Home / Privacy Policy
How Bimaask collects, uses and protects your personal data, and the choices you have.
Last updated: [DATE] · Version [1.0]
Bimaask.com is operated by [REGISTERED ENTITY NAME], a company registered in India with its office at [REGISTERED ADDRESS] ("Bimaask", "we", "us"). We are [IRDAI licence category, e.g. registered web aggregator / partner of a registered intermediary], registration no. [XXXX], valid until [DATE].
For the purposes of the Digital Personal Data Protection Act, 2023 and the rules made under it, Bimaask is the Data Fiduciary for the personal data described in this policy.
We never ask for card numbers, bank passwords, OTPs sent by your bank, or Aadhaar numbers through this website.
We use your data only for the purpose you gave it for. If we want to use it for something new, we'll ask first.
When you submit a form, we ask for your clear, specific consent for the purposes described on that form. You can withdraw consent at any time, and withdrawing will be as easy as giving it: use the "unsubscribe" link in our messages, reply STOP to an SMS, tell your advisor, or write to the grievance officer below.
Withdrawing consent doesn't affect anything we did lawfully before you withdrew. If you've already bought a policy, the insurer may still need to contact you about it.
Your consent to be contacted applies even if your number is registered on the National Do Not Call registry. [Legal review: align with current TRAI commercial-communication rules.]
We keep lead data for [12 months] after your last interaction, then delete or anonymise it, unless you buy a policy through us. In that case, we keep records for as long as insurance regulations require. Before we delete data that is no longer needed, we'll let you know in advance where the law requires it.
We use encryption in transit and at rest, role-based access, access logs and regular security reviews. Only staff and advisors who need your data to help you can see it.
If a personal data breach affects you, we'll tell you without delay, and inform the Data Protection Board of India and other authorities as the law requires.
If you're not satisfied with our response, you may complain to the Data Protection Board of India.
Our services are for adults. We don't knowingly collect data from anyone under 18. Parents can, of course, share their children's details when buying cover for them.
We'll update this policy when our practices or the law change. The date at the top shows the latest version. If a change is significant, we'll tell you by email or SMS before it applies.
[NAME], Grievance Officer / Data Protection Contact
[REGISTERED ENTITY NAME], [ADDRESS]
Email: [privacy@bimaask.com] · Phone: [NUMBER]
Hours: Monday–Saturday, 10 am – 6 pm
[DRAFT TEMPLATE. Must be reviewed by a qualified lawyer before publication against the DPDP Act 2023, DPDP Rules 2025 and their phased commencement dates, the IT Act 2000, and applicable IRDAI and TRAI regulations.]