurance companies, TPAs, surveyors, regulators, and IT processing partners bound by strict non-disclosure obligations. We never sell your personal data.

8. Data security & retention

We implement enterprise-grade technical and organizational safeguards (encryption in transit/rest, access control, IT security audits) consistent with the DPDP Act, Information Technology Act 2000, and IRDAI cybersecurity guidelines.

9. Grievance & Data Protection Officer