HODLife Insurance - Data Privacy Statement

What We Collect

We may collect personal data including:

• Identity and contact details (e.g., name, address, email, phone)
• Medical and lifestyle information
• Financial and credit history
• Citizenship and residency documentation
• Sensitive personal data (e.g., health, ethnicity, criminal records)
• IP addresses, device identifiers, browser details, and cookie-based usage data when you visit our website

Why We Collect It

We collect and process your data to:

• Provide insurance quotes and illustrations
• Underwrite and issue policies
• Administer policies and manage claims
• Comply with legal and regulatory obligations
• Detect and prevent fraud

How We Use and Share Your Data

Your data may be shared with:

• Insurance intermediaries and reinsurers
• Legal, financial, and compliance professionals
• Regulatory authorities
• Anti-fraud and sanctions databases

We only share data when necessary, with your consent, or as required by law.

Legal Basis / Legitimate Grounds

We process your personal information only where permitted under PIPA, including:

• Performance of a contract or taking steps at your request prior to entering a contract (e.g., applications, underwriting, claims)
• Compliance with legal obligations
• Our legitimate business interests (e.g., fraud prevention, risk management)
• Consent, where required for specific optional services

Data Security

We implement robust security measures and appropriate safeguards to protect your data from unauthorized access, alteration, misuse, or loss. In the event of a breach, we will notify affected parties and regulators as required under PIPA.

Data Retention

Your data is retained only as long as necessary for the purposes outlined above or as required by applicable law. This includes potential legal claims or regulatory audits.

Your Rights

Under PIPA, you have the right to:

• Access and correct your personal data
• Withdraw consent (where applicable)
• Request deletion of data no longer lawfully processed
• Restrict or object to certain types of processing
• Lodge complaints with the Bermuda Privacy Commissioner
• Request to know whether we hold personal information about you

Overseas Transfer Disclosure

We may transfer personal information outside Bermuda (including to cloud providers, reinsurers, IT service providers, and our group companies). Such transfers may occur where we ensure a comparable level of protection in accordance with PIPA.

Third-Party Processor Safeguards
All third-party service providers are required to implement appropriate safeguards and only use personal information for the purposes that we specify.

Contact Us

If you have questions or wish to exercise your rights, contact our Data Protection Officer:

Cookies & Online Tracking

Our website may use cookies and similar technologies to enhance functionality and analyze usage. These may include:

• Strictly necessary cookies
• Performance and analytics cookies
• Functional cookies
• Third-party cookies (e.g., for embedded content or analytics)

You can manage cookie preferences via your browser settings.