Myka: Privacy Policy

1.1 Introduction

Myka Insurance Brokers ("we," "our," or "us") is a NAICOM-licensed insurance broker operating a digital insurance distribution platform through its website (www.myka.insure), mobile applications (the Myka Consumer App and Myka Partner App), and related services (collectively, "the Platform"). By using the Platform and/or registering an account, you authorise Myka, including its authorised representatives and insurance underwriter partners, to contact you via email, telephone, SMS, WhatsApp, or push notifications to provide insurance-related services, process your transactions, and share relevant product information as permitted under applicable law.

1.2 Information We Collect

We collect information when you register on our Platform, use our products or services, visit our website, interact with our Partner App agents, or otherwise communicate with us. The categories of information we collect include:

• Personal Identification Information: Full name, date of birth, gender, email address, phone number, residential address, and National Identification Number (NIN) as required by NAICOM directives.
• Know Your Customer (KYC) Data: NIN verification data, photograph for identity comparison via our KYC verification partners (such as QoreID), Liveness Detection Recordings (short video or periodic photo sequences to confirm physical presence), and CAC documents for corporate clients, in compliance with Section 64(4) of the NIIRA 2025.
• Insurance-Related Information: Vehicle details (make, model, year, registration number), device details (IMEI number, brand, model, storage capacity), claims history, existing insurance policy details, and any information necessary for underwriting and claims processing.
• Financial Information: Payment card details (processed securely through Paystack), bank account information, transaction records, and premium payment history.
• Technical Data: IP address, browser type, device type, operating system, app version, location data (where permitted), and usage analytics.

1.2A Customer Consent Through Partner and Agent Onboarding

Where insurance onboarding is facilitated by authorised Myka agents, representatives, dealerships, partners, or other approved channels, customers are provided with applicable privacy notices and information regarding the collection, use, disclosure, and protection of their personal data prior to the submission of such information.

Myka may obtain and record customer consent through various electronic, digital, verbal, written, or other legally recognised methods, including acknowledgements, confirmations, declarations, authentication mechanisms, electronic records, signatures, or other verification processes as may be implemented from time to time.

Where onboarding is conducted through authorised agents or partners acting on behalf of Myka, such parties are required to comply with applicable confidentiality, privacy, security, and data protection requirements when collecting, processing, transmitting, or otherwise handling customer information.

1.3 How We Use Your Information

We use your personal information for the following purposes:

• To provide insurance quotation, comparison, purchase, and renewal services;
• To process and facilitate insurance claims on your behalf;
• To fulfil our regulatory obligations under the NIIRA 2025 and NAICOM guidelines;
• To verify your identity through KYC processes as mandated by NAICOM;
• To perform identity validation via liveness detection to prevent identity theft and "deepfake" fraud;
• To communicate service updates, policy reminders, renewal notices, and claims status;
• To improve the functionality and user experience of our Platform;
• To detect, investigate, and prevent fraud, money laundering, and other unlawful activities, including through the use of device photographs, inspection images, and condition assessment recordings where applicable.
• To comply with applicable laws, regulations, and court orders.

1.3A Legal Basis for Processing

Myka processes personal data on one or more of the following lawful bases:

• Performance of a contract, including the provision of insurance quotations, policy issuance, renewals, and claims administration;
• Compliance with legal and regulatory obligations imposed by applicable laws, including the Nigeria Data Protection Act (NDPA) 2023, the Nigerian Insurance Industry Reform Act (NIIRA) 2025, anti-money laundering obligations, and directives issued by NAICOM;
• Consent provided by the customer or data subject, particularly where required for specific processing activities;
• Legitimate business interests pursued by Myka, including fraud prevention, service improvement, platform security, and risk management, provided such interests do not override the rights and freedoms of data subjects;
• Protection of the vital interests of the data subject or another individual where applicable.

1.3B Automated Processing and Fraud Prevention

Myka may use automated systems, identity verification technologies, fraud detection mechanisms, device verification tools, and risk assessment processes to support identity verification, underwriting, fraud prevention, claims assessment, platform security, and regulatory compliance.

Such processing is implemented with appropriate technical and organisational safeguards and is designed to support, rather than solely determine, customer eligibility, underwriting decisions, or claims outcomes, except where permitted by applicable law.

1.4 Sharing of Information

We may share your information with the following categories of recipients:

• Insurance underwriter partners (including Leadway Assurance, AXA Mansard, Coronation Insurance, Cassava etc.) for the purposes of underwriting, policy issuance, and claims processing.
• Third-party service providers engaged by Myka for KYC verification, payment processing, device verification, and claims assessment.
• Repair service partners within our authorised repairer network for the purpose of gadget insurance claims fulfilment.
• Regulatory authorities including NAICOM, the NDPC, and law enforcement agencies where required by law or in response to lawful requests.

Cross-Border Data Transfers

Where personal data is transferred, processed, or stored outside Nigeria through third-party service providers, cloud infrastructure providers, or technology partners, Myka implements reasonable contractual, technical, and organisational safeguards designed to ensure compliance with applicable data protection laws and protection of personal data.

We will not sell, rent, or lease your personal information to any third party for marketing purposes without your explicit consent.

1.5 Data Security

Myka employs industry-standard technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption of data in transit and at rest, access controls, regular security assessments, and secure storage practices. However, no method of electronic storage or transmission over the internet is completely secure, and we cannot guarantee absolute security.

1.5A Personal Data Breaches

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected individuals, Myka will take appropriate measures to investigate, contain, and remediate the incident and, where required by applicable law, notify affected individuals and relevant regulatory authorities.

1.6 Your Rights Under the NDPA 2023

As a data subject under the Nigeria Data Protection Act 2023, you have the following rights:

• The right to access your personal data held by Myka.
• The right to request correction of inaccurate or incomplete personal data.
• The right to request deletion of your personal data, subject to legal and regulatory retention requirements.
• The right to withdraw consent for data processing at any time.
• The right to restrict or object to certain types of data processing.
• The right to data portability.
• The right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).

To exercise any of these rights, please contact our Data Protection Officer at dpo@myka.ng. The details of the designated Data Protection Officer for Myka Insurance Brokers are set out in Section 1.10 of this document.

1.6 Complaints and Grievance Redress

Data subjects who have concerns regarding the processing of their personal data are encouraged to first contact Myka's Data Protection Officer using the contact details provided in Section 1.10 of this Privacy Policy.

Myka will investigate and respond to privacy-related complaints within a reasonable period in accordance with applicable laws and internal procedures.

Where a data subject is dissatisfied with Myka's response, the data subject has the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).

1.7 Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, to comply with regulatory and legal obligations (including NAICOM record-keeping requirements), to resolve disputes, and to enforce our agreements. Insurance-related records are retained for a minimum period as prescribed by NAICOM and the NIIRA 2025. Upon expiry of the retention period, data is securely deleted or anonymised.

1.8 Children's Privacy

Our Platform and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. Where insurance products cover dependents who are minors, consent for data processing is obtained from the parent or legal guardian in accordance with the NDPA 2023.

1.9 Changes to This Privacy Policy

Myka reserves the right to update this Privacy Policy periodically to reflect changes in legal requirements, our business practices, or the services we provide. We will notify you of material changes by posting the updated policy on our Platform. We encourage you to review this policy regularly.

1.10 Contact Information

If you have questions, concerns, or complaints regarding this Privacy Policy or the handling of your personal data, please contact us:

Data Protection Officer (DPO)

In accordance with the Nigeria Data Protection Act (NDPA) 2023, Myka Insurance Brokers has a designated Data Protection Officer responsible for overseeing compliance with data protection obligations.

• Name: Mathew Gbolahan Afolabi
• Title: Data Protection Officer
• Email: matthew@myka.ng
• Phone: +2347067594774
• Address: AP Plaza, 28 ademola adetokunbo crescent, Wuse 2, Abuja

Myka Insurance Brokers
28, Adetokunbo Ademola Crescent, Wuse 2, FCT, Abuja