Our Pay Your Premium feature is temporarily unavailable

We wish to advise our valued customers that the Pay Your Premium feature is currently undergoing development and is temporarily unavailable.

We are committed to keeping you updated and will provide updates as they become available. Kindly take note of the alternative payment options available at this time:

1. SurePay Online

2. Wire Transfer

CG UNITED INSURANCE LTD. - BARBADOS BBD WIRE INSTRUCTIONS

Beneficiary Bank:

Bank Name: CIBC FirstCaribbean International Bank

Bank Address: Warrens, St. Michael

Bank Swift Code: FCIBBBBB

Beneficiary account no: 1001138746

Bank Transit Code: 09606

Beneficiary:

Beneficiary Account Name: CG United Insurance Ltd

Beneficiary Address: P.O. Box 1215 Lower Broad Street St. Michael Barbados


3. CIBC Online Banking

4. All SurePay Kiosks

5. Cashiers at CG United’s Dome Mall and Broad Street locations (cash/cheque/credit/debit card)

6. Cheque (please include policy number if mailing cheques)

We apologise for any inconvenience this may cause and appreciate your understanding as we work to improve your experience with us. 

If you have any questions or require assistance during this period, please do not hesitate to contact us at 246 430 1900 or send us a message here.

Thank you for your patience.

Privacy Policy

Resources

CG Privacy Notice

This Privacy Notice (the “Privacy Notice”) was last modified in December 2024, and should be read together with the Terms of Use of the website (the “Site”). This Privacy Notice is intended for our customers and website visitors. If you are a CG employee or job applicant, please refer to our separate Employee Privacy Notice, which addresses privacy practices specific to employment-related data processing. Please use the Contact Us page below to request a copy.

By using this website, you acknowledge that you have read and understood this Privacy Notice. Where we rely on your consent for certain data processing activities, we will obtain your consent separately and explicitly.

Coralisle Group Ltd. and its subsidiaries (referred to as “CG”, the “Company” or the “Group”) are committed to maintaining a robust data privacy and protection framework to ensure compliance with the relevant rules and regulations that govern data privacy and protection in our jurisdictions of operations (i.e. Personal Information Protection Act 2016 in Bermuda, Data Protection Act in the Cayman Islands etc.).

At CG, the privacy and protection of our customers personal information is of utmost importance to us. We understand that when you select CG as your insurance or pension provider, you place trust in us to safeguard your personal information. Our commitment is to maintain transparency and honesty by informing you about our practices concerning the collection, utilization, and protection of your data.

This Privacy Notice, together with our website’s Terms of Use, sets out how and why CG collects and processes your personal information we collect through:

  • This CG-operated Site, the software applications made available by us for use on or through computers, mobile devices or other Internet-connected devices; and/or
  • Our products or services – information can be gathered from various sources, such as your application and claim forms, phone conversations, email exchanges, and other forms of communication between us.

As part of this commitment we would like to share with you our guidelines for the collection and protection of your information, and thereby secure your consent[1] and agreement to this Privacy Notice. Also, where necessary, we will direct you to our Privacy Notice and ask you to confirm your consent to us processing your personal data for the purposes specified here and in other documentation you receive.

[1] “any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her”.

CHANGES TO OUR PRIVACY NOTICE

Please note that this Privacy Notice may be reviewed and amended as and when CG deems necessary to provide for the continued accuracy and protection of our valued customers’ personal information. CG reserves the right to modify this Privacy Notice from time to time without notice. Any amendments to the Privacy Notice will take effect immediately upon posting on this Site. The date of the last update will be clearly indicated at the top of this page. Your continued use of the Site following the posting of any revised Privacy Notice shall be deemed to conclusively indicate your acceptance of such revised Privacy Notice. Accordingly, you should periodically re-review this Privacy Notice.

What are your rights?

Depending on the data protection legislation that applies to the processing of your personal data, you may possess certain rights of your Personal Data. The determination of which data protection legislation applies is generally based on your residency and/or the location where your data is being processed. You can ask us to do various things with your personal information. For example, at any time you can ask us for a copy of your personal information, ask us to correct mistakes, change the way we use your information, or even delete it. You can make any of the requests set out below using the contact details provided to you in your documentation. Your rights, subject to relevant laws and regulations, may encompass the following:

Right Explanation
Right to be informed This encompasses the obligation for us to be transparent in how we collect and use your personal data.
Right of access You have the right to access a copy of the personal data and supplementary information we hold about you and certain details of how we use it. Your personal data will usually be provided to you electronically where possible. Where not possible, or where otherwise agreed, we will provide your personal data in another format (i.e. in writing, audio recording etc. where applicable).
Right to rectification We take reasonable steps to ensure that the personal data we hold about you is accurate and, to the extent necessary, complete. However, if you believe the information we hold on you is inaccurate or incomplete, you can request we correct this. please contact us and you can request us to update or amend it.
Right to erasure In certain circumstances, you have the right to request we delete or remove personal for example where the personal information we collected is no longer necessary for the purpose for which we have told you we will use it, or where you withdraw your consent if that is our legal ground for processing the information. However, this will need to be balanced against other factors, for example according to the type of personal data we hold about you and why we have collected it. There may be a legal and regulatory reason which means we cannot comply with your request.
Right to restrict processing In certain circumstances, you have the right to request we cease processing your data, if:
● You consider it inaccurate or incomplete;
● You think that we no longer need to process your personal data.
● Where we don’t need the data for the original reason we collected it, but may need us to keep it for legal reasons.
Right to data portability In certain circumstances, you have the right to ask that we transfer any personal information that you have provided to us to another third party of your choice. Once transferred, the other party will be responsible for looking after your personal information.
Right to object

 

You have the right to object to our processing under certain circumstances.
Right to stop direct marketing Right to stop direct marketing: You have the right to ask us to stop using your personal information for direct marketing purposes at any time.
Rights related to automated decision-making Rights related to automated decision-making: Where we make decisions about you based solely on automated processing, including profiling, which produce legal effects or similarly significantly affect you, you have the right to:
Request human intervention: If you believe that an automated decision has negatively impacted you, you may request a review by a human decision-maker
Express your point of view
Obtain an explanation of the decision and challenge it: You may contest the outcome of the decision and provide additional information to influence the decision.

To exercise these rights or to find out if these rights will apply then please contact us using the contact details set out in this Privacy Notice.

If you are unhappy with the way we have used your Personal Data or our response to any request by you to exercise any of your rights in the section above, or if you think that we have breached the applicable data protection legislation, then you may have the right to complain to the relevant data protection supervisory authority.

Choices and Means for Exercising Your Data Protection Rights

You may exercise your rights as outlined above by utilizing the contact details provided in the Contact Details section below. To ensure the security of your personal information, we may require you to verify your identity before processing your request.

We are committed to responding to all valid requests within the timeframe prescribed by the applicable data protection legislation. For example:

  • If you have a data subject access request for the personal information we hold about you, we will provide this information within the legally required timeframe. In Bermuda, under the PIPA, this means within 45 days of receiving a valid request, subject to any applicable exceptions under the legislation.
  • If you believe any personal information we hold about you is inaccurate or incomplete, you have the right to request that we correct it. We will respond to such requests within a reasonable timeframe and take appropriate steps to amend the data as required.

We have established the following processes to enable you to exercise your privacy rights:

Below are Steps for exercising your rights as outlined above:

  1. Submitting a Request:
    • Contact us using the details provided in the Contact Details
    • Clearly specify your request, whether it is for access, rectification, erasure, restricting processing, data portability or objection and include details to help us identify the relevant data (e.g., your name, account number, line of business, CG company name or relevant interactions).
  1. Verification of Identity:
    • To ensure your personal data is secure, we may ask you to provide proof of identity (e.g., a government-issued ID or verifying certain account details). While we require identity verification to protect your data, we will only request information that is necessary and proportionate to process your request.
  2. Assessment of Request:
    • Once we receive your request, we will assess it in accordance with applicable legal requirements.
    • Some requests may not be granted due to legal, regulatory, or contractual obligations (e.g., tax compliance or ongoing investigations).
  3. Response Time:
    • We will confirm receipt of your request and provide a response within the timeframe required by law (e.g., 45 days under Bermuda’s PIPA).
  4. Implementation:
    • If approved:
      • Access: We will provide you with a copy of your personal information and any relevant details regarding its use and processing, as required by law.
      • Rectification: We will correct or update any inaccuracies in your personal information and confirm the amendments.
      • Erasure: We will securely delete your personal information and provide confirmation of the deletion.
      • Data Portability: Where applicable, we will provide your personal information in a structured, commonly used, and machine-readable format, or transfer it directly to another organization as per your request and subject to technical feasibility.
      • Objection: cease processing for the stated purposes and provide confirmation.
      • Deletion: We will securely delete your personal data and confirm completion.
      • Restricting: We will limit access to or processing of your data as specified and confirm the restrictions in place.
    • If denied, we will provide a written explanation and information on your right to escalate to the relevant supervisory authority.
  5. Documentation:
    • You will receive written confirmation of the action taken or the reasons for denial.
  6. Fees:
    • We will provide this information free of charge. However, where requests are manifestly unfounded or excessive, in particular because of their repetitive character, we may either:
      • Charge a reasonable fee taking into account the administrative costs; or
      • Refuse to act on the request. We will demonstrate the manifestly unfounded or excessive character of the request if we decide to refuse it.

 

If you are dissatisfied with how we have handled your personal information or our response to any request to exercise your data protection rights, you have the right to lodge a complaint:

  1. Direct Complaint or Appeal to Us:
    • Contact us using the information provided below, and we will do our best to address your concerns promptly and resolve the issue to your satisfaction.
  2. Escalate to the Relevant Data Protection Authority:
    • If you believe we have breached the applicable data protection legislation or if you are dissatisfied with our response, you may lodge a complaint with the relevant data protection supervisory authority.
    • For Bermuda, this is the Privacy Commissioner’s Office. You can find their contact details in the Complaints and How to Contact the Appropriate Authority section below.

CG has adopted internal policies and procedures to comply with the data protection laws in the jurisdiction we operate, including PIPA in Bermuda. These measures include processes for safeguarding personal information, responding to data subject requests, and addressing complaints promptly.

In the event of a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, your personal information we act in accordance with all applicable data protection laws. Where necessary, we will notify you and depending on jurisdiction the appropriate data privacy authority.

How we collect your Personal Data?

CG may collect your Personal Data from various sources, including through:

  • You, such as when you submit applications or forms to apply for our products or services (e.g. name, address, employment, birth date, gender, income).
  • You, your employer and/or plan sponsor if CG provides them with certain products or services (for example, group health or pensions).
  • Transactional activity in your account (e.g., trading history).
  • Quotes, feedback forms and surveys.
  • Other insurance market participants to whom you provide personal data (e.g. brokers, (re)insurers, healthcare providers);
  • A claim, third parties including the other party to the claim (claimant / defendant), witnesses, experts (including medical experts), loss adjustors, solicitors, and claims handlers.
  • Publicly available information such as court judgments, fraud databases, government databases, credit reference agencies, social media, websites etc.
  • Other sources with your consent or with the consent of your representative (for example, from other institutions if you transfer into the CG Group).
  • Individuals that may be associated with (e.g. joint account holders, company employees or directors, family members etc.).

Your particular circumstances will determine which sources apply.

What Personal Data do we collect?

The types of personal data we collect will depend on the nature of the relationship you have with us (i.e. policyholder, insured, product type, claimant, witness, broker, appointed representative, beneficiary etc.). If we need information about other people named on your policy, we may ask you to provide the information below in relation to those people too. We may collect and process different kinds of personal data about you, including, but not limited to the following:

Types of Personal Data Details
Individual Data This includes;
● Full Name (First, Middle, Last, Maiden Name)
● Mailing & Residential Address (including proof of address)
● Contact details (i.e. telephone, email)
● Date of birth
● Gender
● Marital Status
● Place of Birth
● Nationality
● Employer
● Job Title
● Employment HistoryDetails of any other persons included on the policy where they are named on your policy and the relationship to you as policyholder.
Identification Data Includes your identification numbers issued by government bodies or agencies, including national insurance number, passport number and driving license number.
Financial Data Bank account and card payment details, income or other financial information.
Transaction Data Includes details about payments to and from you and other details of products and services you have purchased from us or provided by us.
Risk Data Information about you which we need to collect in order to assess the risk to be insured and provide a quote. This may include data relating to your health or other information you provide us with as part of a claim or a complaint which are special categories of Personal Data.
Policy Data Information about the quotes you receive and policies issued to you. Also, information relevant to your insurance policy such as details about your vehicle, property, previous policies or claims, recent damage etc.
Background Anti Money Laundering (AML), Sanctions & Anti-Fraud Checks Information which is publicly available relating to you including criminal offenses and convictions, sanctions, credit history, anti-fraud data, etc.
Claims Data Information regarding past and present claims, including unrelated insurance policies, may involve data pertaining to your health or other details you provide during the claims or complaints process. This data falls under the special category of Personal Data.
Visual Information Images collected from security cameras in our offices and basic contact details for visitor registration purposes such as your name, relevant professional information and contact details.

Photographs or video recordings created in connection with our insurance or other business activities, including for claims assessment, processing, settlement, and disputes, or for other relevant purposes as permitted by law.

Telephone Recordings Recordings of telephone calls to our representatives.
Sensitive Personal Information As an insurance company, we may collect and process sensitive personal information, particularly in relation to health insurance and claims. This may include:

  • Health and medical information
  • Genetic data
  • Biometric data
  • Information about racial or ethnic origin
  • Religious or philosophical beliefs
  • Sexual orientation or sex life
  • Criminal convictions or offenses

We only collect and process this information when strictly necessary for providing our insurance services, handling claims, or as required by law.

Special Categories of Personal Data – Medical or Health Data Current or former physical or mental or medical condition; health status; injury or disability information; medical procedures performed; personal habits (for example, smoking or consumption of alcohol); prescription information; and medical history.

CG will not process information relating to the categories listed above other than where this information is publicly available, specifically requested from you with your consent or where you have made this information available to us as part of a claim or a complaint.

Special Categories of Personal Data – Other Certain types of Personal Data receive enhanced protection under the relevant data protection laws. These categories typically include health information, criminal convictions, racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, and data related to an individual’s sex life or sexual orientation.

 

CG will not process information relating to the categories listed above other than where this information is publicly available, specifically requested from you with your consent or where you have made this information available to us as part of a claim or a complaint.

We take additional precautions when collecting and using personal information about children. For information society services directed at children, we will obtain parental consent before collecting or using a child’s personal information.

How is your personal data used and processed?

We may process your personal data for a number of different purposes, including to deliver and manage our products and services we provide to you. Under data protection laws we can only process your information where we have a lawful basis for doing. This includes when we have your consent, when it’s necessary for the performance of a contract, when we have a legitimate interest, or when required by law. We have set out below the main reasons why we process your personal information and the applicable circumstances when we will do so.

Quoting / Provision of Insurance Cover

Purpose & Activity  Details
● Policyholder/Insured onboarding procedures, including background AML, Sanctions and Anti-Fraud checks.

● Assessment of the risks to be covered to match against the appropriate policy and premium.

● Payment of premium policyholder/insured

 

● Performance of our contract with you. Such use is necessary in order to take steps to provide your insurance policy.

● Compliance with legal and regulatory obligations.

● Legitimate Interests (to ensure the potential client is within our risk appetite and to determine the appropriate product).

Policy Administration

Purpose & Activity  Details
● Providing general client care and assistance as per your insurance policy. This involves communicating with you regarding administrative matters, requested modifications to your insurance policy, or any other services associated with the provided benefits. Sending you updates pertaining to your insurance policy and notifying you about any changes to our terms or privacy notice.

● Collection and refunding of premium.

● Payments to and from persons associated with the insurance policy.

● Policy management which includes; confirming, updating, and enhancing our records to ensure the accuracy of your information, requesting additional information related to the products or services we are providing to you. Additionally, we may inform you about any changes to our services and products.

 

● Performance of our contract with you. Such use is necessary in order to provide your insurance policy and we have a legitimate business need to use your personal information to administer your insurance policy and handle any claims.

● Compliance with legal and regulatory obligations.

● Legitimate Interests (to ensure information is complete and accurate)

● Consent (if applicable).

 

Claims Processing

Purpose & Activity  Details
● Managing (re)insurance claims.

● Investigation & prosecuting fraud.

● Defending or prosecuting legal claims.

● Performance of our contract with you.

● Compliance with legal and regulatory obligations.

● Legitimate Interests (to assist our clients in assessing and making claims).

 

Policy Renewals

Purpose & Activity  Details
● Communicating with the policyholder/insured to renew the policy.

● Assessment of the risks to be covered to match against the appropriate policy and premium.

● Payment of premium policyholder/insured.

 

● Performance of our contract with you

● Compliance with legal and regulatory obligations

● Legitimate Interests (to ensure the potential client is within our risk appetite and to determine the appropriate product)

Complaints Handling

Purpose & Activity  Details
● Investigations and resolving complaints grievances or misconduct.

 

● Performance of our contract with you

● Compliance with legal and regulatory obligations

● Legitimate Interests (to assist our clients in addressing and resolving and complaints)

Pension Services

Purpose & Activity  Details
● Customer onboarding procedures, including background AML, Sanctions and Anti-Fraud checks.

● General client-care and communicating with the customer about pensions or investments. This involves communicating with you regarding administrative matters, requested modifications to your pensions policy.

● Payments to and from persons associated with the pensions policy.

 

● Performance of our contract with you

● Compliance with legal and regulatory obligations

● Legitimate Interests (to ensure the potential client is within our risk appetite and to determine the appropriate product)

Other

Purpose & Activity  Details
● Direct Marketing & Feedback Surveys

 

● Legitimate Interests (to enhance our product/service offering and grow our business)

● Consent (if applicable)

● To defend CG against legal proceedings.

● To prevent, detect and investigate fraud.

● To exercise, defend & protect our legal rights to the rights of our clients and third parties.

● Performance of our contract with you

● Compliance with legal and regulatory obligations

● Legitimate Interests (to ensure the business is managed efficiently and correctly)

● Risk modelling to help establish our actuarial, pricing and underwriting strategies as well as to develop customer profiling. ● Legitimate Interests (to build risk models that allow placing of risk)

● Consent (if applicable)

● Transferring books of business, company sales and business re-organization. ● Performance of a contract

● Legitimate Interests (to structure the business appropriately)

● Compliance with legal and regulatory obligations

 

● To provide information to our service providers, auditors, agents and group companies that perform activities on our behalf.

 

● Performance of a contract

● Legitimate Interests (to ensure the business is managed efficiently and correctly)

● Compliance with legal and regulatory obligations

 

We will use your personally identifiable information to, among other things, serve you better, process your enquiry or application for each product or service together, and respond to your enquiries regarding CG. We may also use this information to inform you of any changes to our product and service offerings and pricing structures.

The information that we collect and retain is used to create an accurate view of each individual valued customer. In many cases the information we collect helps us to customize a product or service to meet our customer’s individual needs.

Direct Marketing

CG presently conducts direct marketing activities offering suggestions, recommendations and insights regarding our products and services that we think may be of interest to you. We may contact you via post, telephone, e-mail, social media or through our business portals. We do so on the basis of our legitimate interests or consent where obtained. You have the option to unsubscribe from marketing communications at any time by contacting us through the “Contact us” section.

Special Categories of Personal Data

We take extra precautions when handling sensitive personal information, such as information about your health, race, or religion. We will only use such information with your explicit consent or as permitted by law. When the personal information we process about you is classed as sensitive personal information (criminal offences information and ‘Special Category Personal Data’ such as your health, sexual orientation and ethnic origin), we must have an additional legal condition for such processing, including the substantial public interest condition for the insurance industry or, where necessary, we will ask for your consent.

However, processing of personal and sensitive personal information is necessary in order for us to provide your insurance policy and/or pension policy, benefits or other services, such as assessing your application and setting you up as a policyholder, or trust beneficiary, administering and managing your insurance policy or benefits, providing all related services, providing a quote, handling and paying claims and communicating with you. In these circumstances, if you do not provide such information, we may not be able to offer you a policy, service or process a claim.

What other information is collected? How is it used?

Certain Information You Provide in Communications via the Site

We do not consider any information other than personally identifiable information communicated to Coralisle (e.g., questions, comments, ideas or suggestions) confidential and we have no obligations of confidentiality to you and disclaim any such obligations with respect to such information. You understand that anything you transmit to Coralisle may, subject to applicable law, be used by Coralisle for any purpose and you hereby grant to us to use, including reproduce, disclose, transmit, publish, broadcast and post such information. Furthermore, Coralisle is free to use any ideas, concepts, know-how, processes or techniques contained in any communication you send via any Site (including via any email address posted on any Site) for any purpose whatsoever including, but not limited to, developing, manufacturing, marketing, and selling products and services using such ideas, concepts, know-how, processes, or techniques.

Additional Information Collected by Coralisle on the Site

Coralisle may, or may engage an independent organization, to collect certain information in anonymous and/or aggregate form in order to collect data such as the total number of visits to our Site and the number of visitors to each page of our Site. We use this information to understand how visitors use the Site so that we may improve it. We may also share this anonymous and/or aggregate information with Coralisle’s affiliates, subsidiaries, and third parties (as described in this Privacy Notice). You understand that such information is not personally identifiable information and that we have no obligations of confidentiality to you with respect to such information.

Profiling and automated decision making

Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location or movements.

CG performs profiling of your personal data to:

  • Determine whether the premium amount matches the associated risk of the customer and product; and
  • Help identify and understand fraud or suspicious activity patterns.

Automated decision-making is the process of making a decision by automated means without any human involvement. These decisions can be based on factual data, as well as on digitally created profiles or inferred data. Some of our decisions are made automatically by computer systems/technology (rather than by our employees) and based on your personal information. We recognize that sometimes these decisions can have a legal or similarly significant effect on you and when they do, you can ask us to provide an explanation and ask for a member of staff to review the decision:

Policy Underwriting

CG Insurance

  • Where you use any of our Quote and Buy applications on any of our Site, the generation of insurance quotations and the decision by us to sell certain insurance products is done using personal data provided by you to make an automated decision on eligibility and premium.
  • We use the personal information that you and others provide to us about you, your family, property, where you live, your policy, claims history, and other non-personal information such as garage repair costs to determine your premium and eligibility. We also use information about how long you have been a customer, how many claims you have made and how much you pay in premiums to determine what terms you are offered at renewal.

 

Claims Processing 

CG Medical

  • We may use automated processing to assess who is at fault for a claim and / or whether your claim is eligible for payment.
  • Eligibility for payment of a healthcare provider invoice is based on whether your policy is active at the time of your claim and/or incur a cost for which there is a claim and if so whether or not the claim or cost is covered under the terms of your policy.

CG Insurance

  • We may use automated processing to assess who is at fault for a claim and / or whether your claim is eligible for payment. 

Anti-Money Laundering, Sanctions & Fraud Prevention

  • CG uses automated anti-fraud, anti-money laundering and sanction filters that check against lists of people known to have undertaken fraudulent transactions or are sanctioned individuals or entity’s and will reject those applicants on the basis they are likely to defraud the company.

Automated Decision Making and Your Rights

You have the right to not be subject to decisions based solely on automated processing, including profiling, which produce legal effects or similarly significantly affect you. This right ensures that decisions impacting you are made with a level of human intervention where appropriate.

If we use automated decision-making processes, we commit to:

  • Informing You About the Processing: We will notify you when such processing occurs and its purpose.
  • Providing Transparency: We will provide meaningful information about the logic involved in the decision-making process.
  • Explaining the Impact: We will explain the significance and potential consequences of the processing to ensure you understand how it may affect you.

Should you request us to provide more information on automated decision-making, and to verify whether a decision has been made correctly, we will act in accordance with the applicable data protection law.

Sharing of Personal Data

In order to provide our products and services your personal data may be shared with other companies in the CG group. Additionally, we may pass your personal data on to third-party service providers contracted to CG in the course of dealing with you. Any third parties that we may share your data with are obliged to keep your details securely, and to use them only for the legitimate reasons they were obtained for originally. When they no longer need your data, they will dispose of the details in line with CG’s procedures as set out in the contracts signed with them. If we wish to pass your sensitive personal data onto a third party we will only do so once we have obtained your consent, unless we are legally required to do otherwise.

The following is a non-exhaustive list of third parties we may disclose your Personal Data under certain circumstances;

  • Other Companies in the CG Group – we may share your personal data with other CG group companies who may use this data for the purposes described in this Privacy Notice.
  • Service providers, contractors, or agents appointed by us – we may disclose personal data to service providers or agents who perform services and other business operations on our behalf. These may include IT and analytics providers, medical specialists and hospitals, actuarial service entities, auditors, advisors, claim adjustors and administrators, brokers, reinsurers etc.
  • Insurance market participants – financial institutions and business partners who utilize your personal data in connection with providing insurance services or related products.
  • Family member, relatives, guardian or power of attorney – when someone else is acting on your behalf where you are incapacitated or unable.
  • Any law enforcement agency, court, regulator, competent authority, governmental or professional body – We may share your personal data with these parties when we believe it is necessary or advisable to comply with legal or regulatory obligations or to protect our rights or the property of the CG Group.
  • Acquisition/Takeover – In the event of a sale, transfer, or contemplated restructuring of all or a significant portion of our assets and business, we may disclose your personal data to any third party involved in the transaction. We will make reasonable efforts to ensure that the receiving entity utilizes the personal data in a manner consistent with this Privacy Notice.

In circumstances where there is a lawful basis to transfer your personal information to overseas third parties, we take steps to ensure that your information receives an adequate level of protection, as required by data protection laws. This may include using contractual clauses or only transferring data to countries deemed to have adequate data protection laws.

Retention of data

We keep your personal information for as long as reasonably necessary to fulfil the relevant purposes set out in this Privacy Notice and in order to comply or demonstrate compliance with our legal and regulatory obligations. The time period we retain your personal information for will differ depending on the nature of the personal information and what we do with it. We do retain certain documents for extended periods, if necessary or advisable to comply with our legal, regulatory, tax or accounting requirements. Retention of documents allows either you or us to commence or defend legal claims in relation to the insurance or related product.

You may obtain more information as to the retention periods or the criteria used by us to determine the retention periods by contacting us (refer to the Contact Details section below).

Securing your information

CG places great importance on the security of all personally identifiable information associated with our customers. We have security measures in place to attempt to protect against the loss, misuse and alteration of customer data under our control. While we cannot ensure or guarantee that loss, misuse or alteration of data will not occur, we use our best efforts to prevent this through implementing the following:

  • IT Security Policy and Procedures.
  • IT Risk and Control Register.
  • Active directory group policy with access control, password complexity/history controls, patching, windows updates and auditing policies.
  • Physical protection of CG Data Center and workplace.
  • Data center monitoring and notification system
  • Firewalls with limited and controlled access
  • File server access controls.
  • Hardware and software Vendor SLAs, signed NDA when required.
  • Security Penetration testing and venerability assessment by a third party.
  • Backup data encryption.
  • Employee training.
  • Periodic security audits.

Non-personal information

We may collect non-personal information about you such as the type of internet browsers you use or the Website from which you linked to our Site. You cannot be identified from this information and it is only used to assist us in providing an effective service on this Site. We may disclose aggregate statistics about our Site users to prospective partners, advertisers and other reputable third parties, but these statistics will include no personally identifying information.

Log Files

As is true of most website hosts, CG gathers certain information automatically and stores it in log files. This information includes user’s Internet protocol (IP) addresses, browser type, Internet service provider (ISP), referring/exit pages, operating system, date/time stamp, and clickstream data. CG uses this information, which does not identify individual users, to analyze trends, administer the Site, and track users’ movements around the Site. We do not link this automatically-collected data to personally identifiable information.

Cookies

A “cookie” is a piece of information that a web server may place on your computer when you visit a website. Cookies are commonly used by websites to improve the user experience. Many cookies last only through a single website session or visit (session cookies). Others may have an expiration date or may remain on your computer until you delete them (persistent cookies).

This Site (cgcoralisle.com) uses cookies. We use both session cookies and persistent cookies for many purposes, such as: maintaining continuity during a user session; gathering data about the usage of our Site for research, marketing and other purposes; to enable our servers to recognize your computer so that your preferences and/or authentication credentials will be recognized to avoid repeated information gathering; to track and measure the number of Site visits and page views; to track the time spent on our Site; to otherwise track visitor behavior on our Site so that we can evolve the operational features of our Site to satisfy the demands of the visitors; and, to allow us to manage the load distribution of traffic on the Site.

You agree and acknowledge that you can decide if, and how, your computer will accept any cookies by configuring your cookie preferences in your browser. You agree that if you choose to reject cookies, you may not be able to use this Site, or certain of our Site’s features. You also agree that we may use other persons or businesses to enable cookies on our Site to gather information on our behalf. Those persons or businesses may operate hardware, software or services on our behalf which will also use cookies that are enabled on our Site, which will be used for the same purposes we have described. You agree that the information that we gather, and that is generated by, the cookies we deploy may be transmitted by, stored, processed and analyzed by other persons and businesses on our behalf.

Some of the features of this website may rely on services offered by third-party websites, which may include, in particular:

  • Sharing buttons (Facebook, LinkedIn and Twitter)
  • Integrated tweets (Twitter)
  • Interactive timelines (Facebook, Instagram, LinkedIn and Twitter)
  • Videos (Youtube)
  • Cookies and Pixels

These features use these third parties’ cookies, which are placed by these services onto your computer allowing them to track your browsing. Such features may enable the social media to identify you and see your browsing on this Site if your session on the relevant social media is opened on your device when you use this Site. You agree to check the relevant social media website(s) for more information about their privacy policies and these cookies.

By using cookies, we collect and process your personal data as a controller. You have certain rights regarding the personal data we hold about you, subject to local law. These may include the rights to access, correct, delete, restrict or object to our use of, or receive a portable copy in a usable electronic format of your personal data, and to lodge a complaint with your local data protection or privacy regulator. Depending on your jurisdiction, you may also have the right to provide instructions regarding the handling of your personal data after your death. You agree that we may modify or update this Cookie policy and terms from time to time. If we change this Cookie policy and terms, we will notify you of the changes. Where changes to this Cookie policy and terms will have a fundamental impact on the nature of the personal data processing or otherwise have a substantial impact on you, we will give you sufficient advance notice so that you have the opportunity to exercise your rights (e.g. to object to the processing).

NAME OF COOKIE Source (Provider) Purpose/Application (and types) Retention/Expiry
app-cookie-statement-key cgcoralisle.com shows or hides the cookie banner ~8 months
cookieconsent_status cgcoralisle.com shows or hides the cookie banner 24 hours
cgigroup_site cgcoralisle.com remembers the country selection 24 hours
act facebook.com to keep users logged in 3 months
c_user facebook.com store a unique user ID ~3 months
datr facebook.com provide fraud prevention 2 years
fr facebook.com enables ad delivery or retargeting ~3 months
presence facebook.com store and track if the browser tab is active When the session ends
sb facebook.com store browser details 2 years
wd facebook.com determine screen resolution 1 week
xs facebook.com store a unique session id ~3 months
EDAAT .adsrvr.org stores temporary security token used only on EDAA opt out pages 1 hour
TDID .adsrvr.org Trade Desk ID (TDID) is the main cookie and ID used to recognize webbrowser profiles over time across sites 1 year
TDCPM .adsrvr.org Trade Desk Cookie Partner Mapping (TDCPM) record which partners The Trade Desk has matched IDs with in order to prevent redundant matching calls. 1 year
TTDOptOut .adsrvr.org stores static value recording the user’s choice to opt out. Exclusive of the other cookies so The Trade Desk will not have an ID on the browser when the TTDOptOut cookie is present 5 years
TTDOptOutOfDataSale .adsrvr.org stores a static value recording the user’s choice to opt out of the selling of data to third parties 5 years

 

Links to Other Websites

CG may place hypertext links on the Site that connect to third party websites. This Privacy Notice does not cover the links within this Site linking to other websites which are not controlled by us. You understand and agree that CG has no control over these third-party websites, their content, or their terms of use and privacy policies. We are not responsible for the collection or use of your Personal Information from these third-party websites. Your use of such linked sites will be subject to such websites’ terms of use and privacy policies, and we therefore encourage you to read them before using or sharing personal information with such sites.

Google Analytics

Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our Service. This data is shared with other Google services. Google may use the collected data to contextualize and personalize the ads of its own advertising network.

Google Analytics is used to collect information about how visitors use our Site. We use the information to compile reports and to help us improve the Site. The cookie collects information in an anonymous form, including the number of visitors to the Site, where visitors have come to the Site from and what pages they visited. The cookie does not collect personal identifiable information. The _ga cookie will last for two years. Please refer to Google’s privacy policy which includes analytics for further information: http://www.google.co.uk/intl/en/policies/privacy/.

You can opt out of Google Analytics by visiting this page.

NAME OF COOKIE Source (Provider) Purpose/Application (and types) Retention/Expiry
_ga google.com Google Analytics 13 months
_ga_X1MJV5RMVR google.com Google Analytics 13 months
_gat_UA-194267317-1 google.com Google Analytics session
_gcl_au google.com Google Analytics 3 months
_gid google.com Google Analytics 48 hours

 

Google Signals in Google Analytics 4

What is Google Signals?

Google Signals allows us to enhance our analytics capabilities by enabling features such as:

  • Cross-device reporting: Understanding user behaviour across multiple devices (e.g., phone, tablet, and desktop).
  • Enhanced audience insights: Accessing aggregated demographic and interest information about our users.
  • Ad personalization: Supporting Google Ads features like remarketing to deliver more relevant advertisements to users (if enabled).

The data collected through Google Signals is aggregated and anonymized. It does not provide us with personally identifiable information (PII) about users. All data processing is subject to Google’s privacy policies.

How do we use it?

We use Google Signals as part of our implementation of Google Analytics 4 (GA4) to better understand and analyze user behavior on our Site. Google Signals is an advanced feature provided by Google that enables us to collect aggregated, anonymized data about website usage, including information derived from users logged into their Google accounts. 

Data Sharing and Responsibility

The data collected through Google Signals is shared with Google, who acts as the primary processor of this data under their own privacy terms and conditions. We do not have access to any personal data tied to individual Google accounts.

To learn more about how Google collects and processes data through Google Signals, including how they use cookies and other identifiers, please visit the Google Privacy Policy.

For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page: https://policies.google.com/privacy.

Your Choices

  • Google Account Settings: If you are logged into your Google account, you can manage or disable personalized advertising through your Google Ads Settings.
  • Analytics Opt-Out: You can prevent your data from being used by Google Analytics by installing the Google Analytics Opt-Out Browser Add-on.

We respect your data privacy and provide these options to give you control over your data. For further information on how we handle your personal information, please refer to the broader sections of this Privacy Notice.

CG’s Privacy Officer

CG has appointed Gregory Rose as the Privacy Officer (PO). The PO is responsible for overseeing CG’s privacy program and ensuring compliance with this Privacy Policy and applicable all data privacy and protection laws. Any questions or queries please utilize the Contact Details section below.

Complaints

In the event that you wish to make a complaint about how your personal data is being processed by CG (or third parties as described in our Data Protection Policy), or how your complaint has been handled, you have the right to lodge a complaint directly with the supervisory authority, CG’s PO at privacy@cgcoralisle.com or via the complaint feedback portal on the Site (Complaints Policy).

Contact details

How to contact us

We recognize that you may have questions on how we process and/or store your data, or may want to change either the data we hold on you or how we communicate with you in the future. If you have given consent for processing, you are free to withdraw that consent. To do so, please contact the PO at privacy@cgcoralisle.com. For matters relating specifically to Jamaica please contact JM.DPO@cgcoralisle.com.

 

If you have any questions in respect of this Privacy Notice, or would like to exercise your rights as a data subject (for example, to correct data or to exercise your right to access) please contact the PO at privacy@cgcoralisle.com.

How to Contact the appropriate authority

 

Country Competent Authority Contact Information
Anguilla Financial Services Commission MAICO Building

P.O. Box 1575

The Valley

Anguilla

 

Tel: +1 264 497 5881
Email: info@afsc.ai   
Website: http://fsc.org.ai/

Antigua & Barbuda Financial Services Regulatory Commission Royal Palm Place

Friars Hill Road

St Johns

Antigua

 

Tel: +1 268 481 3300

Email: info@fsrc.gov.ag

Website: https://www.fsrc.gov.ag/

Aruba Centrale Bank van Aruba J.E. Irausquin Boulevard 8

P.O. Box 18

Oranjestad

Aruba

 

Tel: 297 525 2100

Email: informationcenter@cbaruba.org

Website: https://www.cbaruba.org/

Bermuda Office of the Privacy Commissioner Maxwell Roberts Building, 4th Floor

1 Church Street
Hamilton, HM 11
Bermuda

Tel: +441 543 7748
Email: PrivCom@privacy.bm 
Website: www.privacy.bm

Bahamas The Office of the Data Protection Commissioner 31A Poinciana House

North Building

East Bay Street

P.O. Box N-4844

Nassau

Bahamas

 

Tel: +1 242 604 1001
Email: dataprotection@bahamas.gov.bs

Website: https://www.bahamas.gov.bs/

Barbados Data Protection Commissioner Ministry of Industry, Innovation, Science & Technology

5th Floor, SSA Building

Vaucluse, St. Thomas

Barbados

 

Tel: +1 246 536 1200

Belize Office of the Supervision of Insurance & Private Pension Supervisor of Insurance & Private Pension

#2 Toucan Avenue

Belmopan

Belize, C.A.

 

Tel: 501 822 3808

Email: osipp@mof.gov.bz

Website: https://osipp.gov.bz/

British Virgin Islands Financial Services Commission 18 Pasea Estate Road

Road Town

Tortola, VG1110

BVI

 

Tel: 284 294 1324

Email: commissioner@bvifsc.vg

Website: https://www.bvifsc.vg/

Cayman Islands Office of the Ombudsman 5th Floor, Anderson Square

64 Shedden Road

George Town

KY1-1107

Grand Cayman

 

Tel: +1 345 946 6283
Email: info@ombudsman.ky  
Website: https://ombudsman.ky/

Curacao Centrale Bank van Curacao en Sint Maarten Simon Bolivar Plein 1

Willemstad

Curacao

 

Tel: +599 9 434 5500

Email: info@centralbank.cw

Website: https://www.centralbank.cw/

Dominica Financial Services Unit Ministry of Finance

5th Floor, Financial Centre

Kennedy Avenue

Roseau

Commonwealth of Dominica

 

Tel: 767 266 3514

Email: fsu@dominica.gov.dm

Website: https://www.fsu.gov.dm

Grenada Grenada Authority for the Regulation of Financial Institutions The National Stadium

P.O. Box 3973

St. George’s

Grenada, W.I.

 

Tel: +1 473 440 6575

Email: garfininfo@garfin.org

Website: https://www.garfin.gd/

Guyana Bank of Guyana 1 Avenue of the Republic

P.O. Box 1003

Georgetown

Guyana

 

Tel: +592 225 3250-9

Email: n/a

Website: https://bankofguyana.org.gy/bog/

Jamaica The Office of the Information Commissioner Ministry of Science, Energy, Telecommunications and Transport

PCJ Building

36 Trafalgar Road

Kingston 10

Jamaica

 

Tel: 876 929 8990-9

Email: info@mset.gov.jm

Website: www.mset.gov.jm

Montserrat Financial Services Commission The Commissioner

Phoenix House

Valley View Building

P.O. Box 188

Brades

Montserrat

 

Tel: 1 664 491 6887

Email: info@fsc.ms

Wesbite: https://www.fscmontserrat.org/

St. Maarten Centrale Bank van Curacao en Sint Maarten Simon Bolivar Plein 1

Willemstad

Curacao

 

Tel: +599 9 434 5500

Email: info@centralbank.cw

Website: https://www.centralbank.cw/

St. Lucia Financial Services Regulator Authority 6th Floor Francis Compton Building Waterfront

Castries

St. Lucia W.I.

 

Tel: 758 468 2990

Email: finsersup@gosl.gov.lc

Website: https://fsrastlucia.org/

St. Vincent & the Grenadines Financial Services Authority 2nd Floor, Reigate Building

P.O. Box 356

Kingston

St. Vincent, W.I.

 

Tel: 784 456 2577

Email: info@svgfsa.com

Website: https://svgfsa.com/

Trinidad & Tobago Central Bank of Trinidad & Tobago Eric Williams Plaza

Independence Square

P.O. Box 1250

Port of Spain

 

Tel: 1 868 621 2288

Email: info@central-bank.org.tt

Website: https://www.central-bank.org.tt/

Turks & Caicos Islands Financial Services Commission Providenciales Office

Caribbean Place Plaza

Providenciales, Leeward Highway

Turks & Caicos Islands, BWI

 

Tel: 649 946 5314

Email: fsc@tcifsc.tc

Website: https://tcifsc.tc/