Post Assurance Brokers

Post Assurance Brokers Limited – Data Privacy Policy

Effective Date: 30th October 2025

Post Assurance Brokers Limited (“the Company”, “we”, “us” or “our”) is committed to protecting your personal data in line with the Nigeria Data Protection Act (NDPA) 2023, relevant regulations, and our internal privacy and information security standards.

This Privacy Notice explains how we collect, use, disclose, transfer, and safeguard your personal data, as well as your rights under the law.

  1. Personal Data We Collect

We may collect and process the following categories of personal data:

  • Identification Data: Name, date of birth, nationality, gender, photographs, identification numbers (e.g., NIN, International Passport, Driver’s License).
  • Contact Information: Phone number, email address, residential or business address.
  • Employment Information: Job role, qualifications, work history (mainly for recruitment or service engagement).
  • Financial Data: Bank account details, payment information, tax details (as required for transactions or insurance services).
  • Digital/Technical Data: IP address, device information, browser details, website usage logs.
  • Sensitive Personal Data (processed only where necessary and permitted by law): Health records (for insurance claims), biometrics, or other regulated sensitive categories.
  1. Purposes of Processing Personal Data

We process personal data for lawful and legitimate business purposes, including:

  • Provision and administration of insurance brokerage and advisory services.
  • Policy documentation, claims processing, and customer support.
  • Performance of contracts and service obligations.
  • Compliance with legal, regulatory, and reporting obligations (e.g., NAICOM, NDPC, tax authorities).
  • Security, fraud prevention, and risk management.
  • Employee and contractor management.
  • Protection of vital interests and public safety (where required).
  • Any other lawful business-related purpose consistent with this Policy.
  1. Legal Basis for Processing

We process personal data on one or more of the following legal grounds:

  • Consent given by the data subject.
  • Performance of a contract or steps taken prior to entering a contract.
  • Legal and regulatory obligations applicable to our operations.
  • Protection of vital interests of an individual or public interest.
  • Legitimate business interests, provided such processing does not adversely affect your rights.
  1. Sharing and Disclosure of Personal Data

We may share personal data with:

  1. Regulatory Bodies and Government Agencies (e.g., NAICOM, NDPC, law enforcement) for compliance purposes.
  2. Authorized Service Providers and Data Processors (e.g., IT service providers, insurers) bound by confidentiality and data protection obligations.
  3. Third-Party Benefit or Claims Partners assisting in policy administration or claim settlements.
  4. Courts, Legal Advisers, or Enforcement Authorities where required by law.
  5. Cross-Border Transfers: Only in compliance with NDPC adequacy decisions and approved safeguards.
  1. Your Data Protection Rights

Under the NDPA 2023, you have the right to:

  • Request access to your personal data.
  • Request information on how your data is processed.
  • Request correction of inaccurate or incomplete data.
  • Request erasure of your data in certain circumstances.
  • Restrict or object to the processing of your data.
  • Request data portability to another service provider.
  • Withdraw consent at any time, where processing is based on consent.
  • Lodge a complaint with the Nigeria Data Protection Commission (NDPC).

Requests may be submitted to the contact details below.

 

  1. Data Retention

Personal data will be retained only for as long as necessary:

  • To fulfil the purpose for which it was collected, or
  • As required by applicable laws and regulatory retention schedules.

Data no longer required will be securely deleted, anonymized, or archived.

 

  1. Data Security Measures

We implement appropriate technical, organizational, and administrative safeguards to protect personal data against:

  • Unauthorized access
  • Loss or theft
  • Misuse or abuse
  • Unauthorized disclosure
  • Alteration or destruction

 

  1. Accountability & Governance
  • A Data Protection Officer (DPO) oversees compliance with data protection laws.
  • Staff handling personal data receive regular training on privacy and security.
  • Processing activities are documented and subject to periodic audits.

 

  1. Contact Information

For inquiries, complaints, or to exercise your data protection rights, please contact:

Data Protection Officer
Post Assurance Brokers Limited
47, Raymond Njoku street off Awolowo road Ikoyi, Lagos
Tel: +234 (0)
Email: dpo@postassurancebrokers.com