DPDP Act, 2023 & IRDAI Compliant

Privacy Policy

Official governance framework for Vestigo Insurance Brokers Pvt. Ltd. ensuring free, specific, and informed data processing.

Introduction

Commitment to
Digital Protection

Vestigo Insurance Brokers Pvt. Ltd. respects the privacy of individuals and is committed to protecting personal data in accordance with theDigital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, and applicable regulations issued by the Insurance Regulatory and Development Authority of India (IRDAI).

"By accessing or using this website or by sharing personal data with us, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data in accordance with its terms. "
"You must be at least 18 yearsof age and legally competent to provide consent under applicable law to use this website and our services."

Scope

This Privacy Policy applies to:

  • Clients, prospective clients, and authorized representatives
  • Visitors to our website
  • Individuals interacting via broking and advisory services

Excludes employees (Governed by internal policies)

Personal Data We Collect

We collect only such personal data as is necessary, lawful, and proportionate, which may include:

  • Name, contact details, email address
  • Business and organizational information
  • Insurance-related information voluntarily provided
  • Communications exchanged with us
  • Technical data: IP address, browser type, and access logs

Purpose of Processing

Vestigo does not sell, trade, or commercially exploit personal data, nor does it engage in intrusive profiling. Personal data is processed strictly for:

  • Providing insurance broking and advisory services
  • Policy placement, servicing, and claims coordination
  • Regulatory, audit, and compliance requirements
  • Client communication and grievance redressal

5. Consent

By submitting personal data, you provide free, specific, informed, and unambiguous consent for its processing for the stated purposes. You may withdraw consent at any time by writing to us, subject to statutory, regulatory, and contractual obligations.

Data Sharing & Disclosure

Personal data may be shared only on a need-to-know basis with:

  • Insurance companies and reinsurers
  • Third-party administrators, surveyors, and service providers
  • Regulatory or governmental authorities where required by law

Data Storage & Transfer

Personal data is processed and stored in India. Cross-border data transfer, if required for insurance placement, shall be undertaken only in accordance with applicable law and safeguards.

Data Retention

Personal data is retained only for the period required under:

  • IRDAI regulations
  • Applicable laws
  • Audit, contractual, or dispute-resolution requirements

Data Security & Breach Response

Vestigo implements reasonable technical and organizational safeguards to protect personal data against unauthorized access, loss, misuse, or alteration. In the event of a Personal data breach, we take prompt remedial action and notify affected individuals and authorities as required under the DPDP Act and applicable laws.

Prompt Remedial Action

Statutory Notifications

Rights of Data Principals

Access your Personal Data
Request Correction or erasure
Withdraw Consent
Seek grievance Redressal

Updates to Policy

Vestigo reserves the right to amend this Privacy Policy to reflect legal, regulatory, or operational changes. Updates are effective from the date of posting.

Last Revised: March 2026

Grievance Officer

Redressal Matrix

All privacy-related concerns may be addressed to our officer. We acknowledge grievances within3 working daysand resolve them within15 working days.

Insurance is a subject matter of solicitation | IRDAI Regn. No: 1131 Direct Broker (General & Life)