Data Privacy Policy

Home

NIC Holdings Company Limited

Policy Statement

NIC Holdings Company Limited (“NIC”, “we”, “our”, or “us”) is committed to safeguarding the fundamental right to privacy. We respect and protect the personal information we collect through our various services, platforms, and interactions.

Who We Are

NIC Holdings Company Limited is a financial services provider and acts as both a Data Controller and, where applicable, a Data Processor in relation to personal data processed in connection with our products and services.

Personal Data We Collect

We may collect personal data either directly from you or indirectly through intermediaries, service providers, employers, and other authorized third parties.

Categories of Personal Data

Type of Information	Examples
Identification & Contact Information	Full name, physical address, email address, telephone number, gender, marital status, date and place of birth
Government-Issued Information	National ID Number, Tax Identification Number (TIN), Passport details, NSSF details
Employment & Education Information	Employment history, employer details, academic background, professional memberships
Financial Information	Bank account details, income information, payment card details, transaction history, other financial records
Insurance Risk Information	Information necessary to assess insurance risk, including health status, medical history, disability details, lifestyle habits (e.g., smoking), and previous claims history
Audio-Visual Data	Photographs, CCTV footage, voice recordings (e.g., call recordings) for security, service quality, and fraud prevention
Online Activity Information	IP address, device data, browsing behavior on our website collected via cookies and similar technologies

This list is not exhaustive, and additional personal data may be collected where necessary in the course of providing our services.

How We Collect Personal Data

We collect personal data from several sources, including:

Application, proposal, and claim forms
Direct interactions via phone, email, or in person
Our website (www.nic.co.ug) and digital platforms
Mobile applications and online portals
Employers, intermediaries, and business partners
Medical professionals, investigators, and claims experts (during claims processing)
Government bodies and regulatory authorities
Credit reference bureaus (where credit risk assessment is required)
Social media platforms where you engage with us

How We Use Your Personal Data

We process personal data for purposes that include:

Customer identification and due diligence (KYC/CDD)
Assessing applications for insurance and other financial products
Policy administration and customer support
Claims assessment and settlement
Communicating with customers, partners, and service providers
Fraud prevention and risk management
Meeting legal and regulatory obligations
Improving products, services, and customer experience
Sending service updates, renewal notices, and (where consent is given) marketing communications

You may opt out of marketing communications at any time.

Legal Basis for Processing

We process personal data based on one or more of the following legal grounds:

Performance of a contract
Compliance with a legal or regulatory obligation
Legitimate business interests (such as fraud prevention and service improvement)
Consent, particularly when processing sensitive personal data

Data Security

NIC implements appropriate technical, physical, and organizational safeguards to protect personal data against unauthorized access, alteration, disclosure, or loss. These measures include secure IT systems, access controls, encryption, and confidentiality obligations for staff and service providers.

Please note that internet transmissions are not completely secure, and while we take reasonable precautions, we cannot guarantee absolute security.

Sharing of Personal Data

We may share personal data where necessary with:

Insurers, reinsurers, and intermediaries
Medical professionals and claims assessors
Banks and payment processors
Lawyers, investigators, and loss adjusters
IT and service providers supporting our operations
Regulatory and supervisory authorities
Law enforcement agencies where required by law

All third parties are required to maintain confidentiality and adequate data protection standards.

International Data Transfers

In some cases, your personal data may be transferred outside Uganda. Where this occurs, NIC will ensure appropriate safeguards are in place in accordance with applicable data protection laws.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, regulatory, and operational requirements. After this period, data may be securely deleted or anonymized.

Your Data Protection Rights

Subject to applicable law, you may have the right to:

Access your personal data
Request correction of inaccurate or incomplete data
Request deletion of your data in certain circumstances
Restrict or object to processing
Withdraw consent where processing is based on consent
Request data portability
Lodge a complaint with the relevant data protection authority

To exercise your rights, please contact us using the details below.

Cookies

Our website uses cookies and similar technologies to improve user experience, analyze website usage, and support our services. You can control cookie settings through your browser preferences.

Updates to This Policy

NIC may update this Data Privacy Policy from time to time. Where significant changes are made, we will notify you through appropriate channels, including our website.

Contact Us

For questions, requests, or concerns regarding your personal data, please contact:

Data Privacy Office
NIC Holdings Company Limited
Plot 3 Pilkington Road
P.O. Box 118816, Kampala, Uganda
Tel: +256 417 119 900 / +256 417 119 947
WhatsApp: 0707 791476
Email: ccd@nic.co.ug
Customer Care: customerservice@nic.co.ug
Website: www.nic.co.ug