Our Privacy Principles
At Lagos Building Insurance Scheme ("LBIS", "we", or "us", or "our"), we are committed to protecting the privacy and security of personal information supplied by employees, customers, vendors and other data subjects ("you" or "your"). This Privacy Policy ("Policy") outlines how we collect, use, and protect your personal information when you visit our website or use our Services. It also explains your rights and choices concerning your personal information.
For the purpose of this Policy, "Website" refers to LBIS' website which can be accessed at https://buildinginsurance.ng/, Service(s) includes but is not limited to LBIS' products such as Builder's Liability, Contractors All-Risks, Occupiers Liability and Petrol Station, accessed via the Website, and any other platform LBIS may use. By accessing our Website and all affiliated mobile applications owned and operated by us, you agree and consent to the collection, use, storage and sharing of your personal information and our terms and procedures as described in this Policy.
Please note that the collection and processing of your personal information is in accordance with the Nigeria Data Protection Act, 2023 and other applicable data protection regulations in force in Nigeria ("Data Protection Laws").
Role Definitions
For the purpose of this Policy, the following roles are defined:
Data Subject
An individual to whom personal data relates, and includes LBIS's clients, customers, business partners, and employees.
Data Controller
Means an individual, private entity, public Commission, agency or any other body who, alone or jointly with others, determines the purposes and the means of processing of personal data. For this Policy, Lagos Building Insurance Scheme is the Data Controller.
Data Protection Officer
Means the independent officer appointed by LBIS who is responsible for overseeing compliance with Data Protection Laws, advising on privacy obligations, monitoring data processing activities, and serving as a contact point for data subjects and regulators.
The responsibilities of the Data Controller and Data Protection Officer are clearly outlined in the Nigeria Data Protection Act (2023).
What Information Do We Collect?
Only minimum information required to meet the purposes mentioned in this Policy shall be collected from the data subject. Neither LBIS nor its representatives shall be responsible for the authenticity of such information provided by the data subject. As normal business practice, LBIS may collect information in order to enable secure online authentication, interaction, and transaction with natural persons. At LBIS, we collect various types of information to effectively provide you with our Services. The information we collect falls into the following categories:
A. Information You Give Us
Personal Information
When you visit our Website, we may collect personal information that could potentially identify an individual. Such information includes, but is not limited to name, age, email addresses, phone numbers, etc.
Other Sensitive Personal Information
These are defined as information that if lost, compromised, or disclosed could result in substantial harm, embarrassment, inconvenience, or unfairness to an individual. Such information includes but is not limited to marital status and religious affiliation.
Financial Information
LBIS may process information related to payments you make or receive in the context of an insurance policy. This includes information such as Bank Verification Number (BVN) and information obtained from credit reference agencies.
Means of Identification
We may collect National Identity Card Number (NIN), International Passport details, Drivers' License, Voter's card details, etc.
By providing your personal information and any other kind of information to us, you expressly agree to the collection, use, storage and disclosure of such information as described in this Policy.
B. Information We Collect About You
We may automatically collect information about your interactions with our Website. This information includes:
Log Data
This may include your device's Internet Protocol (IP) address, browser type, page visited, time zone settings and so on.
Device Information
This includes device-specific information such as hardware model, operating system version, unique device identifiers and so on.
Usage
This may include the full Uniform Resource Locators (URL) clickstream to, through and from our Website (including date and time), page response times, download errors, length of visit to certain pages, page interaction (such as scrolling, clicks and mouse-overs), and methods used to browse away from the page and any phone number to call our customer service number.
C. Information Collected Through Cookies and Other Similar Technologies
To enhance your experience on our Website, LBIS employs cookies and similar tracking and identification technologies. These technologies aid us in collecting information related to your preferences and settings.
You can configure your browser to indicate when LBIS has set a cookie in your browser. You can also configure your browser to block all cookies from a specific domain or all domains. However, please note that our services rely on cookies to function properly.
D. Information We Receive from Others
In certain cases, we may receive information about you from third-party sources, including credit bureaus and identity verification services. The information collected allows us to process your applications, provide customer support, improve our Services, and comply with legal and regulatory requirements. When data is acquired from a third party, we ensure that a copy of the data subject's consent has been provided.
How Do We Collect Your Information?
We collect personal data that you voluntarily disclose to us, as well as information pertaining to any other individual whose details you provide, through various channels, including:
- Know Your Customer (KYC) forms
- Electronic means (emails and apps)
- Forums and feedback forms
- Digital touchpoints
- Live chat, chatbot, and profiler
- Inquiry and Quote forms
- Surveys or votes in a poll on our website
- Cookies
- Web analytics tags
We also collect your Personal Data from other third-party sources.
How Do We Use Your Information?
LBIS uses the personal information collected for the following purposes:
- Provision of our services: The information you provide to us are necessary and will be used to provide our services.
- Personalization: The information we collect helps us personalize your experience on our Website and to provide you with relevant content and offers.
- Communication: We may use your contact information to communicate with you regarding our services, promotions, or important updates. This could include notifications about purchases and changes to our terms, conditions and policies and about special offers on other products and services we think you might need. Our customer support team may also use this information to assist you with inquiries and concerns.
- Legal and Regulatory Compliance: Where we have a legal or regulatory obligation to use such Personal Data, for example, when our regulators such as the National Insurance Commission (NAICOM), the Nigeria Data Protection Commission (NDPC) or other regulators require us to maintain certain records of any dealings with you. We may collect your personal information to comply with local or foreign laws, regulations, voluntary codes, directives, judgments or court orders, and agreements between LBIS and any authority, regulator, or enforcement agency.
- We may analyze non-personal information to understand user behavior, optimize our website, and improve our marketing strategies.
- We may use your personal information to establish, exercise, or defend our legal rights, for example, when we are faced with any legal claims or where we want to pursue any legal claims ourselves.
Third Party Access
At LBIS, we value your privacy and aim to be transparent about how your information is shared. We will not share any of your personal information other than for the purposes described in this Policy. If we share anything outside LBIS, it will be kept strictly confidential and will only be used for reasons that we have described. We may share the information we collect with various third parties under the circumstances outlined below:
- We may share your information with trusted third-party service providers who assist us in delivering our services. These service providers are obligated to maintain the confidentiality and security of your information.
- We may disclose your information if required by law or in response to a legal process, such as a court order or government request.
- We may disclose your information to our professional advisers: auditors, reinsurers, medical agencies, and legal team.
- We may disclose your information to credit referencing organizations to obtain information to determine risk selection, pricing, and underwriting.
- We may disclose your information to fraud detection agencies and other parties who maintain fraud detection.
- We may disclose your information to financial organizations, the government, and its agencies.
- We shall request your permission to share your personal information for a specific purpose. We will notify you and request consent before you provide your personal information or before your personal information already provided is shared for such purposes.
The above disclosures to the third party shall be made only to the extent necessary for the specific purpose for which the data is provided. The third party shall be informed of the confidential nature of such information and shall be directed to keep the data subject's information strictly confidential.
Your Rights
Data subjects have the following rights in respect of LBIS' use of their personal information:
Right to Access
The data subject has a right to a copy of their personal information as maintained by us.
Right to Rectify
LBIS takes due care to ensure that the personal information we maintain about data subjects is accurate and complete. However, if a data subject believes the information is inaccurate or incomplete, such data subject has the right to request rectification.
Right to Erase
Under certain circumstances, a data subject may ask that we erase their personal information. For instance, where the personal information collected is no longer necessary for the original purpose or where consent is withdrawn. However, this will need to be balanced against other factors, such as the type of personal information obtained, the original reason for collection, archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes, and our continuous assessment of risk relating to the data.
Right to Restriction of Processing
Under certain circumstances, but subject to regulatory requirements, a data subject may be entitled to instruct us to stop using his/her personal data. This is applicable where a data subject contests the accuracy of personal information held by the data controller. The data controller no longer requires personal data, but the data subject for the establishment, exercise, or defense of legal claims requires the data.
Right to Data Portability
Under certain circumstances, data subjects have the right to ask LBIS to transfer any personal information that they have provided to LBIS to another third party. Once transferred, the other party will be responsible for safeguarding such personnel.
Right to Object to Marketing
The Data Subject can object to the processing of his/her personal data for third-party marketing.
Right to Lodge a Complaint
LBIS' data subject has the right to lodge complaints in the event that there is an objection to the manner in which LBIS is using personal information. Such complaints can be communicated using the contact details provided in our policy documentation. In certain cases, LBIS may be unable to comply with the data subject's requests for reasons such as our obligations to comply with other legal or regulatory requirements.
Data Subject Access Request
We shall take appropriate measures to provide any information relating to processing to you in a concise, transparent, intelligible and easily accessible form upon your request. The information may be provided orally or in writing, or by other means, including where appropriate, by electronic means. Where we have reasonable doubt concerning the identity of the person making the request for information, we may request the provision of additional information necessary to confirm the identity of the Data Subject.
Requests (including for Data Subject access) will be complied with, usually within 30 days of receipt. To submit a Data Subject request, please contact info@buildinginsurance.ng
Security Measures
We use industry-standard encryption protocols to protect the transmission of sensitive information between your browser and our servers. We take reasonable steps to ensure that the personal information we collect is accurate, complete, and up-to-date. Upon receiving your information, we employ stringent procedures and security features to mitigate the risk of unauthorized access.
We also protect the confidentiality (i.e. that only those who need to know and are authorised to use personal data have access to it), integrity and availability of your personal data. We regularly evaluate and test the effectiveness of those safeguards to ensure the security of our processing of personal data.
In cases where we have provided you with a password to access specific areas of our Website, it is your responsibility to keep this password confidential. We kindly request that you refrain from sharing your password with anyone.
Please be aware that while we take every precaution to safeguard your personal information, the transmission of information over the internet is not entirely immune to security risk. Despite our continuous efforts to ensure the protection of your personal information, we cannot provide an absolute guarantee of 100% security for data transmitted to our Website. Any transmission of data is undertaken at your own risk.
How Long Will Your Personal Information Be Kept?
At LBIS, we retain your information only for as long as necessary to fulfil the purposes outlined in this Policy and to comply with legal and regulatory requirements. The retention periods for different categories of data may vary based on factors such as the amount, nature and sensitivity of the personal information, the potential risk of harm from unauthorized disclosure of your personal information and the applicable legal, regulatory, tax, accounting and other requirements. If you wish to inquire about the specific retention period for your data or request its deletion, please refer to the "Contact Information" section of this Policy.
Please note that even after your personal information is removed from our active systems, residual copies may remain in backup archives for a limited period. Such copies will be safeguarded in line with our data retention and security policies.
International Data Transfers
The information we collect may be stored, processed and transferred among the countries where we operate. This is done to enable us to use the collected information in accordance with the policies outlined here. Any such information transfers to other countries will adhere to Nigeria's data protection law and regulations.
It is important to note that we may transfer your personal information outside of Nigeria under the following circumstances:
- With your explicit consent.
- When the transfer is necessary to fulfil a contract between you and LBIS, or for the implementation of pre-contractual measures at your request.
- When the transfer is necessary for the execution or performance of a contract that is in your interest, between LBIS and another individual or legal entity.
- When the transfer is essential for important reasons related to public interest.
- When the transfer is necessary for establishing, exercising, or defending legal claims.
- When the transfer is required to safeguard your vital interests or the vital interests of others, especially in cases where you are incapable of providing consent due to physical or legal reasons.
It is important to acknowledge that when information is transferred outside of Nigeria, certain data protection principles in the receiving country might differ. By consenting to the processing of your personal information, you are also consenting to the transfer of that data outside of Nigeria.
How Do You Consent to the Use of Your Personal Information?
By using our Website and Services, you acknowledge and provide your explicit consent to the collection, processing and use of your personal information as outlined in this Policy. You agree that your personal information may be collected, stored and processed for the purposes mentioned in this Policy.
You understand that your personal information may be used to facilitate transactions, provide customer support, enhance your experience, and comply with legal and regulatory obligations. This may involve sharing your information with trusted parties, as detailed in this Policy.
You have the right to withdraw your consent at any time. However, please note that withdrawing consent may impact your ability to access certain features or Services.
By continuing to use our Website, you indicate that you have read, understood, and agreed to the terms of this Policy and provide your consent for collection, processing and use of your personal information as described in this Policy.
Remedies
LBIS and you will be entitled to enforce its rights in the event of a breach of the terms of this Policy, to recover damages caused by any breach of the provisions herein and to exercise all other rights existing under applicable laws. Any claim or dispute arising in relation to this Policy shall be subject to the jurisdiction of the courts of the Federal Republic of Nigeria. We shall not be liable for any breach where a claim in respect of such breach is not brought within one month of the date that such breach arose.
Changes to This Policy
We may update this Policy from time to time to reflect changes in our practices and to ensure compliance with any changes or amendments to relevant legislation. We will notify you of any changes by posting the updated Policy on this page. We will let you know via email and/or a prominent notice on our Website, prior to the change becoming effective and update the "effective date" in this Policy. We encourage you to review this page periodically for the latest information on our privacy practices. Changes to this Policy are effective when they are posted on our Website or provided to you.
Contact Information
If you have any questions, concerns, or requests regarding this Policy, the handling of your data, or if you wish to exercise your rights as described herein, please contact us. Our dedicated team will address your inquiries and requests promptly. Please provide sufficient information to help us identify you in our records and respond effectively.
Thank you for choosing LBIS. Your privacy is important to us.