Privacy Policy

This Privacy Policy explains how Sanima GIC Insurance Ltd. (“SGIC”, “we”, “us”) collects, uses, discloses, and protects personal information gathered through this website (sgic.com.np) and through the services offered on it — including insurance enquiries, premium calculators, online claim filing, complaint/grievance submissions, Right to Information (RTI) requests, and job applications.

It applies to visitors, policyholders, claimants, complainants, RTI requesters, and job applicants. It does not cover information you provide directly to a branch office, agent, or surveyor outside this website — those interactions are governed by the same underlying laws but are not tracked by this site.

This Policy is framed to meet Nepal's applicable legal requirements, principally:

• The Individual Privacy Act, 2075 (2018) — requires informed consent before collecting personal or family data, restricts its use to the purpose for which it was collected, and obliges the data holder to keep it secure.
• The Electronic Transactions Act, 2063 (2006), §11 — governs “confidential information” (biometric data, financial statements, bank details, identity documents, medical records) and prohibits its unauthorized collection, storage, or disclosure.
• The Insurance Act, 2079 (2022) and directives of the Nepal Insurance Authority (NIA) — govern policyholder recordkeeping, the grievance-hearing mechanism (see our Complaints page), and RTI intake (see our RTI Request page).
• The National Cyber Security Policy, 2080 (2023) — sector-wide baseline expectations for securing digital systems and citizen data.

We collect only what a given form on this site actually asks for:

• Contact form: name, phone, email, subject, message.
• Complaint / grievance form: name, phone, email, complaint category, related policy number (if any), and a description of the complaint.
• RTI request form: name, phone, email, address (optional), and the information you are requesting.
• Claim submission form: insured name, phone, email, policy number, loss details, and any policy or supporting documents you choose to upload.
• Job application form: name, email, phone, address, LinkedIn profile (optional), desired salary and start date (optional), your uploaded resume, and any answers to job-specific screening questions.
• Automatically, from anyone browsing the site: standard server logs (IP address, browser type, pages visited, timestamps) used only for security (e.g. abuse/rate-limit detection) and basic traffic analysis — not for individual profiling.

• To respond to enquiries, process claims, and resolve complaints or RTI requests, each of which generates a reference number you can use to follow up.
• To send you a confirmation email when you submit a complaint, RTI request, or claim, and to notify our internal team so it can be actioned.
• To evaluate job applications against open vacancies.
• To detect and prevent spam, fraud, and abuse of our public forms (e.g. rate-limiting and CAPTCHA verification).
• To meet our recordkeeping obligations to the Nepal Insurance Authority and other regulators.

We do not sell or rent personal information. We share it only where necessary, and only with:

• Reinsurance partners, where a claim requires it.
• The Nepal Insurance Authority, courts, or other government bodies, where legally required or compelled.
• Service providers that support our operations (e.g. our email delivery provider, sending you a confirmation email) — bound to use your data only to perform that service.

We retain complaint, RTI, claim, and application records for as long as needed to resolve the matter and to satisfy the recordkeeping periods required by NIA directives and the Insurance Act, 2079, after which they are archived or deleted per our internal retention schedule. Exact retention periods per record type are being finalized with SGIC's compliance team and will be published here once confirmed.

• Access to submitted forms (complaints, RTI requests, claims, applications) is restricted to authorized SGIC staff only — the public-facing website itself has no ability to read this data back.
• Every public submission form is protected against automated abuse (CAPTCHA and rate-limiting).
• The site is served over HTTPS, and administrative access is password-protected with account lockout after repeated failed attempts.
• Uploaded documents (claim attachments, resumes) are restricted by file type and size before being accepted.

Under the Individual Privacy Act, 2075, you may:

• Ask what personal information we hold about you and why.
• Ask us to correct inaccurate information.
• Withdraw consent for uses beyond the purpose it was originally collected for, where applicable.

You can exercise any of these by contacting our Information Officer (see below), or by filing a formal request through our RTI Request page.

This site uses only strictly necessary cookies (e.g. to keep an admin session signed in) and does not currently use third-party advertising or cross-site tracking cookies.

Our services are directed at adults capable of entering an insurance contract. We do not knowingly collect personal information from children through this website.

We may update this Policy as our practices or Nepal's legal requirements evolve. The date below reflects the last update; material changes will be reflected here.