Privacy Policy

1. Introduction

MRIA Insurance Agents, Sub-Agents & Consultants Ltd ("MRIA", "we", "our", "us") is committed to protecting and respecting your privacy.

This Privacy Policy explains how we collect, use, process, store, disclose, and protect personal data when you use our website, digital platforms, insurance services, customer portals, quotation systems, policy issuance systems, and any related services offered now or in the future.

MRIA processes personal data in accordance with:

• The General Data Protection Regulation (EU) 2016/679 ("GDPR")
• Applicable Cyprus data protection legislation
• Insurance and financial services regulatory requirements

By using our website and services, you acknowledge that you have read and understood this Privacy Policy.

2. Data Controller

MRIA Insurance Agents, Sub-Agents & Consultants Ltd · HE444057 · License 7636

29 Theklas Lisioti Str, Office 202, CY-3030 Limassol, Cyprus

+357 25 100600 · info@mria.com.cy · www.mria.cy

3. Information We Collect

Depending on the service requested, we may collect:

Personal Identification Information

• Full name
• Date of birth
• Gender
• Nationality
• Passport number
• Identity card number
• ARC number
• Residence permit information

Contact Information

• Email address
• Telephone number
• Mobile number
• Residential address
• Mailing address

Insurance Information

• Insurance history
• Claims history
• Occupation
• Employment details
• Travel details
• Risk-related information
• Policy information

Transaction Information

• Payment confirmations
• Transaction references
• Policy purchase details

MRIA does not store full payment card information.

Payments are processed through approved payment service providers.

4. Information Collected Automatically

When you visit our website, certain information may be collected automatically, including:

• IP address
• Browser type
• Device information
• Operating system
• Website usage information
• Cookies and similar technologies

Further details are available in our Cookie Policy.

5. Purposes of Processing

MRIA may process personal data for the following purposes:

Insurance Services

• Insurance quotations
• Policy issuance
• Policy administration
• Policy renewals
• Claims handling support
• Customer service

Compliance Requirements

• Regulatory obligations
• Anti-fraud measures
• Risk assessment
• Record keeping requirements
• Legal obligations

Business Operations

• Internal administration
• Service improvement
• Security monitoring
• Platform maintenance

Communications

• Policy documents
• Renewal reminders
• Claims communications
• Regulatory notifications
• Service-related communications

6. Marketing Communications

MRIA may send marketing communications only where the customer has provided explicit consent.

Marketing communications may include:

• Insurance offers
• Product updates
• Service announcements
• Promotional campaigns
• Educational content

Customers may withdraw their consent at any time.

Withdrawal of marketing consent does not affect essential service-related communications.

7. Legal Basis for Processing

MRIA processes personal data under one or more of the following legal bases:

Contractual Necessity

To provide insurance quotations, issue policies, administer policies, and support insurance services.

Legal Obligations

To comply with regulatory, legal, accounting, tax, and insurance requirements.

Legitimate Interests

To operate, improve, secure, and manage our business and digital platforms.

Consent

Where required by law, including marketing communications.

8. Sharing of Information

MRIA may share personal information with:

Insurance Companies

For quotation, underwriting, policy issuance, and claims-related activities.

Reinsurers

Where necessary for risk placement and insurance operations.

Service Providers

Including:

• Payment providers
• Email service providers
• Hosting providers
• Technology providers
• Customer communication systems

Professional Advisors

Including legal, accounting, compliance, and audit advisors.

Authorities

Where required by law, court order, regulatory obligation, or governmental request.

9. International Transfers

Where necessary, personal data may be transferred outside Cyprus or the European Economic Area (EEA).

In such cases, MRIA will take appropriate measures to ensure adequate protection of personal data in accordance with GDPR requirements.

10. Data Retention

MRIA retains personal data only for as long as necessary to:

• provide insurance services;
• comply with legal obligations;
• satisfy regulatory requirements;
• resolve disputes;
• enforce agreements.

Retention periods may vary depending on the nature of the information and applicable legal requirements.

11. Security Measures

MRIA implements appropriate technical and organisational measures designed to protect personal information against:

• unauthorized access;
• loss;
• misuse;
• alteration;
• disclosure;
• destruction.

While no system can guarantee absolute security, reasonable measures are continuously maintained to safeguard information.

12. Electronic Communications

Customers agree that MRIA may communicate through:

• Email
• Telephone
• SMS
• WhatsApp
• Customer portals
• Other electronic communication channels provided by the customer

Such communications may include policy documents, quotations, renewal notices, claims information, service updates, compliance notifications, and other insurance-related communications.

13. Automated Tools and Digital Services

MRIA may use automated systems, digital assistants, artificial intelligence tools, customer portals, quotation engines, claims-support tools, and other technology solutions.

Such systems are intended to assist customers and improve service delivery.

Final insurance decisions, underwriting decisions, policy terms, and claims decisions remain subject to the relevant insurer and applicable policy wording.

14. Your Rights

Subject to applicable law, you may have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of data
• Restrict processing
• Object to processing
• Withdraw consent
• Request data portability
• Lodge a complaint with the relevant supervisory authority

Requests may be submitted to:

info@mria.com.cy

15. Third-Party Websites

Our website may contain links to third-party websites.

MRIA is not responsible for the privacy practices, content, or policies of third-party websites.

Customers should review the privacy policies of those websites separately.

16. Changes to this Privacy Policy

MRIA reserves the right to update this Privacy Policy from time to time.

The latest version will always be published on the website.

Continued use of our services following publication of changes constitutes acceptance of the updated Privacy Policy.

17. Contact Information

MRIA Insurance Agents, Sub-Agents & Consultants Ltd
29 Theklas Lisioti Str, Office 202, CY-3030 Limassol, Cyprus
+357 25 100600 · info@mria.com.cy · www.mria.cy