Bimafy Ltd. (“We, “Us”, “Our” – also referred to as Bimafy) recognize the importance of maintaining your privacy. We are committed to maintain the confidentiality, integrity and security of all information of our users. This Privacy Policy describes how we collect and handle certain information from you when you use our website.

The details enlisted here covers the type of information we may collect from you in the process of operating the platform, how that information is used in connection with the services offered through our Site and mobile App, and shared with our Business Partners. This Privacy Policy applies to the visitors, and users of our Platform. By visiting and/or using our Platform, you agree to this Privacy Policy. To assist us in protecting your privacy, you should strictly maintain the secrecy of your login ID and password, if any, provided to you by us in connection with your account with Bimafy.

We may collect information from you when you perform any of the following activities on our website (including but not limited to):

Generally, we collect contact information such as name, mobile phone number, mailing address, date of birth, email address and other details as provided by you in the user registration page of our website. If you apply to purchase any insurance policies through us, we will collect additional information which are required by the Providers to underwrite relevant insurable risks such as (including but not limited to) name/details of the insured person/asset, date of birth, identification number, sex, address, etc. and financial information such as mobile financial service account number, debit/credit card number and expiration date through the payment gateway of the mobile financial service provider or debit/credit card company or the internet banking service of your bank or via a third-party payment processing service provider. We store the collected information for our records and to verify authenticity of the same in the future. We may also collect information such as beneficiary/nominee name, address and your relationship to the beneficiary/nominee when you apply to purchase a financial product using our Platform or submit an insurance claim. We may also preserve a copy of the proof of financial service (i.e., insurance policy certificate) acquired by you by using our Service for future reference.

If you choose to use our referral service to share a friend or family member about our website, we will ask you for your family member’s/friend’s name and email address. We shall send an automated one-time email with the invitation to visit our website to your friend/family member.

We shall use the information primarily for the following purposes:

• By using our Platform and on viewing insurance products/price quotes, you hereby authorize us to contact you via phone calls, emails and/or text messages on the contact details provided by you, to furnish you with information with regards to our services and products of our Business Partners.
• Allow you to access specific user account information.
• We may use the information provided by you to customize your future visits to our website by displaying appropriate content at our judgment and discretion.
• To send you information about products and services offered by us, our Business Partners and their affiliates, to contact you for policy renewal reminder notices, claims processing and to keep you updated on the insurance sector and Bimafy through newsletters. In case you do not wish to receive such information, you may unsubscribe through the facility in the emails you receive.

Bimafy provides insurance-related services including health insurance, travel insurance, and accident insurance. In order to facilitate policy issuance, underwriting, and claims processing for these services, we may access, collect, and process health-related data as described below. This section is intended to comprehensively disclose how we handle your health data in accordance with applicable data protection regulations and Google Play's User Data policy.

Health Data We Access and Collect

Through our mobile application and website, we may access and collect the following categories of health-related information:

• Medical history and pre-existing health conditions (as disclosed by you during insurance application)
• Medical reports, diagnostic test results, and laboratory reports
• Diagnosis or treatment details, including hospitalization records
• Hospital or clinic admission and discharge records
• Medical bills, prescriptions, and pharmacy records
• Claim-related medical documents (e.g., doctor's certificates, surgical reports)
• Health-related photographs or scanned documents uploaded by you
• Information about physical injuries or disabilities relevant to insurance claims
• Any other health information you voluntarily provide during insurance application or claim submission

How Health Data Is Collected

Health data is collected through the following methods:

• Directly from you when you fill out insurance application forms on our app or website
• Through document uploads (e.g., medical reports, prescriptions, bills) submitted via our app or website
• From insurance providers or third-party administrators during claim processing, with your consent
• From healthcare providers or hospitals when you authorize them to share information for claim verification

Purpose and Use of Health Data

We use health data strictly for the following insurance-related purposes:

• Evaluating and underwriting insurance policy applications
• Determining eligibility for insurance coverage and premium calculation
• Processing, verifying, and settling insurance claims
• Submitting claims and supporting documents to insurance providers and claim administrators
• Communicating with insurance companies, hospitals, or third-party administrators regarding your policy or claim
• Providing you with policy-related updates, renewal reminders, and claim status notifications
• Complying with legal, regulatory, and statutory requirements as mandated by the Insurance Development and Regulatory Authority of Bangladesh (IDRA) or other relevant authorities

Sharing of Health Data

Your health data may be shared with the following parties solely for the purposes described above:

• Insurance companies (providers) for policy issuance, underwriting, and claim settlement
• Third-party administrators (TPAs) for cashless hospitalization and claim processing
• Claim surveyors and assessors for loss assessment and verification
• Hospitals and healthcare providers for claim verification (with your authorization)
• Regulatory authorities such as IDRA when required by law

Bimafy does not sell, rent, or use health-related data for advertising, marketing, or any purpose unrelated to insurance services. Health data is never shared with third parties for their promotional purposes.

Storage, Security, and Retention of Health Data

Health data is stored securely on our servers using industry-standard encryption and access control measures. Access to health data is restricted to authorized personnel who require it for insurance processing purposes only. We retain health data for as long as necessary to fulfill the purposes outlined above, or as required by applicable laws and regulations. When health data is no longer needed, it is securely deleted or anonymized.

Your Consent and Rights

By using the Bimafy app or website and submitting health-related information, you provide your explicit consent for the collection, processing, storage, and sharing of your health data as described in this policy. You may withdraw your consent at any time by contacting us at [email protected]. Please note that withdrawing consent may affect our ability to process your insurance policies or claims. You also have the right to request access to, correction of, or deletion of your health data by contacting us at the email address above.

As like most websites, we also gather certain information automatically and store it in our log files. This information includes internet protocol (IP) addresses, browser type, internet service provider (ISP), referring/exit pages, operating system, date/time stamp, and clickstream data. This information is not linked to any information that is personally identifiable.

We use this information, which does not identify any individual users, to analyze trends, to administer the site, to track user movements around the site and to gather demographic information about our user base.

IP addresses are tied to personally identifiable information to help us customize your future visits to our website. However, we would like to reiterate that this information is not shared with any third parties for their promotional purposes, except as provided under Disclosure of Information clause below.

We store cookies on your computer when you visit our website. A cookie is a small text file that is stored on a user's computer for record-keeping purposes and the primary purpose of these cookies are to analyze how our users move within the website. Our cookies let you view customized pages while transacting or interacting with us. Our cookies do not have confidential or personally identifiable information. Since we use session ID cookies, they do not track a user after leaving our website. A session ID cookie expires when you close the browser. It is required if you want to buy an insurance policy online through us. We also use analytic tools to track visitor traffic on our website.

Some of our third-party service providers such as chat support use cookies on our site. We have no access to or control over these cookies. This privacy statement covers the use of cookies by www.bimafy.com only and does not cover the use of cookies by any third parties.

Users may upload documents through the Bimafy platform for insurance policy applications or claim submissions. These documents may include identity verification documents, insurance documents, medical records, medical bills, and other supporting claim documents.

Uploaded documents are used solely for insurance processing purposes and are securely stored to prevent unauthorized access.

Subject to the other terms included herein, we shall not disclose your information to any other third parties or affiliates for their promotional purposes (except for the relevant financial institution or “Providers”), unless acting under a good faith belief that such activities are necessary to:

We reserve the right to exchange, share or provide the information relating to your personal and financial details and information with statutory bodies such as Insurance Development and Regulatory Authority of Bangladesh as required and you will not hold us or our agents liable for use or sharing of the information.

We may post testimonials from you regarding your experience using our services on our website which may include your personal information. We will obtain your permission prior to the publication of such testimonials and if you would like your testimonial removed, then please contact us at: [email protected]

We use third party service providers to fulfill some or part of the services requested on the website including live chat, third party administrators for cashless claims, surveyors for loss assessment etc. We do not sell your personal information to third parties. These service providers are not allowed to use your information for their promotional purposes.

If you need to update your personal information or there is any change in the personal information recorded at our end, or if you want to discontinue using our service, you may update or delete it by making the change on our registration page or by emailing our website team at [email protected] or by contacting us by telephone or postal mail at the contact information listed below.

The security of your personal information is important to us. When you enter sensitive information such as debit/credit card number, postal address, mobile number etc. on our registration or order forms, we encrypt that information using Secure Socket Layer Technology (SSL). To learn more about SSL, follow this link https://www.ssl.com/faqs/faq-what-is-ssl

We follow generally accepted industry standards to protect the personal information submitted to us, both during transmission and after receiving. However, no method of transmission over the internet, or method of electronic storage is completely secured and we cannot guarantee that the security of such information will be adequate enough. We always try to ensure commercially acceptable means to protect your personal information.

The website may contain links to other sites and/or portals on the Internet. We intend to link only to such sites that share our high standards and respect for privacy, but we will not be responsible for the content or the privacy practices enforced by such other sites.

Please be aware that websites that have links from our site may collect personally identifiable information about you. This privacy policy does not cover the information and disclosure policies of those external websites. When you leave our site to visit any external website, please read the privacy statements of each and every website that collects personally identifiable information.

We reserve the right to modify this privacy statement at any time by posting the same on the website. Please review this frequently on the website. If we materially change our privacy policy then we will notify you by sending an email or by posting a notice on our website.

In the event Bimafy Limited goes through a business transition, such as a merger, acquisition by another company, or sale of all or a portion of its assets, your personally identifiable information will likely be among the assets transferred. You will be notified via email or a prominent notice on our website for 30 days of any such change in ownership or control of your personal information.