Privacy notice

IMA Bengal State is the data fiduciary for this platform. This notice explains what we collect from you, why, who it reaches, and what you can ask us to do about it. It is written to the Digital Personal Data Protection Act, 2023.

What we collect

We collect only what a membership check and an insurance proposal actually require.

• Your IMA Bengal State membership or registration number, and your mobile number.
• Your name, address and email address and preferred language.
• Your professional details: speciality, qualification, medical council and registration number, years of experience, the facilities at your establishment, and your previous claims and insurance history.
• We collect your PAN because the insurer requires it under applicable KYC and underwriting norms; this is collected under the "legitimate use" and contractual-necessity grounds recognised under Section 4 of the Digital Personal Data Protection Act, 2023.
• Payment references returned by the payment gateway. We never see or store your card, UPI or bank credentials.

Why we collect it

• To confirm you are an IMA Bengal State member, against the membership list the Association holds.

• To produce an indemnity quote for your speciality and risk category.

• To place a proposal with an insurer on your instruction.

• To take payment for the cover you choose, and to service the policy afterwards.

• To contact you about your enquiry, and about other protection products where you have asked us to.

Who your information reaches

• CoverYou (a trademark of Alexa Insurance Broker Private Limited, IRDAI Registration No. 825, Direct Broker: General and Life), which arranges the insurance for its members.

• CoverPrime, which provides the professional risk-management service. CoverPrime is not an insurer.

• The insurer underwriting the policy you select.

• The payment gateway that processes your payment.

We do not sell your personal data, and we do not share it for advertising. CoverYou (Alexa Insurance Broker Private Limited) processes your information as an independent data fiduciary for the purpose of arranging and servicing your insurance policy, in its capacity as an IRDAI-registered Direct Broker (General and Life), and is separately responsible for compliance with insurance-related data obligations. CoverPrime processes your information as a data processor acting on the instructions of IMA Bengal State, solely to deliver the risk-management service you have opted into.

How we protect it

• Your one-time password is never written to any log in readable form.

• Your PAN is masked wherever it appears in our logs and internal records.

• Analytics uses a one-way hash of your mobile number. Your PAN and Aadhaar are never used in analytics at all.

• Access to member records inside the Association console is restricted by role, and every view of a member record is recorded.

• We do not transfer your personal data outside India. This covers the processing IMA Bengal Protection does itself; the partners named above are separately responsible for their own arrangements.

How long we keep it

Enquiries that do not become policies are kept for 24 months from the date of enquiry and then deleted, unless a longer period is required to defend a legal claim or comply with a regulatory direction.

We keep your membership and policy records for the duration you hold cover arranged through this platform, and for 7 years thereafter, in accordance with IRDAI's record-retention norms for insurance intermediaries.

Your rights

Under the Digital Personal Data Protection Act, 2023 you may ask us to:

• Show you the personal data we hold about you and who it has been shared with.
• Correct or complete anything that is wrong or out of date.
• Erase data we no longer need for the purpose you gave it for.
• Withdraw a consent you gave, including for marketing and promotional processing, by writing to the Grievance Officer or using the "Manage Consent" option in My Account. We will process withdrawal requests within 30 days. Withdrawing consent does not undo what was done while it was in force. Data required to fulfil an active financial contract or satisfy a statutory retention mandate (such as IRDAI record-keeping rules) will be legally preserved as permitted by law, and withdrawing a consent the insurance requires may mean we can no longer service your cover.
• Nominate someone to exercise these rights on your behalf.

Raising a concern

Write to the IMA Bengal State Grievance Officer at imabengalstate@yahoo.co.in, or call 8961213115. We will acknowledge your request within 7 days and respond substantively within 90 days, as required under the Digital Personal Data Protection Rules, 2025.

Changes to this notice

If we change what we collect or why, we will publish the revised notice here and, where the Act requires it, ask for your consent again.