Privacy policy

About this document

This policy describes how A3.Solutions collects, uses and protects the personal data of users of the A3.Insurance system. The insurance company that works in the system remains the controller of its clients’ data, and A3.Solutions processes that data on its behalf.

1. What data is processed

Data entered by the user: full name, IIN or INN, date of birth, email, phone number, address, position and organization, bank details for payouts. Data collected automatically: IP address, browser and operating system type, sign-in history, activity log and cookies.

2. Why the data is used

To perform insurance contracts, settle claims and process payments; to prepare reports for insurance supervisory authorities; to find and fix system errors; to protect against fraud and unauthorized access; to send notifications about policy status and changes in the system.

3. To whom the data is disclosed

We do not sell personal data. Data may be disclosed to regulators (ARDFM, the Bank of Russia and other authorities) when required by law; to state insurance databases to verify and register contracts; to cloud providers and processing centers under confidentiality agreements; to reinsurers to the extent needed to transfer risk.

4. How the data is protected

Personal data is encrypted at rest (AES-256) and in transit (TLS 1.3). Access is granted through roles on the principle of least privilege, sign-in supports two-factor verification, and every action with data is recorded in a log with signed events. Backups are encrypted.

5. How long the data is kept

Insurance contract data is kept for 5 years after the contract ends, or longer if the regulator requires it. Claims data is kept for 7 years after settlement, the activity log for 3 years, and sign-in data for 1 year after the last sign-in.

6. Your rights

You have the right to request a copy of your data, correct inaccurate data, demand deletion subject to legal requirements, restrict processing and receive your data in a machine-readable format. Send requests to privacy{'@'}a3.solutions.

7. Cookies

The website and the system use necessary cookies to operate and analytics cookies to improve the service. Cookie settings can be changed in your browser.

8. Contacts

Questions about personal data: privacy{'@'}a3.solutions. Address: Almaty, Kazakhstan.