August 26, 2024
Privacy Policy
AIA Thailand and its affiliates (“ AIA ”, “ we ”, “ us ”, “ our ”) recognize our responsibilities regarding the collection, use, disclosure and other processing and storage of personal data.
One of the most important values held by the AIA Group companies (“ AIA Group ”) is the trust and confidence placed in us in the proper handling of information. Customers expect us to hold their information correctly, protect it from misuse and error, protect it from theft and not disclose it without proper representations or warranties.
This Privacy Statement (the “ Privacy Statement ”) tells you how your personal data will be collected, what personal data will be collected, the purposes for which we collect, use, disclose or transfer your personal data, to whom we may disclose or transfer your personal data, and how to access, correct or exercise your rights regarding your personal data. You must read and understand this Statement before giving us your consent to collect, use, disclose and otherwise process your personal data. If you are under 20 years of age, your parent or guardian must provide additional consent.
How do we collect personal data?
We may collect and store your personal data in the following ways:
- When you purchase or use life insurance, group insurance, or any of our products and services, or when you access or use our website,
applications, and services online, on your mobile device, or by phone, or any other services of ours or any other person (“ Product ” or “ Service ”). - When you submit documents and insurance applications for purchase or use, or when considering purchasing or using our products or services.
- When you submit a request for a change or improvement to your product or any other request regarding your product, including submitting forms and documents regarding requesting service related to the product.
- When you respond to our inquiries or when you request that we contact you.
- When you interact with AIA personnel, customer service officers, sales personnel, agents, brokers, insurance intermediaries, contractors, partners, service providers or other persons or entities related to AIA or the AIA Group Companies and any representatives of such persons or entities (collectively, “ AIA Personnel and Partners ”) via the Website, Application, social media, telephone, email, face-to-face meeting, interview, SMS, fax, post or by other means.
- When we receive referrals from customers or when we collect personal data from AIA personnel and partners.
- When you submit personal data to us to participate in a sweepstakes, contest, event or competition organized by or on behalf of AIA or its personnel and partners, or
- When we request information from third parties about you, including but not limited to information obtained from audits, public, private or commercial sources, websites, applications, social media sources, data providers, medical sources, public health facilities, hospitals, doctors, other health professionals, other insurance business organizations or business associations or federations, that is relevant to your product, your product insurance application, your product risk underwriting, complaints about your product and/or AIA products and services used or purchased by you (“ Third-Party Sources ”).
- When we request information from third parties about you for regulatory compliance and other regulatory purposes.
- By providing us with any personal data relating to a third party (including, but not limited to, an insured, a person you trust, a family member or a beneficiary), you represent and warrant the accuracy of such personal data and represent and warrant that you have fully informed such third party of the collection, use, disclosure and transfer of such third party’s personal data by us for any relevant purposes and have obtained such third party’s consent prior to collecting such third party’s personal data, except to the extent such consent is not required by applicable laws and regulations.
To the fullest extent permitted by law, you further agree to hold us fully indemnified from and against all damages, losses, costs, legal expenses, penalties and expenses incurred in connection with any legal proceedings of any kind, including fines or other monies levied, imposed or collected by any regulatory or supervisory authority, arising from or related to any act or omission by you (or that of your officers, employees, consultants, agents or representatives), your fault or negligence in performing those duties, or any breach by us of any applicable law.
What personal information do we collect, use or disclose?
The personal data we collect, use and disclose (including sensitive personal data as defined in the Personal Data Protection Act B.E. 2562 (2019) and any amendments as may be amended from time to time and other applicable laws and regulations) includes the following personal data:
- Personal information that can identify you, such as your first and last name, national identification card number, passport number, telephone number, email address, postal address and other contact details, date of birth, occupation, photograph, marital status and information about your dependents, biometric data and recorded voices.
- Financial information such as income, sources of income, tax information, bank account numbers, details about bank account movements, credit card details, loan details, investment information, and other payment details.
- Information about your employment and work history
- Information about your health and medical history, such as medical treatment history, medical examinations, medical investigations, consultation history, prescriptions, records, treatments, details of medical services received, medical reports, autopsy reports, and details of medical expenses.
- Information regarding your civil or criminal litigation history, such as criminal history, records of civil or other litigation proceedings.
- Details of products and services you have purchased from AIA or other insurance companies, such as your policy number, sum insured, changes/transactions related to your policy, premium payment method, premium payment history or loan history, beneficiaries, payer names, claims made, AML/CFT status and bankruptcy status, US Foreign Account Tax Compliance Act (FATCA), police reports and court orders.
- Technical information and personal activities/preferences you use when you use the Website, Applications and social media platforms, such as the unique customer identifier used on the social media platform, IP address, browser type and version, time zone setting, browser plug-in types, operating system and platform, user profile information, device information (including information about the mobile device, IMEI, wireless network information and general network information), and
- Third-party personal information you provide to us in connection with your purchase or use of our products and services, or for referral purposes.
Providing your personal information is voluntary. You may choose not to provide the information we request, but not providing such information may affect our ability to conduct business with you or respond to your requests.
Purpose of collection, use or disclosure of personal data
Personal data will be collected or may be used, disclosed or transferred for the following purposes:
- To offer, sell, provide, manage, operate, follow the procedures and manage our products and services to you.
- To carry out the procedures, manage, complete and effectuate the requests or transactions described in this document or any other documents you may submit to us from time to time, including but not limited to assessing your financial needs and recommending appropriate products and services to you; performing the procedures relating to product insurance applications, managing your products, collecting premiums and outstanding monies from you; investigating, analyzing, processing and paying claims/benefits under your policies and renewing, amending, canceling or reinsuring your policies;
- Exercising any rights under your policy, including rights of subrogation (if any).
- Designing new AIA products and services or enhancing existing AIA products and services.
- Reinsurance for our products and services to you
- Communicating with you, including communicating management and other information about any products or accounts you may have with us, providing technical support regarding our websites and applications, or communicating about any future changes to this Statement.
- Conducting market research, advanced data analysis and statistical or actuarial research, financial reporting or assessments prepared by AIA, the AIA Group, AIA’s personnel and business partners or regulators with whom we are affiliated.
- Investigating or preventing fraud and other wrongdoing, whether actual or suspected, in particular for our communications with companies in the financial services and insurance sectors and for our communications with regulatory authorities.
- For the purpose of corporate restructuring and corporate transactions
- To allow you to access content on a particular website, application or social media platform.
- To track your behavior, such as your behavior when using our website, application or social media platform, to analyze your usage of our website, application or social media platform and to understand your preferences, to make those websites, applications or social media platforms more suitable for you, to operate, evaluate and improve those websites, applications or social media platforms or our products and services, to troubleshoot issues, to recommend relevant products and services, and to advertise on our website, application and other channels according to your target audience.
- For AIA’s regulatory compliance and business audits (both internal and external audits).
- To ensure compliance with the requirements under AIA’s internal policies that are adhered to.
- For the purpose of storing, recording, backing up or destroying personal data.
- To comply with any applicable law, rule, regulation, agreement or policy established by any government regulatory agency, law enforcement agency, government agency, dispute resolution agency or insurance business agency, regardless of which agency.
- For the benefit of supervising and promoting the insurance business in accordance with the Insurance Commission Act and the Life Insurance Act, in accordance with the Personal Data Protection Policy of the Office of Insurance Commission (you can study more details at https://www.oic.or.th )
- To assist with law enforcement purposes, investigations by us or on our behalf, by the police or by other government or regulatory authorities in any country or territory, and to comply with any reporting obligations and requirements required by law or as agreed with any government or regulatory authorities in any country or territory.
- For quality and training purposes, when our communications are recorded
- For general management operations related to the above objectives and
- For other necessary actions directly related to any of the above purposes.
Unless otherwise permitted by applicable laws and regulations, we will ask for your consent if we wish to use your personal data for any purpose other than that specified in this Privacy Statement or other than those purposes directly related to this Statement.
For our products, for the use of your personal data for promotional or marketing purposes, please see the section titled “Use of Personal Data for Direct Marketing Purposes”.
To whom may we provide your personal data?
Your personal data will be kept confidential, but where permitted by applicable law or where such disclosure is necessary to achieve the purposes for which the personal data was collected or purposes directly related thereto, we may provide such personal data to the following parties:
- Any person authorised to act on behalf of AIA personnel and business partners to sell, distribute or service products and services offered by AIA or any AIA group company to you.
- Policyholder (in the case of group insurance)
- Any person who is employed or contracted to perform duties for such AIA personnel and partners to sell,
distribute or service products and services offered by AIA or any AIA group company to you. - Any person authorised to act on behalf of AIA personnel and partners to assist in delivering AIA products or services offered/sold to you, such as reinsurance companies, investment management companies, credit rating agencies, investigative firms or other partners.
- Any AIA personnel and business partners who provide any management services, data processing services, business process services, payment, debt collection or securities clearing services, telecommunications services, technology services, cloud services, outsourcing services, call center services, storage services, document processing, record keeping services, scanning services, postal services, printing services, courier or courier services, data analysis services, marketing services, research services, emergency management services, or any other services related to AIA’s business operations or providing you with the management, operation, compliance or management of AIA’s products or services.
- Insurance business organization
- Business associations or federations
- Any law enforcement authority, commission established by law, government or regulatory body, dispute resolution body or other person in any country or territory to which AIA or an AIA Group company is required to disclose information: (a) in accordance with legal and/or compliance duties in that country or territory or any other country or territory applicable to that AIA Group company; or (b) in accordance with any agreement or policy between an AIA Group company and the relevant government, regulatory body or other person.
- Any company in the AIA Group
- AIA advisors who are professionals such as lawyers, auditors or consultants.
- Any person or entity to whom you have given your consent to disclose your personal data.
- Any other person or entity authorized by applicable law.
- Other external persons
Data transfer to other countries/International data transfer
Your personal data may be transferred to, stored or otherwise processed by AIA or may be passed to any of the above persons or entities, which may be located or may provide services in Thailand or outside of Thailand. If required by applicable law, we may ask you to consent to the transfer of such data outside of Thailand, to our various facilities or to third parties with whom we will share your personal data. As specified above, your personal data will only be transferred to other locations that provide a satisfactory level of protection, the integrity and security of your personal data, which is at least comparable to the level of protection in the country, jurisdiction or territory where you provided the personal data.
Security and retention of personal data
AIA has appropriate security measures in place to protect against unauthorized or accidental access, processing, deletion, loss or use.
AIA will delete or destroy your data within 11 years of the end of our relationship with you, or longer if otherwise required.
Your rights regarding personal data and contact channels
You have the right to do the following:
- Check whether AIA holds any personal data about you and whether you have the right to access or request a copy of any such data and/or access information about how AIA uses or discloses your personal data.
- Request AIA to correct any personal data relating to you that is inaccurate.
- Request to restrict the processing of your personal data in certain circumstances.
- Request the deletion or destruction of your personal data in certain circumstances.
- Request to temporarily suspend the processing of your personal data in certain circumstances.
- Revoke your consent or request a change to the scope of your consent.
- Request to revoke your account registration or delete your registered account (if any).
- Complaints about the data management that AIA processes and
- Inquire about AIA’s policies and practices regarding personal data.
You may submit requests for access to information, requests for corrections, complaints, or other requests regarding your personal information to the AIA Call Center at 1581.
Subject to applicable laws and regulations, we may be entitled to charge a reasonable fee for processing the above personal data requests, and you have the right to lodge a complaint with the Personal Data Protection Commission if you believe that the processing of your personal data violates applicable law.
If you suspect a personal data breach, please notify the AIA Data Protection Officer (DPO) via the AIA Call Center at 1581 or by email at th.privacy@aia.com or contact us at the address listed below.
AIA Company Limited
181 Surawong Road
Suriyawong Subdistrict, Bang Rak District
Bangkok 10500
Effects of withdrawal of consent
You may withdraw your consent to the collection, use, retention or disclosure of your personal data (or parts of your personal data) as described in this Privacy Statement by providing us with reasonable notice.
If you withdraw your consent to our collection, use, retention or disclosure of your personal data for non-marketing reasons, we may not be able to process, service and/or manage your products, your relationship and/or your account with us. In this case, you may be asked to surrender or cancel all of your policies or accounts, or withdraw from any programs in which you are participating, which may result in a loss to you as you may lose valuable benefits from your policies or participation in any programs, incur surrender charges, or you may no longer be able to receive the same level of coverage under the same conditions in the future.
Amendments to this Privacy Statement
AIA reserves the right to add to, change, amend or modify this Privacy Statement at any time and without notice to the extent permitted by law, by providing you with notice of such changes, amendments or modifications only. Such notice may be made by email or other common communication methods.
If required by applicable law, we may notify you of any material changes to this Privacy Statement and, if necessary, obtain your consent to those changes.
More information
If you have any questions about any part of this Privacy Statement or would like more information about AIA’s data privacy practices, please contact us immediately (please see the section “ Your Rights with Regarding Personal Data and Contact Us ” above).
Use of personal data for direct marketing purposes
In order to provide you with information about our products and services, AIA Thailand and its affiliates (“ AIA ”, “ we ”, “ us ”, “ our ”) wish to use the following information about you, namely your first name, last name, age, gender, email address, telephone number (including mobile phone number) and postal code, which you have provided to us (“ Contact Details ”) for the following purposes:
- Sending you promotional materials and direct marketing communications about our products and services, advice and information on matters including life and health insurance and pensions, as well as wealth management, investments, banking, financial services, credit cards, medical/health care, health information, employment, training, loyalty/privilege rewards/benefits programs, charitable/not-for-profit activities (“ Information to be sent to you for marketing ”) and
- Organizing contests, raffles, events and competitions that you choose to participate in.
As required by law, we must obtain your explicit consent in order to perform these actions.
We will need to provide your name and contact details to AIA personnel and business partners who provide the information to you for marketing, call center services or other marketing purposes so that they can send you promotional materials and conduct direct marketing activities about the products and services they wish to offer. However, we will not be able to do this without your written consent.
AIA will delete or destroy your data within 11 years of the end of our relationship with you. If you no longer wish to receive any direct marketing communications, you may withdraw your consent at any time, free of charge, by contacting the AIA Call Center at 1581 or via the AIA+ application. Such request should clearly state the details of the withdrawal of consent. Please note that this statement of intent supersedes any previous statements you have made (if any).