- Who is responsible for your information?
The responsible data controller or organization is:
CROWN ASSURANCE
Trading name: Crown Assurance
Address: Gulberg Greens
Email: info@crownassurance
Telephone: +92 330 007 2726
Data protection officer or privacy lead: Ahsan Shabbir
If a local Crown Assurance company, partner, broker, administrator, or service provider is responsible for a particular product or interaction, its identity and contact details may be provided in the relevant product documents.
Personal information we collect
We collect information that you provide, information generated when you use our services, and information received from authorized third parties.
Information you provide
Depending on how you interact with us, this may include your name, date of birth, contact details, address, identification information, account credentials, employment or business details, payment and billing information, beneficiary or dependent information, policy preferences, communications, application details, claim details, and documents you choose to upload.
Some insurance or assurance products may require information about health, lifestyle, financial circumstances, property, vehicles, travel, dependents, or other circumstances relevant to eligibility, underwriting, claims, fraud prevention, or regulatory requirements. Where information is sensitive or legally protected, we will handle it in accordance with applicable law and tell you when additional consent or another legal basis is required.
Information collected automatically
When you use the Website, we may collect technical and usage information such as your IP address, browser and device type, operating system, approximate location derived from IP address, pages viewed, links selected, dates and times of access, referral information, language preferences, and security or diagnostic logs.
Information from third parties
We may receive information from brokers, agents, employers, policyholders, claimants, service providers, identity-verification providers, fraud-prevention databases, public authorities, credit-reference or risk-information providers, and other parties where permitted by law. We may combine this information with information we already hold.
- How we use personal information
We use personal information for the following purposes, as permitted by applicable law:
•
to provide, administer, and maintain products, policies, accounts, claims, quotations, and related services;
•
to verify identity, assess applications, underwrite risk, calculate premiums or charges, and make eligibility decisions;
•
to process payments, refunds, commissions, and other transactions;
•
to communicate with you about enquiries, applications, policies, claims, service updates, and changes to our terms;
•
to investigate, assess, manage, and settle claims;
•
to detect and prevent fraud, money laundering, sanctions violations, abuse, cyber threats, and other unlawful activity;
•
to meet legal, regulatory, accounting, audit, reporting, and record-keeping obligations;
•
to enforce our agreements and protect the rights, property, safety, and security of Crown Assurance, our customers, and others;
•
to operate, secure, troubleshoot, test, and improve our Website, systems, products, and services;
•
to conduct analytics, quality assurance, research, and service planning using appropriate safeguards; and
•
to send marketing communications where permitted by law and consistent with your choices.
We will not use personal information for a materially incompatible purpose without providing any notice or obtaining any consent required by applicable law.
- Legal bases for processing
Where privacy law requires a legal basis, we may process personal information because processing is necessary to perform a contract or take steps at your request before entering into a contract; to comply with a legal obligation; for our legitimate interests or those of another party, where those interests are not overridden by your rights; to protect vital interests; or because you have provided consent.
The appropriate legal basis depends on the information, the service, the purpose, and the jurisdiction. Where we rely on consent, you may withdraw it at any time, although withdrawal will not affect processing that occurred before withdrawal or processing based on another lawful ground.
- Cookies and similar technologies
We use cookies and similar technologies to operate the Website, remember preferences, understand usage, protect security, and, where permitted, measure or personalize communications. Some cookies are necessary for core functionality. Others may be optional.
You can manage optional cookies through [cookie settings link] and may also adjust your browser settings. Blocking certain cookies may affect Website functionality. For more information, see our [Cookie Policy link].
- Marketing communications
Where permitted by law, we may send information about Crown Assurance products, services, events, or educational content. You can opt out of marketing emails by using the unsubscribe link in the message or by contacting us at [marketing or privacy email].
Even if you opt out of marketing, we may still send non-promotional messages needed to administer your account, policy, application, claim, transaction, or security.
- When we share personal information
We may share personal information with the following categories of recipients, subject to appropriate safeguards and applicable law:
•
Crown Assurance companies, affiliates, and authorized personnel;
•
brokers, agents, intermediaries, advisers, administrators, and distribution partners;
•
insurers, reinsurers, co-insurers, claims handlers, repairers, assessors, medical or other expert professionals, and service providers involved in a product or claim;
•
payment processors, banks, identity-verification services, fraud-prevention services, analytics providers, hosting providers, communications providers, customer-support platforms, and technology vendors;
•
auditors, accountants, lawyers, consultants, and other professional advisers;
•
regulators, law-enforcement bodies, courts, government agencies, tax authorities, and other parties where required or permitted by law; and
•
a buyer, investor, successor, or other party involved in a proposed or completed merger, acquisition, financing, restructuring, or sale of assets.
We do not sell personal information for money. If applicable law gives a different definition to “sale,” “sharing,” or targeted advertising, see the jurisdiction-specific section below for any applicable rights and disclosures.
- International transfers
Some recipients or service providers may be located outside the country where you live. When personal information is transferred across borders, we will use a lawful transfer mechanism and appropriate safeguards required by applicable law. These may include contractual protections, adequacy decisions, approved certification mechanisms, or other recognized safeguards.
You may request information about relevant safeguards by contacting [privacy email].
- How long we keep personal information
We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including to provide services, resolve disputes, enforce agreements, comply with legal and regulatory obligations, maintain business and financial records, prevent fraud, and establish or defend legal claims.
Retention periods vary by information type, product, claim, legal requirement, and limitation period. Our applicable retention schedule is [describe schedule or link to retention information]. When information is no longer required, we securely delete it, anonymize it, or isolate it where deletion is not immediately practicable.
- Security
We use reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, and disclosure. Measures may include access controls, authentication, encryption in transit, monitoring, secure development practices, staff training, vendor controls, and incident-response procedures.
No method of transmission or storage is completely secure. You should use caution when sending sensitive information and contact us promptly if you believe your account or information has been compromised.
- Your privacy rights
Depending on where you live and subject to legal exceptions, you may have the right to:
•
request access to personal information we hold about you;
•
request correction of inaccurate or incomplete information;
•
request deletion of information in certain circumstances;
•
request restriction of processing;
•
object to processing based on legitimate interests or to direct marketing;
•
receive certain information in a portable format;
•
withdraw consent where processing is based on consent;
•
request information about automated decision-making and, where applicable, request human review;
•
opt out of certain sales, sharing, profiling, or targeted-advertising activities; and
•
lodge a complaint with a relevant privacy or data-protection authority.
These rights are not absolute. We may need to verify your identity, and applicable law may permit or require us to retain or use information despite a request. We will explain the reason if we cannot fulfill a request in full.
To submit a request, contact [privacy email or rights-request portal]. We aim to respond within the time required by applicable law. If you are dissatisfied with our response, contact [complaints contact] or the relevant supervisory authority at [authority name and link].
- Automated decision-making and profiling
Crown Assurance may use rules-based tools, analytics, or other automated processes to support identity verification, fraud detection, risk assessment, underwriting, pricing, eligibility, claims handling, or service personalization.
Where a decision is made solely by automated means and applicable law gives you specific rights, we will provide the notices, explanations, review options, or human intervention required by law. Further information about a particular decision may be available in the relevant product or application notice.
- Children’s privacy
The Website is not intended for children under [age], and we do not knowingly collect personal information from children in violation of applicable law. If you believe a child has provided personal information to us improperly, contact [privacy email] so that we can investigate and take appropriate action.
- Third-party websites and services
The Website may link to third-party websites, applications, social-media pages, payment services, or other resources. Their privacy practices are governed by their own policies. Crown Assurance is not responsible for third-party privacy practices or content.
- Changes to this Privacy Policy
We may update this policy to reflect changes in our services, technology, legal requirements, or privacy practices. We will post the updated version on this page and change the “Last updated” date. Where required, we will provide additional notice or seek consent.
- Contact us
For questions, requests, or complaints about this Privacy Policy or Crown Assurance’s handling of personal information, contact:
Crown Assurance
Ahsan Shabbir
Address: Gulberg Greens, Islamabad , 44000
Email: Info@crownassurance.pk
Telephone: +92 330 007 2726
Online request form: www.crownassurance.pk
