Our Amanah (Sacred Trust) Commitment
At Hilal Takaful Insurance Limited (RC 1309373), upholding the integrity, confidentiality, and security of your personal data is not only a regulatory imperative under Nigerian law but also an ethical Islamic responsibility under the principle of Amanah (Trust). This Privacy Notice explains how we collect, process, protect, and manage your data across all interactions, underwriting, claims, and surplus distributions.
1. Governing Laws & Regulatory Framework
Nigeria Data Protection Act (NDP Act, 2023) Audit
Hilal Takaful Insurance Limited has fulfilled its statutory obligation through the successful filing of its Compliance Audit Returns (CAR) 2025 with the Nigeria Data Protection Commission (NDPC), in accordance with the Nigeria Data Protection Act 2023.
This Privacy Notice governs personal data processing in strict adherence to:
- The Nigeria Data Protection Act (NDPA) 2023 administered by the Nigeria Data Protection Commission (NDPC).
- The Nigeria Data Protection Regulation (NDPR 2019) and subsequent Commission directives.
- National Insurance Commission (NAICOM) Guidelines on policyholder data security, Anti-Money Laundering (AML), and Countering the Financing of Terrorism (CFT).
- Insurance Act of Nigeria and regulatory reporting protocols for the Nigerian Insurance Industry Database (NIID).
2. Personal Data We Collect
Depending on the specific Takaful plan or service requested, we may collect:
Individual & Contact Identifiers
Full name, residential and business addresses, valid email, telephone numbers, date of birth, National Identification Number (NIN), and Bank Verification Number (BVN) where statutorily required for claims and surplus payouts.
Takaful Risk & Underwriting Data
Vehicle registration numbers, chassis numbers, property title records, marine shipping waybills, travel itineraries, and health/lifestyle disclosures required for Family Takaful risk assessments.
Contribution & Financial Details
Bank account details for claims payment and surplus sharing allocations, contribution receipts, and transaction records.
Digital & Web Analytics
IP addresses, browser type, device identifiers, session cookies, and interaction logs to improve website security and customer portal reliability.
3. Lawful Bases for Data Processing
Under Section 25 of the NDPA 2023, Hilal Takaful processes personal data based on:
- Contractual Necessity: Processing your application, issuing your Takaful certificate, underwriting risk pools, managing claims, and computing surplus disbursements.
- Legal & Regulatory Obligation: Reporting policy issuances to NAICOM, uploading motor certificates to NIID, and verifying compliance under AML/CFT regulations.
- Legitimate Interests: Fraud prevention, internal audit compliance, and system security.
- Consent: Explicit opt-in for marketing updates, newsletters, or discretionary advisory services (which you can withdraw at any time).
4. Information Sharing & Third-Party Disclosure
We NEVER sell, trade, or rent personal data. Disclosures are made strictly on a need-to-know basis to:
- Regulatory Authorities: NAICOM, Nigerian Insurance Industry Database (NIID), and relevant statutory law enforcement agencies where mandated by law.
- Re-Takaful Operators: Shariah-compliant re-takaful companies for treaty and facultative risk distribution.
- Licensed Loss Adjusters & Medical Assessors: Accredited professionals appointed to assess claims.
- Banking & Payment Partners: Regulated financial institutions executing contribution collections and claims disbursements.
5. Your Statutory Rights under NDPA 2023
As a valued participant or visitor, you have the following enforceable rights:
| Right | Description |
|---|---|
| Right to Access | Request confirmation and a copy of the personal data we hold about you. |
| Right to Rectification | Request prompt correction of incomplete, inaccurate, or outdated information. |
| Right to Erasure | Request deletion of your data, subject to mandatory statutory insurance retention requirements. |
| Right to Object | Object to processing for direct marketing or based on legitimate interests. |
| Right to Data Portability | Receive your data in a structured, commonly used, machine-readable format. |
| Right to Withdraw Consent | Withdraw consent previously provided for voluntary marketing communications. |
6. Data Security & Storage Protocols
We implement industry-grade technical and organizational safeguards including 256-bit SSL/TLS end-to-end encryption, multi-factor authentication, perimeter firewalls, role-based database access, and continuous intrusion detection. Our staff and representatives undergo annual NDPR data privacy compliance training.
7. Data Retention Schedule
In compliance with the Insurance Act and statutory financial regulations, Takaful policy records and claims documentation are retained for a minimum of 6 to 10 years following policy termination or claims discharge to protect participant claims history, tax audit requirements, and regulatory verifications.
8. Cookies Policy
Our website uses cookies (small text files saved on your device) to maintain user sessions, enhance page navigation, protect site security, and evaluate aggregate web traffic. You may modify your cookie preferences at any time via your browser settings or our website's Cookie Consent banner.
Contact our Data Protection Officer (DPO)
For questions regarding this policy, to exercise your data subject rights, or to report any privacy concern, please contact our designated Data Protection Officer:
You also have the right to lodge a complaint directly with the supervisory authority: Nigeria Data Protection Commission (NDPC) via ndpc.gov.ng.