InEvo Re Privacy Notice

Our Privacy Notice

We understand that you entrust InEvo Re with your personal information, and we take this responsibility seriously. This Privacy Notice explains how we collect, use, and safeguard your data, ensuring transparency and compliance with applicable data protection laws. 

1. Introduction 
InEvo Re ("we," "our," or "us") is committed to protecting your privacy. When you interact with us, we collect some information about you to deliver our services effectively and comply with applicable laws. This Privacy Notice explains how we handle your data. 
InEvo Re adheres to the data protection standards set out in the Bermuda Personal Information Protection Act 2016 (PIPA) and, where applicable, the UK version of the EU General Data Protection Regulation 2016/679 (EU GDPR). 


2. Contacting Us 
For any data protection queries, please contact our Privacy Officer at: privacy@inevore.com 


3. Data Security 
All collected data is electronically stored, and we implement appropriate technical and organizational measures to prevent unauthorized access, maintain data protection, and ensure data is used correctly. 


4. Data We Collect 
As a reinsurer, InEvo Re may receive or access personal data related to reinsurance and other agreements. The types of personal data we may process include data relating to policyholders, pension scheme members, and their beneficiaries, such as: 
Policy/Pension scheme numbers 
Postcode 
Gender 
Date of birth 
Other identifiers 
Product cohort 
Claims data 
Policy features and benefits 


5. How We Use Your Information
 
We use personal data only within our role as a reinsurer for our clients. The legal bases for processing your data include: 
Performance of pre-contractual and contractual obligations 
Compliance with legal and regulatory requirements 
Pursuit of our legitimate interests and the legitimate interests of policyholders and scheme administrators, provided such interests are not overridden by your interests or fundamental rights and freedoms. 


6. Data Retention 
We retain your information only for as long as necessary for the purposes for which it was collected, unless we are required by law or have other legitimate reasons for longer retention. 


7. Data Transfers 
As part of our services, your information may be transferred to countries outside the United Kingdom and European Economic Area (EEA). These countries may have different data protection laws. By providing your personal data, you consent to this transfer, storage, or processing. If we transfer your information outside the UK or EEA, we will implement appropriate safeguards to ensure your privacy rights are protected as described in this notice, in accordance with applicable legal requirements. These safeguards may include, but are not limited to, standard contractual clauses approved by the relevant authorities. 


8. Your Rights 
Under PIPA and GDPR, you have several rights regarding your personal information: 
Right of Access: You can request access to the personal data we hold about you and a copy of that information, unless legal exceptions apply. 
Right to Rectification: You can request correction of inaccurate or incomplete information. 
Right to Restriction of Processing: You can request restriction of processing if there is a dispute about accuracy or if we are not legally allowed to use it. 
Right to Erasure ("Right to be Forgotten"): You can request deletion of your information in certain circumstances, subject to exceptions. We may anonymize information instead of deleting it. 
Right to Data Portability: If processing is based on consent or contract, and is automated, you can request the data in a machine-readable format. 
Right to Object: You can object to processing based on legitimate interests, direct marketing, or research purposes. 
To exercise these rights, please contact us at privacy@inevore.com. We may require further information and/or proof of identity. We will respond within one month, or if unable to do so, we will explain the reason for the delay. 


9. Information Sharing 
We do not sell or rent your information to third parties for marketing purposes. We may share your information with the following categories of third parties for the purposes described in this notice: 
Public Authorities: Law enforcement, courts, dispute resolution bodies, and regulators (in the UK and overseas). 
Parties Involved in Disputes: As necessary for dispute resolution. 
Parties in Mergers/Acquisitions: In connection with potential or actual mergers, acquisitions, or takeovers. 
Third Parties with Your Consent: Where you have explicitly consented to the sharing. 
Fraud Prevention Agencies: For fraud and money laundering prevention, and identity verification. 


10. Complaints 
If you are unhappy with how we have handled your information, please contact us at privacy@inevore.com
You also have the right to complain to the Information Commissioner's Office (ICO) in the UK (https://ico.org.uk/global/contact-us) and the Privacy Commissioner in Bermuda. You may also have the right to complain to the data protection regulator in your country of residence or work.