Privacy Policy

SUMMARY

Below is a summary of some key terms of this Privacy Policy. We are committed to protecting your personal information when you use our Services and we want you to be confident that your personal information is safe and secure with us. This Privacy Policy explains how we use your personal information including the following:  

• where we collect your personal information from;  

• what personal information we collect;  

• how we use your personal information;  

• who your personal information is shared with; and  

• the rights and choices you have when it comes to your personal information.  

Use of our website (our “Site”) is subject to our website Terms and Conditions. If you do not agree to these terms, please stop using the Site immediately.  

Where we refer to “personal information” in this Privacy Policy, we mean information which constitutes “personal data” under Regulation (EU) 2016/679 (the General Data Protection Regulation, “GDPR”) as applied in Cyprus by the Protection of Natural Persons with regard to the Processing of Personal Data Law of 2018 (Law 125(I)/2018). This can be any information that directly identifies you (such as your name or email address), but also information that identifies you indirectly or would identify you when pieced together with other information (such as your age, gender, demographic information, IP address, and cookie identifiers/other unique online identifiers).  

The main reason we process your personal information is to provide you with the Site and the other services that you request from us (see section 4 below) (together, the “Services”). For certain purposes set out in section 5 below, we may share your personal information with group entities, our product partners, service providers, and regulatory or governmental bodies.  We will only hold your personal information for as long as necessary to fulfil the purposes for which we hold that personal information.    

To make an enquiry or exercise any of your rights as set out in this Privacy Policy, please contact our Data Request Team at: ceo@digicare-insurance.com.  

1. Who are we?

1.1. We are DigiCare Insurance is a trading name that is owned and used for the operations of Costas Matheou Insurance agent. . We will take your privacy very seriously.

1.2. For the purposes of this Privacy Policy, references to "we", "us", "our" or "Site" are to DigiCare Insurance.For details about how your personal information is shared within the DigiCare Insurance, see section 5. 

1.3. Costas Matheou (certificate number 6882) is a  controller  in relation to the processing of the personal information that you provide to us when you use our Services. Its registered address is Eirinis 4, Paphos 8027, Cyprus. If you have any queries relating to our use of your personal information, if you want to contact our data protection officer or if you have any other related data protection questions, please contact our Data Request Team at ceo@digicare-insurance.com or write to our Data Protection Officer at Eirinis 4, Paphos 8027, Cyprus, or email the Data Protection Officer directly at ceo@digicare-insurance.com. 

2. How do we collect personal information?

2.1. We collect personal information directly from youwhen you fill in a quote or application form on our Site, contact us by email, phone or the contact forms, chat with our AI assistant (see section 11.5), or ask us to arrange an insurance policy for you. 

2.2. We collect some information automatically when you use the Site — through strictly necessary cookies, and, only with your consent, analytics and marketing cookies. See our Cookie Policy for details and for how to change your choices at any time. 

2.3. We may also receive personal information from our product partners— the insurance companies whose products we arrange — for example the status of a quotation, application, renewal or claim, so that we can assist you. 

3. What personal information do we collect?

3.1. Depending on the product you are interested in, we may collect: 

• Identity and contact details— name, email address, phone number, postal address, date of birth, nationality, and for certain products (such as immigration medical insurance) passport or ID number; 

• Quote and policy details— the information needed to price and arrange the product, such as vehicle details for motor insurance, property details for home insurance, occupation, and details of family members you ask us to include on the same policy; 

• Health information— for medical insurance products only, and only with your explicit consent (see section 7); 

• Technical information— IP address, browser and device information, and site-usage data collected by the cookies described in our Cookie Policy (analytics only with your consent). 

4. How do we use your personal information?

4.1. We use your personal information to: 

• prepare and send you the insurance quotations you request, including obtaining quotations from the insurers whose products we distribute; 

• arrange, renew and service your insurance policy, and assist you with claims; 

• respond to your enquiries by email, phone or the AI assistant; 

• comply with our legal and regulatory obligations as a licensed insurance intermediary in Cyprus (including record-keeping, anti-fraud and anti-money-laundering checks); 

• measure and improve our Site and marketing — only with your consent, through the analytics and advertising tools listed in section 11.4 and in our Cookie Policy. 

4.2. We do notsell your personal information, and we do not use it for automated decision-making that produces legal or similarly significant effects on you. Decisions about whether an insurer offers you cover, and on what terms, are made by the insurer under its own underwriting rules. 

5. Who is your personal information shared with?

5.1. Insurance companies.To obtain a quotation or arrange a policy we pass the relevant details to the insurer(s) whose product you have chosen or asked us to compare. Each insurer is its own data controller and processes your information under its own privacy policy (see section 6). 

5.2. Service providers.We use a small number of technology providers to run the Site and our business — hosting, email delivery, lead management, analytics (consent-based) and the AI assistant. The full list, including where each provider is located and the safeguard used for any transfer outside the EEA, is in section 11.4. 

5.3. Authorities.We may disclose personal information where required by law — for example to the Cyprus Superintendent of Insurance, tax authorities, or law-enforcement bodies acting under proper authority. 

6. Use of your personal information by our product partners

6.1. When an insurer prepares a quotation or issues a policy for you, it acts as an independent data controller. It may use your information for underwriting, pricing, policy administration, claims handling, reinsurance and its own regulatory compliance. Please read the privacy policy of the insurer whose product you choose — we will tell you which insurer that is before you buy. 

7. Health information (special-category data)

7.1. Medical insurance products require health information — for example the health declaration in a medical insurance application, or dates of birth and existing-condition questions used to price a quotation. Under Article 9 GDPR this is “special-category” data and receives extra protection. 

7.2. We collect health information only when you apply for or request a quotation for a medical insurance product, only with your explicit consentgiven on the relevant form, and we share it only with the insurer(s) whose product you are applying for. We do not use health information for marketing or analytics. You may withdraw your consent at any time (section 13), though without it we cannot arrange medical cover for you. 

8. What are our legal grounds for processing your personal information?

8.1. We rely on the following legal bases under the GDPR: 

• Taking steps at your request before a contract(Article 6(1)(b)) — preparing quotations and arranging the policy you ask for; 

• Consent(Article 6(1)(a); Article 9(2)(a) for health data) — the consent you give on our forms, and your cookie choices for analytics and marketing; 

• Legal obligation(Article 6(1)(c)) — record-keeping and compliance duties that apply to licensed insurance intermediaries in Cyprus; 

• Legitimate interests(Article 6(1)(f)) — running and securing the Site, preventing fraud, and responding to your enquiries, where these interests are not overridden by your rights and freedoms. 

9. What cookies do we use?

9.1. The cookies and similar technologies we use, their purposes and durations, and how to accept, reject or change your choices at any time (via the “Manage cookies” link in the footer) are described in our Cookie Policy. Analytics and marketing cookies are set only with your consent. 

10. What online advertising do we use?

10.1. We do not show third-party advertisements on our Site. We advertise our own services on Google and Meta (Facebook) platforms, and — only if you consent to marketing cookies — use their measurement tools (Google Ads conversion tracking and the Meta pixel) to understand which of our advertisements led to a quotation request. You can withdraw this consent at any time via the “Manage cookies” link in the footer. 

11. How secure is our Site and what steps do we take to keep you safe?

11.1. Your personal information’s security is very important to us. This is why, where it’s appropriate, our Site uses HTTPS to help keep information about you secure. However, no data transmission over the internet can be guaranteed to be totally secure. Certain information, for example, your credit card details, is encrypted to minimise the risk of interception during transit. 

11.2. You may complete a registration process when you sign up to use parts of the Site. This may include the creation of a username, password, and/or other identification information. Any such details should be kept confidential by you and should not be disclosed to or shared with anyone. To protect your account, we ask you to choose a strong password to access your information on our Site. A strong password should be lengthy and include a mixture of letters and numbers. Your password can only be reset with access to the email address registered in our system. 

11.3. It might sometimes be necessary for us or our suppliers to transfer your personal information outside of Cyprus, either within the European Economic Area (EEA) or outside of the EEA. Where personal information is transferred to a country outside the EEA which has not been recognised by the European Commission as providing an adequate level of data protection, we will only make the transfer if appropriate safeguards under Chapter V of the GDPR are in place — for example the European Commission's Standard Contractual Clauses, or, for providers in the United States, certification under the EU-U.S. Data Privacy Framework. 

11.4. The main service providers (processors) we use to operate the Site and our Services, the purpose for which each processes personal information, and the applicable transfer safeguard, are: 

11.5. Our Site offers an optional AI assistant (text chat and voice). Conversations with the assistant are processed by our provider ElevenLabs, Inc. in order to generate responses, and may be recorded and transcribed. Transcripts, together with any contact details you choose to share in the conversation, are sent to our customer service team so that we can follow up on your enquiry, and are retained in line with section 14. Please do not share health information or other sensitive details in the assistant unless this is necessary for your enquiry — you can always contact us by email or phone instead. 

12. How can you amend your preferences?

12.1. Any electronic marketing we send you will include clear and concise instructions to follow should you wish to unsubscribe at any time. You may also amend your marketing preferences by using the unsubscribe link in any email we send, or by emailing us at ceo@digicare-insurance.com.  

12.4. Should you no longer wish to be contacted by us, you can advise us by contacting our Customers services team on customerservices@digicare-insurance.com 

12.4.1. If you no longer wish to be contacted by partners for marketing purposes, please follow the instructions in their marketing communications, or consult their privacy policies for further information about unsubscribing. 

12.5. Please bear in mind that it may take a little while for all marketing to stop once you either tell us you’d like to opt out of marketing or withdraw your consent. Marketing may already be in transit to you, in which case we may not be able to immediately stop it. 

12.6. If you would like us to stop processing your personal information with respect to any of the services we are providing to you, please email us at ceo@digicare-insurance.com, specifying that you no longer wish us to provide you with the relevant service or to process your personal information as part of such service. 

13. Your personal information rights and how to contact us

13.1. You have certain rights under data protection legislation in relation to the personal information that we hold about you including: 

13.1.1. Right to access - The right to obtain a copy of the personal information we hold about you. Sometimes this is referred to as a DSAR (data subject access request). We’ll ask you to describe the information you require, as well as letting us know about any other email addresses you’ve used on our Site, to enable us to trace your personal information. Depending on the nature of your request, we may also ask you for your full name, your date of birth, and your full address and documents to allow us to verify your identity. Requests for copies of your personal information will be dealt with within one calendar month, unless your request is complicated or if you have made a large number of requests.  In these circumstances it may take us longer to deal with your request, in which case we will let you know if we need longer than one month to respond; 

13.1.2. Right to correct - The right to have your personal information rectified if it is inaccurate or incomplete. Requests for us to correct your personal information will be dealt with within one month, unless your request is complicated or if you have made a large number of requests.  In these circumstances, it may take us longer to deal with your request, in which case we will let you know if we need longer than one month to respond. If we believe that your personal information is accurate, we will let you know that that we will not be amending your personal information and why. As mentioned above our product partners will be acting as data controller of any of the personal information that they hold, so we will not be able rectify any such information, you should contact them directly; 

13.1.3. Right to erasure of your information - The right to request that we delete or remove your personal information from our systems.  Data protection legislation gives exceptions to this right which, if applicable, we will explain in our response to you; 

13.1.4. Right to restrict our use of your information - In some circumstances you can  ‘block’ us from using your personal information or limit the way in which we can use it, for example while we investigate a complaint that the personal information we hold about you is inaccurate; 

13.1.5. Right to data portability - The right to request that we move, copy or transfer your personal information to a specified third party, or to you, in a machine-readable and structured format (e.g. CSV files). There are exemptions – for example, this only applies to personal information which has been provided directly from you, which is held in digital format, and which we process with your consent or to fulfil a contract with you; 

13.1.6. Right to object - The right to object to our use of your personal information including where we use it for our legitimate interests or where we use your personal information to carry out profiling to inform our market research and customer demographics. If you raise an objection we will stop processing your personal information unless an exemption under EU or Cyprus data protection law applies, in which case we will let you know why we’re continuing to process your personal information; 

13.2. To make an enquiry, or exercise any of your rights set out in this Privacy Policy please contact our Data Requests Team by clicking here. Alternatively, you can email us at ceo@digicare-insurance.com. 

13.3. If you are not satisfied with the way any complaint you make in relation to your personal information is handled by us, you may refer your complaint to the Cyprus supervisory authority: the Office of the Commissioner for Personal Data Protection — 1 Iasonos Street, 1082 Nicosia (P.O. Box 23378, 1682 Nicosia), Cyprus; telephone +357 22818456; email commissioner@dataprotection.gov.cy; website www.dataprotection.gov.cy. If you live or work in another EU member state, you may also contact the supervisory authority of that member state. 

13.4. This Privacy Policy shall be governed and construed in all respects in accordance with the laws of the Republic of Cyprus and applicable EU law. 

14. How long do we keep your personal information?

14.1. We will only hold your personal information on our systems for the period necessary to fulfil the purposes outlined in this Privacy Policy or until you request it is deleted (unless a longer retention period is required or permitted by law).

14.2. Generally, you can expect us to keep your personal information while you use the Site or if you have an active account with us.  Where you have applied for or purchased products or services via the Site we will need to keep your personal information for longer for accounting purposes - up to six (6) years following the date on which it is provided to us.

14.2.1. In particular, we apply the following retention periods: 

14.4. If one of our product partners processes your personal information in order to provide you with a quote they will be acting as a controller but they should only hold that personal information for so long as is reasonable in relation to providing you with that quote.

14.5. If you purchase a product then the service provider will keep your personal information in accordance with their own retention periods and so you should check their own privacy policy for further information. 

14.6. Even if you delete or ask us to delete your personal information it may persist on backup or archival media for legal, tax, or regulatory purposes.

15. Changes to this Privacy Policy

15.1. We reserve the right to amend or modify this Privacy Policy at any time and any changes will be published on the Site. The date of the most recent revision will appear on this page. If we make significant changes to this policy, we may also notify you by other means such as sending you an email.  If you do not agree with any changes please do not continue to use the Site. 

Last updated 17 July 2026