Privacy Policy

PRIVACY

Your privacy and security is very important to Daman. Certain data items are collected and used by the Daman Site in order to provide insurance quotations and other online services. The Daman Site will record and track the use you make of the Daman Site. The use of this data is subject to Daman’s Privacy Policy. The Privacy Policy is deemed to be part of these Terms and you should read it in full. If you do not indicate your acceptance of the terms of the Privacy Policy, you may not use the Daman Site.

All credit/debit cards details and personally identifiable information will NOT be stored, sold, shared, rented or leased to any third parties.

The Website Policies and Terms & Conditions may be changed or updated occasionally. Therefore the Customers’ are encouraged to frequently visit these sections in order to be updated about the changes on the website. Modifications will be effective on the day they are posted.

COPYRIGHT AND TRADEMARKS

Copyright in all content on the Daman Site is owned or licensed by Daman.

Except where necessary for and incidental to personally viewing the Daman Site via your web browser, or as permitted under the applicable laws, no part of the Daman Site may be reproduced, stored (for any period of time) in an electronic or any other retrieval system, modified, adapted, uploaded to a third party location, framed, performed in public, or transmitted, in any form by any process whatsoever, without the specific prior written consent of Daman.

“DAMAN” and “The National Insurance Company” are trademarks of Daman. Third party trademarks are trademarks of the respective third parties

TERMINATION

Your access to the Daman Site may be terminated at any time by Daman without notice to you. However, all restrictions and all disclaimers and exclusions and limitations of liability of Daman will survive any termination. Upon termination, you must not directly or indirectly access or use the Daman Site.

GENERAL

Any dispute or claim arising out of or in connection with this website shall be governed and construed in accordance with the laws of the Emirate of Abu Dhabi, UAE. You irrevocably submit to the exclusive jurisdiction of the courts of Abu Dhabi, and appeal therefrom.

Should any clause or part thereof of these Terms be found to be void, unenforceable or invalid, then it is severed from these Terms, leaving the remainder in full force and effect, provided that the severance has not altered the basic nature of these Terms.

You may not rely on the words or conduct of Daman as a waiver of any right unless the waiver is in writing. In this clause, “conduct” includes delay in the exercise of any right. For the purposes of this clause, “right” means any right of Daman arising under or in connection with these Terms or otherwise, and includes the right to rely on this clause.

Collection and Use of Personal Data

Daman collects and processes personally identifiable information (PII) to provide its services efficiently, meet legal and contractual obligations, and enhance user experience. This information may include data you provide directly, data we receive from third parties, or data collected through automated technologies.

Types of Personal, Health & Financial Data We Collect

We may collect, use, store, and transfer different categories of Personal, Health and Financial data depending on your relationship with us and the nature of your interactions. These categories include:

Identity Data – such as full name, date of birth, gender, marital status, national (Emirates) ID or passport number.
Contact Data – including residential address, email address, and telephone numbers.
Financial and Transaction Data – such as bank account details, payment card details, premium payments, and other insurance-related transactions.
Claims Data – details of insurance claims submitted, including date of claim, type of claim, supporting documents, diagnosis, treatment details, claim amount, and outcome.
Health Data – any medical or clinical data used for underwriting, claim adjudication, or delivery of medical services under your insurance policy.
Technical Data – including IP address, device type, browser information, operating system, time zone, and other technology identifiers used when accessing our digital platforms.
Profile Data – such as username and password, policy preferences, transaction history, claim preferences, and feedback or survey responses.
Usage Data – information on how you use our website, mobile application, and services, including navigation paths, clicks, and time spent.
Geolocation Data – when you interact with our digital services that require location access.
Marketing and Communications Data – your preferences regarding receiving communications from us and third parties, and your communication channel preferences.
De-identified Confidential Health Information – health data that has been stripped of identifiers to prevent re-identification, used solely for research or public interest purposes.
Aggregated Data – statistical or demographic data derived from your personal data but not revealing your identity.

Collection of Personal Data

We collect your data through the following means:

Direct Interactions: Through forms, applications, claims, inquiries, or service calls
Automated Technologies: Including cookies and web analytics
Third Parties: Such as brokers, employers, policyholders, medical providers, and service vendors

Usage of Personal Data

• Daman uses your personal data to carry out a variety of necessary and lawful activities. This includes administering and managing insurance policies, processing applications, underwriting, and handling claims, but not limited to the above.
• We also use your data to communicate important updates, service notifications, and customer support information.
• Additionally, personal data may be used to detect and prevent fraudulent or unauthorised activities, including through the use of AI-enabled tools.
• We analyse data to improve our products, services, website functionality, and overall customer experience.

Where applicable, de-identified or aggregated data may be used for research, statistical analysis, and public interest purposes such as supporting healthcare innovation and policy development. To support these purposes, your personal data may be shared with trusted internal and external recipients. These include internal teams within Daman, healthcare providers and diagnostic networks involved in treatment or claims, and third-party vendors providing IT and customer service support. We may also share data with reinsurance companies, insurance service providers, and financial institutions facilitating transactions. Where required by law, data may be shared with government bodies and regulatory authorities. In cases where marketing communications are involved, your data will be shared with marketing service providers only with your explicit opt-in consent.

All external parties with whom we share data are contractually obligated to maintain confidentiality and apply appropriate safeguards to ensure the protection of your personal information.

Minors’ Data: Where data of minors is collected, it is processed only with the consent of the legal guardian and in accordance with applicable laws.

Lawful Basis of Processing Personal Data

We collect and process your personal data based on the following lawful grounds:

• To fulfill our contractual obligations with you (e.g. policy issuance, claims processing, issuing member ID cards).
• To comply with legal or regulatory obligations (retaining records, reporting data breaches.
• To pursue our legitimate interests, provided these are not overridden by your fundamental rights and freedoms (e.g. fraud prevention, product improvement, analysing aggregated data to improve insurance offerings).
• With your explicit consent, where required (e.g. for third-party marketing communications, sending promotional offers via SMS or email, sharing your contact details with a partner wellness platform).

Kindly note that for various purposes, we may process your personal data based on more than one lawful ground. If you require details regarding the specific legal basis on which we rely to process your personal data, please contact us.

Direct Marketing Communications: We strive to provide you with choices regarding the use of certain personal data, particularly in relation to marketing and advertising.

Kindly note the following:

Promotional Offers: Marketing communications will be sent to you if you’ve sought information from us, purchased our insurance services, provided your details during a competition or promotion registration, and haven’t opted out of receiving such marketing in each instance.

Third-party Marketing: Before sharing your personal data with any external company for marketing purposes, we will obtain your explicit opt-in consent.

Opting out/ Withdrawal: You retain the option to request that we or third parties stop sending you marketing messages at any time. This can be done by accessing the website and adjusting your marketing preferences via relevant checkboxes, utilising opt-out links provided in any marketing message or contacting us directly. It’s essential to note that opting out of marketing messages doesn’t affect the personal data provided due to your purchase of insurance products/services, or other transactions.

Change of Purpose: We’ll solely utilise your personal information for the initially intended purposes unless we reasonably determine another compatible purpose for its use. If you would like an explanation of how this new purpose aligns with the original, please do not hesitate to contact us.

In the event that we need to use your personal data for an unrelated purpose, we will inform you and provide clarification on the legal basis permitting such use.

Common Web Technologies

Daman employs common web technologies that help to manage the Daman Site, among them:Cookies – A “cookie” is a name for tokens of information that the Daman Site may provide to your browser, which is used only by the Daman Site while you are at that website. The Daman Site uses cookies for a variety of purposes. Cookies are used to help Daman better understand website usage in the aggregate to ascertain which areas of the Daman Site users prefer. Daman also uses cookies to simplify your data entry for certain online forms. If you simply want to browse, you do not have to accept cookies from the Daman Site. Should you decide, however, that you would like to register and log in to special areas of the Daman Site, and you have modified your browser settings not to accept cookies, you will need to re-set your browser to accept the cookies that are sent to it. Otherwise, you may not be able to participate in certain areas of the Daman Site. Most browsers are defaulted to accept and maintain cookies. 

Website Usage Data – With or without cookies, the Daman Site keeps track of usage data, such as the source address that a page request is coming from (i.e., your IP address, domain name), date and time of the page request, the referring website (if any), and other parameters in the URL (e.g., search criteria). Daman only uses this data to better understand website usage in the aggregate to determine which areas of the Daman Site users prefer (e.g., based on the number of visits to those areas). This information is stored in log files and used for aggregated and statistical reporting. It is not attributed to you as an individual. 

Links to External Sites – This Privacy Policy only applies to the Daman Site. Although the Daman Site may provide links to websites of third parties, such as those of Daman’s business partners and online advertisers, this Privacy Policy does not apply to any other website that you connect to from the Daman Site. You should read their privacy policies to understand how they manage personal information. Although Daman chooses its partners and sponsors carefully, it is not responsible for the content or practices of websites operated by third parties that are linked to the Daman Site. These links are provided as a service to users of the Daman Site. Unless otherwise stated, they do not constitute any endorsement, sponsorship or approval of their content, policies or practices.

Disclosure of Personal Data

Your personal data may be shared internally within Daman and externally with trusted third parties to enable us to deliver our services efficiently and lawfully.

These third parties may include:

Healthcare providers and networks involved in claims adjudication and treatment.
Third-party service providers such as IT support, hosting providers, customer service platforms, and analytics companies.
Insurance and reinsurance companies to support underwriting and claims.
Third-Party Administrators to support Daman in providing health insurance services to members and manage their claims.
Payment gateways and financial institutions to facilitate transactions.
Marketing service providers, only with your consent.
Government bodies and regulators, when required by law or to protect our legal rights.
Your broker or employer, where applicable to your policy.

Cross-Border Transfer of Personal Data

Daman does not transfer your personal data outside the United Arab Emirates (UAE) as a standard practice. All personal data is processed and stored within the UAE, in accordance with applicable data protection laws and regulatory standards.

In limited cases where a cross-border transfer of personal data is necessary, Daman ensures that such transfers are carried out only after obtaining the required prior approvals or exemptions from the Department of Health – Abu Dhabi (DoH) as mandated by applicable regulations.

We are committed to maintaining the confidentiality, integrity, and security of your personal data, and any such transfer will be done in accordance with strict legal and contractual safeguards.

Protecting Your Personal Information

Daman adopts industry-standard security measures, including but not limited to:

• Encryption in storage and transmission
• Access controls and role-based permissions
• Network and application firewalls
• Employee confidentiality obligations

While no system is completely secure, Daman takes all reasonable steps to protect your data from unauthorised access, disclosure, or misuse.

Data Retention and Disposal

We retain your data only as long as necessary, including:

• 25 years post-termination of customer status (per regulatory requirements)
• Longer durations were anonymised for research/statistical use

Upon expiration, data is securely deleted or anonymised. Disposal is performed through industry-standard methods.

Your rights

As a data subject, you are entitled to several rights under applicable data protection laws. These rights empower you to understand, control, and influence how Daman handles your personal data. You have the right to:

• Access your personal data
• Request correction or deletion
• Restrict or object to processing
• Data portability
• Withdraw consent
• Raise concerns or lodge a complaint with our Data Protection Officer

To exercise any of these rights, please contact us at: [email protected]

Access to and correction of your information

You have the right to access and request correction of information held about you by contacting Daman directly using the contact details given above. You may request that Daman correct any erroneous personal information that Daman holds about you.

Changes to this Privacy Policy

Any changes Daman may make to this Privacy Policy in the future will be posted on the Daman Site and, where appropriate, notified to you by e-mail. Your continued use of the Daman Site will be deemed to be your acceptance of any changes to this Privacy Policy.

Contact

Questions, comments and requests regarding this Website Privacy Policy are welcomed and can be emailed to: [email protected] or sent as a postal mail to the following address:

The National Insurance Company – Daman.

Data Protection Officer,

Information Security & Governance Department

P.O. Box: 128888
Abu Dhabi, UAE
Tel. # 02-6149555
Fax: # 02-6149770
E-mail: [email protected]

If you have any concerns or complaints relating to the processing of your personal data and your rights under applicable data protection laws, and such concerns remain unresolved or are not addressed to your satisfaction despite repeated follow-ups, you may escalate the matter to the UAE Data Office, which is the federal supervisory authority established under Federal Decree-Law No. 44 of 2021.

Your Explicit Authorisation and Consent to Daman’s Website Privacy Policy

By accessing or using any of The National Insurance Company – Daman (“Daman”) services, platforms, websites, or mobile applications, or by providing your personal data (including sensitive personal data such as health information), you confirm that you have read, understood, and consent to the terms described in this Privacy Policy.

• You explicitly authorise Daman to collect, use, store, process, transfer, and disclose your personal data—including personal identifiers, contact details, financial and health information—in accordance with the applicable regulatory requirements.

This includes, but is not limited to, authorising Daman to:

• Process your data for purposes such as policy issuance, underwriting, claims administration, customer service, fraud detection, auditing, analytics, and legal compliance.
• Share your personal and sensitive personal data with authorised third parties, including appointed brokers, reinsurers, third-party administrators (TPAs), medical service providers, IT service providers, consultants, professional advisors, regulators, and group affiliates, within or outside the UAE.
• Contact you for any purpose related to your insurance policy, claims, services, or regulatory obligations, using channels such as email, SMS, or telephone.

You understand that this consent remains valid for the duration necessary to fulfil the purposes described in this Website Privacy Policy, unless withdrawn by you in accordance with applicable legal and contractual obligations.

Please do not provide your personal data if you do not agree with the terms set out in this Website Privacy Policy. You may contact our Data Protection Officer at [email protected] for any queries or to withdraw your consent.

DISCLAIMER: By accessing these Daman Adjudication Rules (the “AR”), you acknowledge that you have read and understood the terms of use set out in the disclaimer below: The information contained in these ARs is intended to outline the procedures of adjudication of medical claims as applied by The National Insurance Company – Daman PJSC (hereinafter “Daman”). The ARs are not intended to be comprehensive, should not be used as treatment guidelines and should only be used for the purpose of reference or guidance for adjudication procedures and shall not be construed as conclusive. Daman in no way interferes with the treatment of patient and will not bear any responsibility for treatment decisions interpreted through Daman AR. Treatment of patient is and remains at all times the sole responsibility of the treating Healthcare Provider. These ARs do not grant any rights or impose obligations on Daman. These ARs and all of the information they contain are provided “as is” without warranties of any kind, whether express or implied which are hereby expressly disclaimed.

Under no circumstances will Daman be liable to any person or business entity for any direct, indirect, special, incidental, consequential, or other damages arising out of any use of, access to, or inability to use or access to, or reliance on these ARs, including but without limitation to, any loss of profits, business interruption, or loss of programs or information, even if Daman has been specifically advised of the possibility of such damages. Daman also disclaims all liability for any material contained in other websites linked to Daman website.

These ARs are subject to the laws, decrees, circulars and regulations of Abu Dhabi and UAE. Any information provided herein is general and is not intended to replace or supersede any laws or regulations related to the ARs as enforced in the UAE issued by any governmental entity or regulatory authority, or any other written document governing the relationship between Daman and its contracting parties.

These ARs are developed by Daman and are the property of Daman and may not be copied, reproduced, distributed or displayed by any third party without Daman’s express written consent. These ARs incorporate the Current Procedural Terminology and Current Dental Terminology (CPT® and CDT®, which is a registered trademark of the American Medical Association (“AMA”), and the American Dental Association (“ADA”) respectively), and the CPT and CDT codes and descriptions belong to the AMA. Daman reserves the right to modify, alter, amend or obsolete these ARs at any time by providing one month prior notice.

This site is registered on wpml.org as a development site. Switch to a production site key to remove this banner.