Last updated: 27 Oct 2026
Draft — pending legal review. This page is not approved legal wording. Items in [brackets] are still to be confirmed.
This draft describes what the system actually does today. It is not a statement of legal compliance.
Contact form: your name, email address, optional phone number, the message you write, and the plan you were viewing if you came from a plan page.
Technical data with the contact form: a one-way hash of your IP address (not the address itself) and your browser's user-agent, used to limit abuse.
Customer accounts (created by our branches): identity and contact details, plan, invoice and payment information, support requests and documents your branch records or uploads for you.
To answer your enquiry, register and manage your account, provide your plans, invoices and support, and keep the service secure.
Contact form messages may be emailed to our support inbox.
When you log in we set a session cookie (insurance_session) and keep sign-in tokens in your browser's local storage so you stay signed in.
We also store your theme and display-currency choice in local storage. This site does not use advertising or analytics cookies or trackers.
Documents and generated policy PDFs are stored with our cloud storage provider (Cloudflare R2). Emails are sent through our mail provider. [Provider names and locations to be confirmed.]
Online payment: no online payment gateway is currently connected; payments are recorded by our branches. [Update if this changes.]
Some staff tools may use an AI service to help draft text. [Business to confirm whether any customer data is sent and update this section.]
[Retention periods to be defined and confirmed by legal.]
[Rights under the applicable data-protection law — UAE PDPL / Saudi PDPL — to be confirmed by legal, with how to exercise them.]
Use the contact page for privacy questions. [Data protection contact to be confirmed.]