Effective Date: 17/04/2025

Gulf Insurance Group/Jordan, a duly registered a public listed shareholding company in the Hashemite Kingdom of ‎Jordan, holding national number )200001238) (“we”, “our”, “us”, “GIG/Jordan”)‎ is dedicated to providing insurance services, we operate the websites located at (https://www.gig.com.jo) and other products, services, and mobile applications with links to these Privacy Policy (“Privacy Policy”), including without limitation (GIG-JORDAN application) (collectively, the “Site(s)”, “Website(s)”, “Sales Channels”, and/or “App(s)”, unless otherwise specified). Users of the Sites and/our customers of our Sale Channels/purchaser of the Insurance Policies are referred below as “Users”, “Customer(s)”, “you”, “your”, or “yours” as the case may be.

This Privacy Policy shall be read in conjunction with the Terms and Conditions, and any applicable policies and procedures set by GIG/Jordan. By accessing or using any of the Sites or Services, you agree to this Policy, as well as the Terms and Conditions and any other terms, agreements, declarations of rights, consent forms, or policies referred to herein, as applicable. Please do not use the Sites or Services if you do not agree with this Privacy Policy or any of the papers mentioned herein.

When visiting or using any of the Sites or Services, or any website or mobile application that reference or link to this Privacy Policy, your information will be processed by us for the purposes stated below, and in accordance with the Terms and Condition, where applicable and legally permissible.

We Appreciate Your Privacy

Your privacy and personal information are considered a very important matter to us at GIG – Jordan, whereby we deal with all your personal information with the utmost level of confidentiality and in a manner that protects its privacy.

What is the purpose of this Privacy Policy?

This Privacy Policy describes our personal information collection and disclosure methods regarding our Website(s) and/or the Application(s), as well as any other websites, mobile applications, or other services that has a link to this Privacy Policy. In this Privacy Policy, we refer to "personal information" and/or “personal data” as information that, on its own or in conjunction with other information, might identify you.

The personal information we receive or obtain through your use of the Services may be subject to different laws. Please refer to us if your jurisdiction requires different policies than the ones mentioned herein.

What information do we collect from Users and how is it used?

The following describes the types of personal and other information we may collect about you, and how we may use and maintain that information, including, but not limited to:

• Personal Information. We may collect information such as your name, age, date of birth, email address, phone number, account information, employment, biometric data, medical history and claims data, and other identifiers that you provide directly to us through our Website(s) and/or Application(s) (“Personal Information”).
• Account/Order Information. Before you can utilize certain services that we offer on the Website(s) and/or the Application(s) or otherwise, we may ask you to register/submit an order. We may collect your username, password, other contact information, and personal details. We request this information for identification purposes, to communicate with you regarding your account, order and/or requested Insurance Services, and to facilitate the functioning of certain services.
• Forms. To fully utilize the Website(s) and/or the Application(s) we offer, you may be required to fill out forms that will contain Personal Information, including sensitive personal information such as health insurance coverage, diagnosis, and treatment.
• Surveys. At various points in your experience with us, you may be presented with optional surveys intended to measure your service experience in some way.
• Correspondence. We may collect information from your communications with us, including emails, messages, and customer support interactions, postal, in-app chat, phone, or video, and we may retain those records as per our internal policies (for example, correspondence log(s) and exchanged messages and information).
• Technical information and usage information. We collect information about users’ devices (such as but not limited to browser and device types, device identification numbers, or other online identifiers) and users’ utilization and navigation of our Website(s) and/or the Application(s). This helps us improve our Website(s) and services. For example, our Website(s) and/or the Application(s) might track the URL that you visited before you came to our Website(s) and/or the Application(s), the URL to which you next go, and your Internet Protocol (IP) address. We use your IP address to help diagnose problems with our server and to administer our Sites. Your IP address also is used to help identify you and to gather broad demographic information.
• Information Collected With Cookies. We may use cookies and other tracking technologies to collect information about your use of our Website(s) and/or Application(s) and to improve your user experience. Cookies make using the Internet easier by, among other things, saving your preferences for you. We may also use cookies to deliver content tailored to your interests. Our cookies may enable us to relate your use of our Website(s) and/or the Application(s) to personally identifying information that you previously submitted, such as calling you by name when you return to our Website(s) and/or the Application(s). If you reject cookies, your experience might be less efficient and enjoyable. The data collected with cookies helps us improve marketing, analyze site usage, enhance content and products, and customize our site’s layout and services. More details about specific cookies will be provided later in this document.

To whom do we disclose information about you that we collect?

We will not share, rent, sell or otherwise disclose any of the personally identifiable information that we collect about you, except when we have your written/online permission, according to the applicable regulations, or in any of the following situations (considering the applicable regulations and without infringing our obligations):

• If you request an Insurance Service(s), we may use and share your information with third parties to fulfill your request; We may disclose information about you for purposes such as to provide services available on the Website(s) and/or the Application(s); to coordinate with insurance, reinsurance and excess or stop loss insurers; to enforce our Customer’s rights; to protect against actual or potential fraud; to resolve Customer(s) inquiries or disputes; to receive payments; to carry out our business; to protect the confidentiality or security of our records; to administer case management programs; to perform auditing and ratemaking functions; to enable our service providers to perform marketing services on our behalf and inform Users about our own products or services; to comply with applicable legal requirements.
• We review records to assess service quality while minimizing personal identification. We may use and publish anonymous data in various media without including your name or identifying information; we will use only anonymous data for any public purpose;
• We may disclose information that we collect about you to our third-party contractors who perform services for us in order to provide certain services or to complete or confirm a transaction that you conduct/ed with us;
• We may contact you with relevant service information through various communication methods;
• Anonymized, aggregated data may be shared for marketing or promotional purposes without revealing your identity (for instance, that a certain percentage of our Sites’ users are living in a particular country). We do not disclose any information that could be used to personally identify you. Certain information, such as your password, is not disclosed to marketing advertisers at all, even in aggregate form;
• In the event of a merger, acquisition, or sale, your information may be transferred, though compliance with this Privacy Policy by the receiving entity is not guaranteed;
• We may disclose your information, to the extent permitted by law, in court or in the stages leading to possible legal action arising from improper use of this website, application or services, or due to a dispute you initiate in connection with the related services. Moreover, we may be legally obligated to disclose information about you to the government or to third parties under certain circumstances, such as in connection with illegal activity on our Website(s) and/or the Application(s) or to respond to a subpoena, court order or other legal process. We reserve the right to release information to law enforcement or government officials as we deem necessary.

What security measures do the Sites employ?

We encrypt your information before it's sent to us and take steps to protect against unauthorized access. However, our systems may occasionally need maintenance or experience issues or security breaches beyond our control.

Please be aware that despite our best efforts and the guidelines in this Policy, no data transmission over the Internet or encryption method can be guaranteed to be 100% secure.

How can you correct or update information that we collect about you?

You must correct or update your information by managing your account profile, contacting us, or submitting a privacy request. We will respond as required by our agreements and legal obligations. We may retain original and updated information for technical reasons, dispute resolution, troubleshooting, and agreement enforcement.

What are the policies of linked Sites and other third parties?

You should be aware that when you are on the Website(s) and/or the Application(s), you might be directed to other websites that are beyond our control, and we are not responsible for the privacy practices of third parties or the content of linked websites. We encourage you to read the posted privacy policy whenever interacting with any website.

How will I know about changes in the Privacy Policy?

Our Website(s) and Application(s) are continuously progressing, and changes may occur at any time. We reserve the right to modify or remove any part of this Privacy Policy at our discretion, without prior notice unless legally required. Please visit this page periodically for updates. Changes take effect upon posting. If you disagree with this Policy, discontinue use of our Website(s), Application(s), and Insurance Services. Continued use after changes are posted signifies acceptance.

What is our policy on children/lacking legal capacity users of our Sites?

We do not knowingly collect or maintain personally identifiable information from persons under 18 years old and/or lacking legal capacity, and no part of our Website(s) and/or the Application(s) is directed to persons under 18 unless through their guardian or parent. IF YOU ARE UNDER 18 YEARS OF AGE AND/OR LACKING LEGAL CAPACITY, PLEASE DO NOT USE OR ACCESS OUR SITES AT ANY TIME OR IN ANY MANNER. Where permitted, any personal information relating to those children will be information governed by this Privacy Policy.

If you are a parent or guardian and discover that your child under the age of 18, has obtained an account and/or submitted an order through our Website(s) and/or Application(s), then you may alert us using the contact information below under “Contact Us” and request that we delete that child’s personal information from our systems, where applicable. If we learn that we have collected the personal information of a child under 18, outside the above circumstances we will take steps to delete the information as soon as possible, except where permitted by applicable law.

What law governs my use of the Sites and our Services?

Any dispute over privacy or the terms contained in this Privacy Policy will be governed by the law of the Hashemite Kingdom of Jordan. You also agree to abide by any limitation on damages contained in our Terms and Conditions. The Jordanian Courts (Palace of Justice/ Amman Court) shall have the jurisdiction in regards to any claim arises in regard to this Privacy Policy.

Information about Particular Services

Please note that the descriptions below concerning particular services may (but not necessarily) apply to all services, sites, or mobile applications provided by GIG/Jordan.

Infrastructure monitoring

This service allows the Website to monitor the use and behavior of its components to improve its performance, operation, maintenance and troubleshooting.

Personal Data are processed depending on the characteristics and mode of implementation of these services, whose function is to filter the activities of this Website.

Managing contacts and sending messages

This service provides the capability to manage a database of email contacts, phone contacts or any other contact information to communicate with the User.

This service may collect data concerning the date and time when the message was viewed by the User, as well as when the User interacted with it, such as by clicking on links included in the message.

Remarketing and Behavioral Targeting

This service allows the Site and its partners to inform, optimize and serve advertising based on past use of this Application by the User, by tracking Usage Data, using Cookies and information that is transferred to the partners that manage the remarketing and behavioral targeting activity.

Remarketing through Google Analytics for Display Advertising (Google Inc.)

Google Analytics for Display Advertising is a Remarketing and Behavioral Targeting service provided by Google Inc. which connects the tracking activity performed by Google Analytics and its Cookies.

Personal Data collected: Cookies and Usage data.

User database management

These kinds of services enable us to track user activities through analytics features and create user profiles based on information provided by the user, such as an email address, a personal name, or other details. In order to create private profiles that we can show and utilize to enhance this Site, this Personal Data may also be compared with publicly accessible information about the User (such as social network profiles).

Some of these services may also enable the sending of timed messages to the User, such as emails based on specific actions performed on this Site.

Contacting the User

Contact Forms

By providing your information on any contact form, the User gives this Website permission to use that information to respond to quotes, information requests, and other types of requests as specified by the form's header.

Personal Data collected: various types of Data.

System logs and maintenance

This website and any third-party services may gather files (system logs) that document user interaction with the website for operational and maintenance purposes. Other Personal Data (like the IP Address) may also be used for this purpose. To help troubleshoot crashes and other issues, logging data may be collected.

Web Beacons

A web beacon (also referred to as clear gif, pixel tag or single-pixel gif) is a transparent graphic image used in tandem with cookies that enables us to record a user’s actions.

We might use web beacons to count users who have visited certain pages, verify system and server integrity and for similar statistical measures. We may also use pixel tags in HTML-based emails sent to its users to track which emails are opened by recipients.

Data Retention

We retain personal information, subject to this Privacy Policy, only for as long as necessary for the purposes for which the data was collected and processed, or according the applicable laws and our internal policies. Users may find specific information regarding the legitimate interests pursued by us within the relevant sections of this document or by contacting us at the contact details below under “Contact Us”.

Data collected for the provision of Services is retained for the longer of as needed to provide Services; as specified in a relevant agreement; as per our internal policies; or as otherwise required, including by applicable law or regulation, including but not limited to retention of records of completed Services as required by law, regulation and for the other reasons described in this policy.

Data Is required to provide Services

Unless otherwise specified, all personal information (as defined under the Jordanian Law) requested is mandatory and your choice to not provide such personal information may make it difficult to provide services to you.

If we have made clear that some personal information is not mandatory, you are free not to provide us with this personal information without consequences on the availability or the functioning of the service. You are welcome to contact us at the contact details below under “Contact Us”.

Additional information about your personal information

Upon your request, we may provide you with additional and contextual information concerning particular services or the collection and processing of Personal Data.

Your Personal Data rights

Solely to the extent applicable to us, and as required by the applicable law, you may have certain rights and protections about the collection, sharing, and use of your personal information including as follows:

• Right to Access Your personal information: You can ask us for a copy of the Personal Data we have about you.
• Right to Rectification/Correction: You can also ask us to change, correct, or update your personal information in certain cases, especially if it is inaccurate.
• Right to Erasure/Right to be Forgotten: You can ask us to stop using or erase all or some of your personal information (if we have no legal right to keep using it).
• Right to Data Portability: You can ask us for a copy of the personal information you provided to us in a commonly used and machine-readable format.
• Right to Object or Restrict Processing: You can object to or ask us to restrict processing under certain circumstances.

Additional information regarding methods of processing

The personal information processing is carried out using computers and/or IT enabled tools. In addition to us, in some cases, the personal information may be accessible to certain types of persons in charge, involved with the operation of this Website (administration, sales, marketing, legal, system administration) or external parties (such as third-party technical service providers, mail carriers, hosting providers, IT companies, communications agencies) appointed, if necessary, as Data Processors by us.

Legal basis for processing

We may process personal information relating to Users if one of the following applies:

• Users or their agents (including group sponsors and employers) have given their consent for one or more specific purposes. Note: Under some legislations we may be allowed to process Personal Data until the User objects to such processing (“opt-out”), without having to rely on consent or any other of the following legal bases;
• provision of personal information is necessary for the performance of an agreement with the User or an authorized agent of the User (such as a group sponsor or employer) and/or for any pre contractual obligations thereof;
• processing is necessary for compliance with a legal obligation to which we are subject;
• processing is related to a task that is carried out in the public interest or in the exercise of official authority vested in us;
• processing is necessary for the purposes of the legitimate interests pursued by us or by a third party.

Place of processing

Personal information is processed in various locations, including data centers and other sites involved in the processing. These locations may have different, and sometimes less stringent, privacy protections compared to other jurisdictions. By providing Personal Data, using this website, or requesting services, you consent to the transfer and processing of your Personal Data in these locations, which may include countries with different privacy regulations.

Purposes of processing

Personal Data about you is collected to allow us to provide services to you, as well as for the following purposes: Analytics, Remarketing and behavioral targeting, Interaction with external social networks and platforms, Managing contacts and sending messages, User database management, Content commenting, Displaying content from external platforms, Content performance and features testing, Generation models of medical and clinical conditions, Generation models of physician and clinical performance, Infrastructure monitoring and Contacting the User.

Information not contained in this policy

More details concerning the collection or processing of Personal Data may be requested from the Data Controller at any time. Please see the contact information below under “Contact Us”.

Data Protection Officer

Please feel free to contact our Data Controller via the contact details below under “Contact Us”.

Legal Basis

This privacy statement has been prepared based on the Jordanian Data Protection Law.

How to exercise your privacy rights

How to make a request

To exercise rights described throughout the Policy, you must submit to us a “verifiable request” by:

• providing adequate information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative; and
• describing your request with adequate detail that allows us to properly understand, evaluate, and respond to it.
• Requests from Customer(s) are considered verified if submitted using your account through our Website(s) and/or the Application(s)-if applicable-, calling us and confirming your identity, or by submitting via the application (e.g., using the chat service, or via an open case). If, however, there is indication or suspicion of fraud or other malicious activity on the Customer’s account, we may suspend reliance on these verification methods and defer to other methods to confirm authenticity.
• You may alternatively contact us via the information provided below under “Contact Us”. However, please note that email requests are not considered verified, and we may request additional information from you (that we would already have in our records) in order to confirm your identity.
• And we will not process any requests of children under 18 years of age without verifiable consents from their parents or legal guardians.

How and when we are expected to handle your request

Unless otherwise specified in this Privacy Policy, the following applies for timing and expectations around how and when we will respond to your requests.

To the best of our ability, we will confirm receipt of your verifiable request as soon as possible and provide information about how we will process your request.

Should we deny your request, we will explain to you the reasons behind our denial.

We do not charge a fee to process or respond to your verifiable request. In any case, we will communicate our choices and explain the reasons behind it.

Contact Us

If you have questions, want to submit a request, have concerns about this Policy, or would like to report a violation, see the below contact options:

• You may email us at Call_center@gig.com.jo
• You may call our support line at 00962 6 5609888