Privacy Notice

Ceylinco General Insurance Limited is a fully owned subsidiary of Ceylinco Holdings PLC, licensed to practice Non-Life Insurance business in Sri Lanka. Protecting your privacy is a top priority for us. This notice outlines the type of personal data we collect, why it is collected, and who it may be shared with or disclosed to.

This notice is issued under the Personal Data Protection Act No. 09 of 2022 (“the Act”). Please read it carefully.

What is Personal Data?

“Personal data” means any information which relates to you and which has been provided by you to the Company, including but not limited to your name, bio-data or personal profile, National Identity Card (NIC) number, passport number, address, telephone number, email address, images, your personal preferences, particulars of any third party or beneficiary, and financial and banking account information and any information which may identify you, any, trustee or beneficiary, that has been or may be collected, stored, used and processed by the Company from time to time. The term “personal information” also includes sensitive personal data which means any personal data consisting of information as to physical or mental health or condition, political opinions, religious beliefs or other beliefs of a similar nature, the commission or alleged commission of any offence.

If you provide us with any personal information relating to a third party, including where you have named them as a, trustee or beneficiary, or where you refer a third party to us for the purposes of us offering our products and/or services to that third party, by submitting such information to us, you represent to us that you have obtained the consent of the third party to you providing us with their personal information for the purposes set out herein. References to “your personal information” shall include the personal information of third parties provided by you.

Who is the Data Controller?

The data controller refers to the individual or legal entity responsible for the processing of personal data. Ceylinco General Insurance Limited acts as the data controller under the Act.

What Personal Data will be collected?

We may collect and process the following types of personal data:

Personal Information:
Full name, address, date of birth, gender, national ID/passport details, phone number, and email address.
Preferences and Background:
Personal preferences, educational and professional experience, financial and banking information, and business activities.
Third-Party Information:
Details of third parties, beneficiaries, trustees, and any related individuals.
Travel and Expenses:
Information related to travel and expenses.
Verification Data:
Identification checks and background vetting.
Family and Social Data:
Information about family, lifestyle, and social circumstances.
Insurance Risk Information:
Details for risk evaluation and insurance claims processing.
Sensitive Data:
This may include medical reports, claims history,
Biometric data:
Religious beliefs, or information about physical or mental health, among others.

Why is Personal Data processed?

Your personal data may be used for the following purposes:
Underwriting risks, claims assessment, and providing insurance services.
Investigating and analyzing claims to improve processing and prevent fraud.
Enhancing customer relationships and service.
Marketing insurance products and related services.
Research, audits, and statistical analysis.
Preventing, investigating, or reporting criminal or unlawful activities.
Reinsurance, coinsurance, or litigation purposes.
Complying with legal and regulatory requirements.

Consent

By interacting with us, submitting information, or signing up for our products and services, you consent to the collection and processing of your data as outlined in this notice. You may withdraw your consent at any time by contacting the Data Protection Officer.

Who will access your Personal data?

Personal data may be shared with the following:

Third-Party Controllers: Public authorities, insurers, brokers, financial institutions, etc.
Data Processors: Group companies, consultants, lawyers, medical professionals, and service providers.
Advertisers: For marketing communications as permitted under the law.

Your rights regarding Personal Data.

Under applicable laws, you have the right to:

access your personal data, withdraw consent,
update or correct your personal data,
request deletion of data no longer needed,
restrict processing in certain circumstances,
Obtain data in electronic format, and
file a complaint with the relevant authority.

How long is Personal Data retained?

We retain personal data only as long as necessary for the stated purposes or to meet legal obligations.

Additional Information

If you have any questions or require more information about this notice or our data privacy practices, please contact us using the details provided below.

Data Protection Officer
Ceylinco General Insurance Limited
No. 69, Ceylinco House,
Janadhipathy Mawatha,
Colombo 01.
Telephone: (+94) 011 2 393 939 , (+94) 011 4 702 702
Email: dpo@ceyins.lk
.