PRIVACY POLICY

Thank you for visiting the PFI Mega Life Website owned and operated by PT PFI Mega Life Insurance (“Company”).

We respect your privacy and are committed to informing you how we collect and use information provided through this website.

This Privacy Policy applies to https://pfimegalife.co.id/ and any website or mobile application linked to this Policy, including https://www.way.id/. By accessing or using these websites, you acknowledge that you have read and understood this Privacy Policy. We encourage you to review this Privacy Policy periodically while using our website, applications, and products/services.

This Policy does not apply to websites or mobile applications that are not owned or controlled by the Company. Such online services are governed by their respective privacy policies.

How We Collect Personal and Non-Personal Information Through Online Services

We collect two types of information through our Online Services: non-personal information and personal information.

Non-personal information may include browser type, device type, operating system, pages visited, date and time of access, host or internet service provider information, and referring website details.

We also collect personal information that may identify a visitor or user, including but not limited to name, address, contact details, policy-related information, or other service-related information. If you apply or register for a job vacancy through our website, we may collect personal information relating to your educational background and employment history. In addition, with your consent, certain Online Services may collect accurate location information.

Categories of Personal Data Processed and Their Relevance

Your Personal Data will be processed only to the extent relevant and necessary for the following purposes:

• Name, address, national identification number, date of birth, gender, telephone/mobile number, email address, bank account details, health and financial information, and other information contained in insurance application forms. This information is required for the purchase of insurance products, policy issuance, insurance coverage administration, claims processing and payment, reporting to regulatory authorities or Company affiliates, and other insurance-related activities, including service improvement and product development.
• Name, address, telephone/mobile number, email address, education details, work experience, and other information contained in resumes or curriculum vitae. This information is required for recruitment processes, whether for permanent employees, contract employees, or insurance agents.
• Application and device usage statistics. This information is used to generate anonymized statistical patterns to help us improve service performance and user experience.
• Health-related information, including but not limited to daily activities, diagnoses, medical prescriptions, laboratory results, billing records, and other relevant information necessary to provide services, including claim processing.

You may withdraw your consent to the processing of your Personal Data by submitting a request through the email address or WhatsApp number provided at the end of this Policy. We will cease processing your Personal Data no later than three (3) business days after the request has been declared complete and verified.

Use of Information for Other Purposes

We may use all information collected through our Online Services for the following purposes:

• To provide products, services, or information as requested by you;
• To process and follow up on claims;
• To provide information regarding our Online Services or required notices;
• To offer products or services that may be of interest to you;
• To send marketing communications or promotional materials, subject to your consent where required;
• To improve our services and the functionality of our Online Services;
• To customize our Online Services according to your needs;
• To comply with applicable laws and regulations;
• To conduct research and analysis; and
• To prevent and detect fraud, violations, and other forms of misuse.

We may also anonymize, aggregate, or combine any information collected through our Online Services or from other sources for the purposes described above or to analyze usage statistics and trends.

If you provide us with personal information, we do not sell your Personal Data. We will not license, distribute, or disclose such information outside the Company except in the following circumstances:

1. You have expressly authorized us to do so;
2. Disclosure is necessary for our contractors, agents, or service providers to perform services on our behalf;
3. Disclosure is necessary to provide products or services to you;
4. Disclosure is made to entities providing marketing services on our behalf or to entities with whom we conduct joint marketing activities;
5. In connection with a merger, consolidation, acquisition, divestiture, or other corporate restructuring; or
6. Where required or permitted by applicable law or by order of a competent authority.

Children’s Privacy

The Company does not knowingly collect Personal Data from children under the age of 13 through our Online Services. We request that children under this age refrain from providing Personal Data through our Online Services.

Personal Data Processing Activities

In conducting our business activities and providing services to you, the Company processes Personal Data in accordance with applicable laws and regulations, including Law No. 27 of 2022 concerning Personal Data Protection (“PDP Law”), as amended from time to time.

Processing of Personal Data includes activities such as obtaining, collecting, recording, organizing, storing, updating, displaying, announcing, transferring, disseminating, deleting, and/or destroying Personal Data.

In processing Personal Data, the Company relies on one or more of the following legal bases:

• Your valid and explicit consent as the Data Subject;
• Performance of an insurance policy, agreement, or contractual relationship between the Company and you;
• Compliance with legal obligations or orders from authorized authorities;
• The Company’s legitimate interests, provided that such interests do not override the rights and freedoms of the Data Subject.

The Company ensures that all Personal Data processing activities are carried out in accordance with the PDP Law.

Retention Period and Processing Duration of Personal Data

The Company retains and processes your Personal Data for as long as:

• It is necessary to fulfil the purposes of processing as described in this Policy.
• The contractual relationship remains in effect (for example, while your insurance policy is active); and
• Required to comply with applicable legal and regulatory obligations.

We will protect and ensure the security of the Personal Data we process. Your Personal Data will be retained, processed, and used for as long as the above conditions apply and for up to ten (10) years after any of those conditions no longer apply, or, to the extent not contrary to the insurance policy contract and applicable regulations, from the date a request for deletion or destruction of Personal Data is received by the Company (the “Retention Period”).

Data Subject Rights

In accordance with the PDP Law, you as a Data Subject have the right to:

1. Obtain information regarding the identity of the data controller, the legal basis, and the purpose of processing of your Personal Data;
2. Access and obtain a copy of your Personal Data;
3. Correct or update inaccurate Personal Data;
4. Withdraw your consent to the processing of Personal Data;
5. Request deletion or destruction of Personal Data in accordance with applicable law;
6. Object to certain processing activities;
7. Object to decisions based solely on automated processing;
8. Obtain and/or use your Personal Data in a structured and commonly used format (data portability);
9. Lodge a complaint with the competent authority in the event of a violation.

We will update and/or correct any errors or inaccuracies in your Personal Data no later than three (3) business days after the request has been declared complete and verified in accordance with applicable procedures.

Mechanism for Exercising Data Subject Rights

To exercise your rights, you may submit a request through:

• Email: cs@pfimegalife.co.id
• Telephone: +62-21 2954 5555
• Written correspondence to the Company’s address as stated in this Policy.

Your request will be verified to ensure security and prevent unauthorized access. The Company will respond to your request within the timeframe prescribed by applicable laws and regulations.

How We Use “Cookies” and Other Data Collection Tools

The Company may place electronic “cookies” in the browser files of your computer or mobile device when you access the Company’s website. Cookies are pieces of information transferred by the Company’s website to your computer or mobile device so that our systems can recognize your browser and adjust the information displayed on our website according to your interests.

For example, if you have previously accessed the Company’s website and viewed your account information or made inquiries regarding certain services on the website, cookies enable us to display information consistent with your account and/or interests during your subsequent visits to the website. In addition, the Company or its third-party service providers or business partners may place cookies on your computer or mobile device that can be matched with the personal information we maintain to pre-fill certain online forms for your convenience.

We also use cookies to analyze the use of our website by visitors. Such analysis helps us better understand which sections of our website are most useful and popular so that we can make periodic improvements and updates.    

Most web browsers automatically accept cookies. You may modify your web browser settings to refuse cookies or to notify you when a cookie is being placed on your computer or mobile device. However, please note that refusing certain cookies when visiting our website may affect certain parts of the website that may not operate as efficiently compared to when such cookies are allowed. For example, if you refuse cookies from our website, you may not be able to access certain locations as expected, view default pages or form pre-fill features, or easily access links or pages you previously visited.

We and our service providers or third-party advertising servers may also use cookies or similar technologies to collect information regarding your browsing activities at any time and on any website after you use our Online Services.

Internet Communication Security

The Internet is not a secure medium. We make reasonable administrative, technical, and physical efforts to protect Personal Data. When you enter sensitive information (such as credit card numbers or social security numbers) on our website, we encrypt such information using secure socket layer (SSL) technology or similar technology while it is transmitted or displayed within our website.

However, no method of data storage can guarantee 100 percent security, and we are not responsible for any loss, damage, or harm you may suffer because of transmitting information to or from the Company via the Internet.

We limit access to your Personal Data collected from our website to our employees, affiliated employees, or other parties who need to know such information to provide services to you or to conduct our normal business activities.

How to Contact Us and Access or Correct Your Information

If you have any questions or wish to access or correct Personal Data that you have provided to us through our Online Services, please send a written request to the address below, including your inquiry or request to access your information.

We will be pleased to make corrections where possible; however, we may not provide information relating to investigations, claims, litigation, or other similar matters.

Please send your request to:

PT PFI Mega Life Insurance

GKM Green Tower, 17th Floor

Jl. TB. Simatupang Kav. 89G

Pasar Minggu – South Jakarta

12520, Indonesia

Telephone: +62-21 2954 5555

Email: cs@pfimegalife.co.id

Links to Other Websites

For your convenience, we may provide links to other websites and web pages that are outside our control. We are not responsible for the privacy policies of websites or pages that are not under our control, and we do not endorse any website, service, product, or content offered on such websites or pages.

Before providing any Personal Data to such websites, we encourage you to carefully review their privacy policies.

We are not responsible for the policies and practices relating to the collection, use, and disclosure (including data security practices) of other organizations, such as Google, Apple, Microsoft, Facebook, other application developers, application providers, social media platform providers, operating system providers, wireless service providers, or device manufacturers, including any Personal Data you disclose through or in connection with our App or social media pages.

Consent

By accessing this website, you indicate your acceptance of this Privacy Policy and the Terms of Use of this website. If you do not agree with this Privacy Policy or the Terms of Use, please refrain from accessing this website or using our Online Services.

The Online Services are not intended for use in any country or jurisdiction where such use would violate applicable law. If you fall into such category, you are not permitted to access this website or use our Online Services.

Provision of Online Services

This website and Online Services are provided by us within the territory of the Republic of Indonesia and are subject to the laws and jurisdiction of the Republic of Indonesia. 

Prevailing Language

This website is made available in English and Indonesian for convenience purposes. In the event of any conflict, discrepancy, or inconsistency between the two versions, the Indonesian version shall prevail and be deemed the official version. 

Changes to This Privacy Policy

We may amend this Privacy Policy from time to time. Any changes or modifications will become effective upon being posted.

Your continued use of the website or digital platforms linked to this website after the revised Privacy Policy has been posted will be deemed as your acceptance of the updated Policy. If you do not agree with the revised Privacy Policy, please discontinue use of the website and Online Services.