Last updated on March 23, 2026

Preamble: PNB MetLife’s Privacy Principles

PNB MetLife India Insurance Company Limited (“PNB MetLife” or “the Company”) is committed to upholding the highest standards of privacy and data protection for all individuals whose personal data it processes, including customers, employees, partners, vendors, and other stakeholders. Our Privacy Principles guide how we collect, use, process, store, disclose, retain, and safeguard personal data in accordance with including the Digital Personal Data Protection Act, 2023 (Act), other applicable statutes and regulatory provisions.

Respect Privacy Rights

We respect the data protection rights of individuals whose personal data we processes, including customers, employees, partners, vendors, and other stakeholders.

Process Personal Data for a Legitimate Purpose

We collect and process personal data lawfully, fairly, and transparently, and only for specific, explicit, and legitimate business purposes. All such purposes are clearly outlined in our privacy notices.

Protect Personal Data

We follow data minimisation principles and implement appropriate technical and organisational safeguards to protect personal data from unauthorised access, misuse, loss or disclosure in accordance with the Act, other statutes and applicable regulatory provisions.

Maintain Accountability

We remain accountable for complying with applicable laws and this Privacy Policy. Our governance structures, regular training, monitoring activities, and enforcement mechanisms ensure responsible and lawful personal data handling in accordance with the Act, other statutes and applicable regulatory provisions.

Policy Statement (Scope and Purpose)

This Privacy Policy applies to all personal information (PI) processed by PNB MetLife relating to its customers, employees, job applicants, contractors, vendors, service providers, business partners, intermediaries, distributors, agents, and any other stakeholders whose PI is collected or otherwise processed by the Company. PNB MetLife collects, uses, stores, shares, and processes PI strictly for lawful and legitimate purposes, in accordance with the Act, other applicable statutes, and applicable regulatory provisions.

• Collection of Information – To provide insurance products and services to policyholders and prospective customers; servicing customer requests; fulfilling legal and regulatory obligations; conducting underwriting, risk assessment, and fraud prevention measures; and delivering subsequent policy-related and contractual services in accordance with the Act, other statutes and applicable regulatory provisions.
• Usage of Information – To administer and service insurance policies, process and settle claims, manage and enhance customer relationships, provide necessary support and policy-related services, and improve products, systems, and overall customer experience
• Sharing of Information – To disclose PI only to authorised third-party service providers, vendors, reinsurers, regulators, or group entities strictly on a need to know basis and subject to appropriate contractual, confidentiality, and security safeguards. PI collected through the proposal form during solicitation or issuance of policy shall not be shared with any third party without the explicit consent of the policyholder, except where such disclosure is necessary for providing policy-related services or is otherwise permitted under the Act, other statutes and applicable regulatory provisions.
• Storage and Retention of Information – To retain PI only for the period necessary to fulfil the lawful purposes for which it was collected, or as required under applicable laws and regulations mandates, or until withdrawal of consent where legally permissible. All such information is maintained with strict confidentiality and safeguarded through appropriate security measures.
• Communication and Changes to the Privacy Policy – To communicate with individuals regarding products, services, policy updates and material changes to this Privacy Policy through appropriate channels as and when required.
• Information Security – To protect PI through reasonable administrative, technical and physical safeguards to prevent unauthorised access, misuse, alteration, loss, or disclosure.

This Privacy Policy establishes the principles and minimum standards for processing Personal Information (PI) across all Company operations. It applies to all individuals whose Personal Information (PI) is handled by the Company, including customers, policyholders, website users, employees, job applicants, vendors, distributors, intermediaries, and other service providers. This obligation shall extend to and govern all individuals whose PI is processed by the Company, whether or not they are customers or policyholders. The Company processes PI across related business processes such as customer onboarding and due diligence, customer servicing and claims handling, website and digital platform usage, HR operations and employee benefits, recruitment and onboarding, vendor onboarding and management, distributor management, intermediary engagement activities, procurement operations, regulatory reporting, fraud prevention, and IT system operations. By accessing the website or using our services, you agree to this Privacy Policy

What is Personal Information?

Personal Information (Personal Data) means any data about an individual who is identifiable by or in relation to such data. This includes any information that can directly or indirectly identify a person, in accordance with the definition under the Digital Personal Data Protection Act, 2023.

The DPDP Act applies to digital personal data or data that is collected oAline and later digitized.

This includes, without limitation:

• Name, contact details, and address
• Government-issued identification numbers (e.g., PAN, Aadhaar, passport)
• Financial and account information (e.g., bank details, transaction information)
• Health and medical information (e.g., medical records, health conditions)
• Biometric identifiers (e.g., fingerprints, facial recognition data)
• Technical identifiers (e.g., IP address, device ID, metadata)
• Employment-related information (e.g., job role, employee records)

Applicable Law

PNB MetLife processes personal data in accordance with applicable Indian laws and regulations, including:

• Information Technology (Amendment) Act, 2008 (as amended from time to time)
• Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (as amended from time to time)
• Digital Personal Data Protection Act, 2023 (as and when applicable)

Where multiple legal frameworks apply, compliance is determined based on jurisdiction, applicability and regulatory intent.

Third Parties

For the purposes of this Privacy Policy, a Third Party includes any service provider, contractor, consultant or vendor engaged by PNB MetLife to process personal data on its behalf.

PNB MetLife ensures that such third parties:

• Are bound by contractual confidentiality and data protection obligations
• Implement appropriate security measures
• Process personal data only for authorised purposes
• Are subject to periodic oversight and assessment

Your Rights

You have the right to access, correct or erase your personal data and to withdraw your consent in accordance with applicable data protection laws, including the Digital Personal Data Protection Act, 2023.

Requests may be submitted through the grievance redressal mechanism described in this Privacy Policy or write to askprivacy@pnbmetlife.com