This Privacy Notice applies to the QIC mobile application, which is distributed as a single application across the GCC. While the app is one product, the underlying insurance products, functionality and user experience differ by country, and are provided by different QIC Group entities depending on where you are located:
Each section below sets out, for the relevant country, what personal data (including health, fitness and wellness data) we collect, why we collect it, who it may be shared with, how long we keep it, and your rights. Please read the section that applies to you.
Health Hub, our in-app health and wellness area, is currently available to users in the UAE only.
We care about your personal data:
Qatar Insurance Company Q.S.P.C. ("we", "us" "our"), is a leading non-life insurance company that brings innovative and tailor-made insurance solutions coupled with world-class level of service. Protecting your privacy is a top priority for us. This privacy notice explains what type of personal data will be collected, how and why it is collected and to whom it is shared or disclosed.
Please read this notice carefully:
A data controller is an individual or legal person who controls and is responsible to keep and use personal data in paper or electronic files. We are the data controller as defined by relevant data protection laws and regulations.
The personal data collected will depend upon the nature of the relationship between us. In case of an insured person, this will also depend upon the type of insurance policy. We will collect and process several types of personal data about you as mentioned below:
| Type of Personal Information | Details |
|---|---|
| Individual / Know Your Customer (KYC) Details | Name, address, other contact details (e.g. email and telephone numbers), date and place of birth, nationality, employer, job title |
| Identification Details | Identification numbers issued by government bodies or agencies, including passport number, National ID number and driving license number |
| Financial Information | Bank account, income, or other financial information |
| Risk Details | Information needed to collect in order to assess the risk to be insured and provide a quote. This may include data relating to health, or other special categories of personal data. |
| Policy Information | Information about the quotes received by data subjects and policies they take out |
| Anti-Fraud Data | Credit history, bank card/account details, sanctions, and criminal convictions, and information received from various anti-fraud databases |
| Previous and Current Claims | Information about previous and current claims, (including other unrelated insurances), which may include data relating to health, criminal convictions, or other special categories of personal data and in some cases, surveillance reports. |
| Special Category Data | Certain categories of personal data which have additional protection under the applicable laws and regulations. The categories may include health and criminal convictions. This includes data resulting from medical reports or death certificates, your medical claims history, details of physical and psychological health or medical conditions, credit / debit card and bank account details. |
| Visitor Management and Surveillance Data | Personal information such as visitor name, mobile number, national ID, CCTV surveillance |
We will collect and use your personal data that you provide to us and that we receive about you (as explained below) for a number of purposes and with your explicit consent unless applicable laws and regulations do not require us to obtain your explicit consent, as shown below:
| No. | Purpose | Explicit consent needed? |
|---|---|---|
| 1 | Insurance contract administration (e.g., quotation, underwriting, claims handling) | Yes, where needed. However, there will be situations where consent is not required for us to process your personal data, for example in cases of medical emergency. |
| 2 | To administer debt recoveries | No |
| 3 | To inform you or permit QIC and selected third parties to inform you, about products and services we feel may interest you in accordance with your marketing preferences. You may withdraw this consent through the consent withdrawal option | Yes |
| 4 | To personalize your experience on our website or mobile application by presenting products, services, marketing messages, offers and content tailored to you and to make other decisions about you using computerized technology such as assessing which products might be most suitable for you. | Yes, where needed |
| 5 | When processing claims we may use automated decision-making technology to process your personal data. | Yes, where needed |
| 6 | Fraud, Money Laundering, and Terrorist Financing prevention and detection | No |
| 7 | Meet any legal obligations (e.g., tax, accounting and administrative obligations) | No |
| 8 | To redistribute risk by means of reinsurance and coinsurance | No |
As mentioned, for the purposes indicated above, we will process personal data we receive about you from you, your employer, your sponsor, third parties such as brokers and business partners, other insurers, medical providers, fraud prevention agencies and investigators, search information providers, loss adjustors, surveyors, intermediaries, delegated authorities, and lawyers.
For those purposes indicated above where we have indicated that we do not require your explicit consent, we will process your personal data based on our legitimate interests and/or to comply with our legal obligations. Legitimate interests which we use include ensuring the network and information security of our systems. We will not use our legitimate interest to process your personal data when your interests, rights and freedoms take priority.
Without your explicit consent, we may also use one of the following lawful bases:
In order to purchase a policy with us, we will need your personal data. Any personal data requested will be adequate, relevant, and limited to meet the necessary purposes as defined above. If you do not wish to provide this to us, we will not be able to provide the products and services you request, that you may be interested in, or to tailor our offerings to your particular requirements.
We may share your data with the institutions set out below for them to use to the same extent, and for the same purposes as us.
Subject to the applicable laws, you may exercise the following rights: -
You may exercise these rights by contacting us as detailed below providing your name, email address, account identification, and purpose of your request.
However, QIC reserves the right to deny or cancel its products and services in case it does not have the necessary rights to access data to conduct the KYC (Know-Your-Customer) and apply its underwriting, claim and other rules and processes.
Hence, by giving your consent to this notice, you have hereby authorized QIC in accordance with section 4 of this notice to collect, process and utilize your personal data for necessary purposes and periods as defined in this notice.
The personal data collected, as referred to in section 3 of this Privacy Notice, will be retained for a period of time which is equal to the duration of your policy with us (including any renewals thereof) and for the following 10 years from the date the policy expires, save for cases where a longer retention period is required for necessary purposes including possible disputes, requests of the competent authorities or pursuant to the applicable laws. Once the retention period is over the data will be deleted or anonymized. You can contact us if you require further details about our retention periods. We will not hold or process excessive personal data.
If you have any queries about how we use your personal data, you can contact us by email or post as follows:
Email Address: alfred.chiwaka@qicgroup.com.qa
Phone: +974 4496 2322
Fax: +974 4483 156
Postal Address:
Qatar Insurance Company Q.S.P.C.
P.O Box: 666,
Tamin Street, West Bay
Doha, Qatar
Web: www.qic-insured.com
We regularly review this data protection notice. We will ensure the most recent version is updated in all the data collection forms.
We care about your personal data
Qatar Insurance Co. (UAE) ("we", "us" "our"), is a leading non-life insurance company that brings innovative and tailor-made insurance solutions coupled with world-class level of service. Protecting your privacy is a top priority for us. This privacy notice explains what type of personal data will be collected, how and why it is collected and to whom it is shared or disclosed.
Please read this notice carefully.
A data controller is an individual or legal person who controls and is responsible to keep and use personal data in paper or electronic files. We are the data controller as defined by relevant data protection laws and regulations.
The personal data and health data collected will depend upon the nature of the relationship between us. In case of an insured person, this will also depend upon the type of insurance policy. We will collect and process several types of personal data and health data about you as mentioned below:
| Type of Personal Information | Details |
|---|---|
| Individual / Know Your Customer (KYC) Details | Name, address, other contact details (e.g. email and telephone numbers), date and place of birth, nationality, employer, job title |
| Identification Details | Identification numbers issued by government bodies or agencies, including passport number, National ID number and driving license number |
| Financial Information | Bank account, income or other financial information |
| Risk Details | Information needed to collect in order to assess the risk to be insured and provide a quote. This may include data relating to health, or other special categories of personal data. |
| Policy Information | Information about the quotes received by data subjects and policies they take out |
| Anti-Fraud Data | Credit history, bank card/account details, sanctions, and criminal convictions, and information received from various anti-fraud databases |
| Previous and Current Claims | Information about previous and current claims, (including other unrelated insurances), which may include data relating to health, criminal convictions, or other special categories of personal data and in some cases, surveillance reports. |
| Special Category Data | Certain categories of personal data which have additional protection under the applicable laws and regulations. The categories may include health and criminal convictions. This includes data resulting from medical reports or death certificates, your medical claims history, and details of physical and psychological health or medical conditions. |
| Visitor Management and Surveillance Data | Personal information such as visitor name, mobile number, national ID, CCTV surveillance |
| Browser Data | Information collected automatically when you communicate with us, access our websites through a browser, or application. This includes data about your visit, including the pages you view, the links you click, and other actions taken in connection with our websites and services. We also collect certain standard information that your browser sends to every website you visit, such as your IP address, browser type and language, operating system, and access times. |
| Type of Health Information | Details |
|---|---|
| Medical Information | Medical history, diagnosis, treatment details, and clinical notes |
| Test & Diagnostic Data | Laboratory results, imaging reports (X-ray, MRI, CT scans), and test outcomes |
| Prescription Information | Medications prescribed and related treatment plans |
| Healthcare Events | Admission date, discharge date, consultation records, and procedures performed |
| Insurance & Claims Data | Health insurance details, claims data, and beneficiary information related to healthcare services |
| Health Status Information | Information relating to physical or mental health conditions, disabilities, or medical conditions |
| Healthcare Provider Information | Details of doctors, hospitals, and healthcare providers involved in treatment |
| Billing Information | Billing and payment details related to healthcare services |
| Medical Identifiers | Medical record numbers and other identifiers linked to healthcare services |
| Correspondence | Any communication or records related to diagnosis, treatment, or healthcare services |
Type of Wellness, Fitness and Health & Wellbeing Information (collected via Wellx-powered features)
| Type of Wellness/Fitness Information | Details |
|---|---|
| Activity & Fitness Data | Step count, distance travelled, physical activity type and intensity, active calories burned, wheelchair pushes (where applicable), and related activity-recognition data, collected via your phone's sensors or connected wearable devices |
| Sleep Data | Sleep duration and sleep patterns, collected via connected devices or wearables |
| Health Questionnaire Data | Your responses to health and lifestyle questionnaires completed within the app |
| Wellness Goals & Challenges Data | Personal health goals you set (e.g. step or calorie targets) and your progress against personal challenges |
| Mood & Wellbeing Data | Mood tracking entries and related wellbeing information you choose to log, including your use of guided breathwork exercises |
| Device & Wearable Integration Data | Data synced from connected health platforms and devices (e.g. Apple Health, compatible wearables) that you choose to connect to the app |
How Health Hub works: the wellness features above are powered by Wellxai Technologies Limited ("Wellx"), our wellness and health-engagement technology partner, and live in a separate area of the app called Health Hub. To use Health Hub you're asked to provide your email address. Once inside, each feature is independently optional — you can choose not to connect a device or wearable, not to complete the health questionnaire, and not to log any data (e.g. mood) in Health Hub. If you choose not to use Health Hub at all, none of the associated device or health permissions are requested. Separately, to view your insurance details in the app you're asked to provide your Emirates ID and email address.
We will collect and use your personal data that you provide to us and that we receive about you (as explained below) for a number of purposes and with your explicit consent unless applicable laws and regulations do not require us to obtain your explicit consent, as shown below:
| No. | Purpose | Explicit consent needed? |
|---|---|---|
| 1 | Insurance contract administration (e.g., quotation, underwriting, claims handling) | Yes, where needed. However, there will be situations where consent is not required for us to process your personal data, for example in cases of medical emergency. |
| 2 | To administer debt recoveries | No |
| 3 | To inform you or permit QIC and selected third parties to inform you, about products and services we feel may interest you in accordance with your marketing preferences. You may withdraw this consent through the consent withdrawal option | Yes |
| 4 | To personalize your experience on our website or mobile application by presenting products, services, marketing messages, offers and content tailored to you and to make other decisions about you using computerized technology such as assessing which products might be most suitable for you. | Where needed |
| 5 | When processing claims we may use automated decision-making technology to process your personal data. | Where needed |
| 6 | Fraud, Money Laundering, and Terrorist Financing prevention and detection | No |
| 7 | Meet any legal obligations (e.g., tax, accounting and administrative obligations) | No |
| 8 | To redistribute risk by means of reinsurance and coinsurance | No |
| 9 | To provide optional health & wellness features via our Wellx platform: health questionnaires, the wellness dashboard, personal health goals and challenges, mood tracking, guided breathwork exercises, and device/wearable integration. | Yes — these features are optional and are only activated if you choose to use Health Hub |
For the avoidance of doubt, purposes 3 and 4 above do not apply to special category data. Health, fitness and wellness data collected through the mobile application — including data obtained from Apple Health, connected devices and wearables — is never used for advertising, marketing, product personalization, or use-based data mining, and is never sold or disclosed to any third party for those purposes. It is not made available to any third-party advertising or analytics SDK. Such data is not stored in iCloud.
As mentioned, for the purposes indicated above, we will process personal data we receive about you from you, your employer, your sponsor, third parties such as brokers and business partners, other insurers, medical providers, fraud prevention agencies and investigators, search information providers, loss adjustors, surveyors, intermediaries, delegated authorities, and lawyers.
For those purposes indicated above where we have indicated that we do not require your explicit consent, we will process your personal data based on our legitimate interests and/or to comply with our legal obligations. Legitimate interests which we use include ensuring the network and information security of our systems. We will not use our legitimate interest to process your personal data when your interests, rights and freedoms take priority.
Without your explicit consent, we may also use one of the following lawful bases:
In order to purchase a policy with us, we will need your personal data. Any personal data requested will be adequate, relevant, and limited to meet the necessary purposes as defined above. If you do not wish to provide this to us, we will not be able to provide the products and services you request, that you may be interested in, or to tailor our offerings to your particular requirements.
We may share your data with the institutions set out below for them to use to the same extent, and for the same purposes as us.
For the purposes of this Section 5, the geographic references above should be read as the United Arab Emirates.
Whenever we transfer your personal data outside of UAE, We will ensure the transfer is protected by appropriate safeguards, primarily in accordance with applicable UAE laws and regulations, including the requirements of the Central Bank of the UAE (CBUAE), Dubai Health Authority (DHA) and Department of Health Abu Dhabi (DOH), in conjunction with the in-house QIC Group policies and procedures, including Standard Contractual Clauses (SCCs) for international data and fund transfers.
Subject to the applicable laws, you may exercise the following rights: –
You may exercise these rights by contacting us as detailed below providing your name, email address, account identification, and purpose of your request.
However, QIC reserves the right to deny or cancel its products and services in case it does not have the necessary rights to access data to conduct the KYC (Know-Your-Customer) and apply its underwriting, claim and other rules and processes.
In the unlikely event of a data breach, we have a dedicated Breach Notification Procedure to ensure timely identification, assessment, and notification as necessary under GDPR. This includes notifying affected data subjects and, where required, reporting to relevant supervisory authorities.
Personal Data
Personal data collected as described in Section 3 of this Privacy Notice will be retained for the duration of your policy (including any renewals) and for ten (10) years thereafter, in accordance with UAE laws and regulations. Personal data may be retained for longer where required for claims handling, dispute resolution, regulatory or judicial requests, or other legal obligations.
Medical and Health-Related Data
Medical and health-related data collected in connection with your policy will be retained for the duration of your policy (including any renewals) and for twenty-five (25) years thereafter, in compliance with Department of Health Abu Dhabi (DOH), UAE Central Bank regulations (where applicable), and other relevant UAE laws and regulations. Medical data may be retained for longer where required for claims, medical assessments, legal or regulatory proceedings, or mandatory retention requirements.
Wellness and Fitness Data — data collected via the Wellx-powered features (Section 2 above) is retained for the same period as your other Personal Data, unless you disconnect a feature or withdraw consent earlier, in which case it will be deleted or anonymized in line with our standard process below.
Once the retention period is over the data will be deleted or anonymized. You can contact us if you require further details about our retention periods. We will not hold or process excessive personal data.
If you have any queries about how we use your personal data, you can contact us by email or post as follows:
Email Address: saleh.muhannadi@qicgroup.com.qa
Phone: +974 4496 2297
Fax: +974 4483 1569
Postal Address:
Qatar Insurance Company Q.S.P.C.
P.O Box: 666,
Tamin Street, West Bay, Doha, Qatar
Website: qic.online
Email Address: niroshan.gunawardana@qicuae.com
Phone: +971 50 4101 420
Postal Address:
UAE - Qatar Insurance Co.
Level 5, Business Park Building 4, Dubai Hills Estate,
Dubai, UAE
Website: qicuae.com
We regularly review this data protection notice. We will ensure the most recent version is updated in all the data collection forms.
This privacy notice was last updated on 13.04.2026