Privacy Policy & Data Protection

1. Statutory Framework & Scope

Bima Sahayak ("we", "us", "our") serves as a dedicated policyholder assistance and grievance redressal consultancy. We recognize the profound confidentiality required when handling sensitive health records, insurance policy contracts, and personal financial information. This Privacy Policy outlines our data fiduciary practices under India's Digital Personal Data Protection Act 2023 (DPDP Act).

2. Information We Collect

We collect information strictly necessary to evaluate, investigate, and represent your insurance grievance:

• Contact & Identity Credentials: Full name, telephone/WhatsApp number, email address, and residential address.
• Insurance Policy Records: Policy bond schedules, premium receipts, Customer Information Sheets (CIS), and proposal forms.
• Dispute Artifacts: Official repudiation/rejection notices, query letters, and settlement computation sheets.
• Clinical & Assessment Documentation: Hospital discharge summaries, Indoor Case Papers (ICP), medical bills, and surveyor loss assessment reports.

3. Purpose of Processing & Consent

All personal data is processed solely on the basis of explicit consent granted when submitting an enquiry or executing our digital Service Agreement. We strictly do not sell, lease, or monetize your personal or medical data with third-party brokers, marketing networks, or underwriters.

4. Data Retention & Erasure

We retain enquiry records only for the duration required to represent your dispute effectively and fulfill statutory compliance obligations. If an initial inquiry does not proceed to active representation, your records are scheduled for automated purge within 24 months.

5. Cryptographic Security & Minimal Cookies

All digital data in transit is encrypted using 256-bit TLS/SSL protocols. Our infrastructure employs role-based access control, ensuring that only assigned case evaluation advocates have access to your clinical or dispute records.

6. Your Rights Under DPDP Act 2023

As a Data Principal under Indian law, you are entitled to the Right to Access, Right to Correction, and Right to Erasure.

7. Statutory Data Protection Officer

In compliance with Section 10 of the DPDP Act 2023, you may address any privacy concerns to: