Privacy Policy
What we collect, why we collect it, who we share it with, and the rights you have over it.
Template pending legal review. This policy is a working draft prepared to a sensible standard, but it has not yet been reviewed by counsel and does not yet reflect your final data-processing arrangements. Have it reviewed against the Digital Personal Data Protection Act, 2023 and applicable IRDAI requirements before the site accepts live traffic.
Who we are
Maatruu Pitafinserv Private Limited ("we", "us") is an insurance distributor operating this website. For the purposes of the Digital Personal Data Protection Act, 2023, we act as a Data Fiduciary in respect of the personal data you provide to us.
Our registered office and contact details are set out at the foot of every page. Questions about this policy should go to the contact address published there.
What we collect
We collect only what is needed to give you an accurate quote, to arrange a policy, and to support you afterwards.
- Identity and contact data — your name, mobile number, email address and city.
- Quote data — the answers you give in our quote forms, such as vehicle registration, cover type, age band, dependants and declared medical conditions.
- Policy and claim data — policy numbers, insurer details and information you give us when raising a claim.
- Technical data — IP address, device and browser type, and pages visited, collected through analytics.
- Communications — records of calls, messages and emails between you and our advisors.
Why we use it
- To generate quotes and place your policy with an insurer.
- To service your policy — renewals, endorsements and documentation.
- To assist with claims, including liaising with insurers, TPAs and surveyors.
- To meet legal and regulatory obligations, including IRDAI record-keeping and anti-money-laundering requirements.
- To improve the website and our service, using aggregated analytics.
Sensitive personal data
Health and medical information is necessary to price and underwrite health and life cover. We collect it only where it is required for that purpose, share it only with the insurers assessing your proposal, and do not use it for marketing.
You are not obliged to give us health information — but without it, an insurer cannot underwrite the cover, and any policy issued on an incomplete disclosure is at risk of repudiation at claim stage.
What we do not do
- We do not sell your personal data to third parties.
- We do not share your data with unrelated marketers or lead aggregators.
- We do not use your health data for anything other than underwriting and claims.
Consent and contact preferences
When you submit a quote or enquiry you consent to being contacted about it by phone, SMS, WhatsApp or email. That consent is specific to servicing your request and overrides any DNC or NDNC registration for those communications.
You can withdraw consent at any time by writing to us at the contact address published on this site. Withdrawing consent does not affect processing already carried out, and we may still need to contact you about an in-force policy or a live claim.
How long we keep it
We keep personal data for as long as you hold a policy arranged through us, and afterwards for the period required by IRDAI record-keeping rules, tax law and the limitation period for any potential claim. Quote data that does not result in a policy is retained for a shorter period and then deleted or anonymised.
Your rights
To exercise any of these, write to us at the contact address published on this site. We will respond within the period prescribed by law.
- Access — ask what personal data we hold about you.
- Correction — have inaccurate or incomplete data corrected.
- Erasure — ask us to delete data we no longer need to retain.
- Withdrawal of consent — for processing that relies on your consent.
- Grievance — complain to us, and escalate to the Data Protection Board of India if unresolved.
Security
We apply reasonable technical and organisational safeguards to protect your data, including encryption in transit and access controls on our systems. No system is perfectly secure, and we cannot guarantee absolute security.
Changes to this policy
We may update this policy from time to time. Material changes will be notified on this page with a revised effective date.