Menu
YOA Insurance Brokers · Legal

Data Protection Policy

How YOA Insurance Brokers Limited collects, uses and protects your personal data, in line with the Nigeria Data Protection Act (NDPA) and the GAID 2025.

Questions? data.privacy@yoainsurance.com

1. Purpose

This Data Protection Policy outlines the principles and procedures followed by YOA Insurance Brokers Limited to ensure compliance with applicable data protection laws, such as the Nigeria Data Protection Act (NDPA) 2025, General Application and Implementation Directives (GAID) 2025 and other relevant regulations.

2. Scope

This policy applies to all employees, contractors, and third-party service providers of YOA Insurance Brokers Limited who handle personal data of clients, employees, consultants, vendors or any other individuals.

3. Definitions

  1. Personal Data: Any information that can identify an individual, such as name, address, phone number, email, or policy details.
  2. Data Subject: The individual whose personal data is processed.
  3. Processing: Any operation performed on personal data, including collection, storage, use, and disclosure.

4. Data Protection Principles

YOA Insurance Brokers Limited commits to processing personal data in line with the following principles:

  1. Lawfulness, Fairness, and Transparency: Personal data must be processed lawfully and in a transparent manner.
  2. Purpose Limitation: Data will only be collected for specified, explicit, and legitimate purposes.
  3. Data Minimization: Only necessary data will be collected and processed.
  4. Accuracy: Personal data must be accurate and kept up-to-date.
  5. Storage Limitation: Data will not be retained longer than necessary.
  6. Integrity and Confidentiality: Personal data must be processed securely to prevent unauthorized access or breaches.

5. Collection of Personal Data

YOA Insurance Brokers Limited collects personal data for purposes including:

  1. Risk review, assessment and advisory.
  2. Placement and management of insurance policies.
  3. Processing claims and providing customer support.
  4. Recruitment purposes.
  5. Consultancy and transactional purposes.
  6. Complying with legal and regulatory obligations.
  7. Marketing purposes.

Data collected may include names, contact information, identification documents, and financial information.

6. Lawful Basis for Processing

Personal data will only be processed based on one or more of the following lawful bases:

  1. Consent from the data subject.
  2. Fulfillment of a contract.
  3. Compliance with legal obligations.
  4. Legitimate business interests.

7. Data Subject Rights

YOA Insurance Brokers Limited recognizes the following rights of data subjects:

  1. Right to Access: Request access to personal data.
  2. Right to Rectification: Request correction of inaccurate data.
  3. Right to Erasure: Request deletion of personal data under certain conditions.
  4. Right to Restriction of Processing: Request limited processing of data.
  5. Right to Data Portability: Obtain data in a structured format.
  6. Right to Object: Object to data processing for direct marketing or other purposes.
  7. Right to Lodge a Complaint: Complaints can be lodged to obtain to the data processing by the Company.

8. Data Security

YOA Insurance Brokers Limited implements the following measures to ensure data security:

  1. Use of encryption for sensitive data.
  2. Regular audits and monitoring of data access and processing.
  3. Password protection and multi-factor authentication.
  4. Secure disposal of data no longer required.
  5. Secure storage of documents containing personal information.
  6. Regular reporting of data processes and audit to the Commission (NDPC) as required.

9. Data Breaches

In the event of a data breach, YOA Insurance Brokers Limited will:

  1. Notify the affected individuals and relevant regulatory authorities within 5 business days of the breach.
  2. Retract any data subject’s information disclosed without consent within 24 hours and send proof of retraction to data subject within 48 hours.
  3. Take remedial actions to mitigate risks and prevent future breaches.

10. Third-Party Processors

YOA Insurance Brokers Limited ensures that third-party service providers comply with this policy and relevant data protection laws through proper agreements and audits.

11. Use of Cookies

YOA uses cookies to analyse browsing behaviour, track website interactions, and identify potential product interests to enhance user experience. Visitors can choose to accept cookies, with all disclosures provided in clear, plain language.

For details of the cookies we use and how to manage your preferences, please see our Cookie Policy.

12. Social Media Platforms

Data subjects may engage with YOA through blogs and social media platforms, where YOA promotes insurance awareness, risk management, and financial inclusion.

  1. YOA is not responsible for any personal data voluntarily shared on its social media platforms.
  2. For data collected through campaigns (e.g., email addresses, company names, phone numbers), YOA will obtain explicit consent before further processing.

13. Training and Awareness

An annual training of all employees and contractors handling personal data would be undertaken every first quarter of the year. This is required to understand their responsibilities under this policy.

The Legal and Data Protection Team will periodically conduct an audit of the Company’s Data Protection practices in accordance with the Nigeria Data Protection Act.

14. Contact Details of Data Controller and Protection Officer

Data Controller: Enitan Solarin
Data Protection Officer: Tomiwa Tejumola
Email: data.privacy@yoainsurance.com
Contact Number: +234 813 607 6588

15. Policy Review

This policy will be reviewed annually or as needed to reflect changes in data protection laws or business practices.