1. Introduction
This Privacy Notice (“Notice”) explains how Aon Risk Insurance Brokers India Pvt. Ltd. and its affiliated companies and subsidiaries (“Aon”) makes use of the personal information collected about you which our client (i.e. your employer) or you provide us to perform the Insurance Servicing (“Services”). This Notice does not apply to your use of any third-party sites linked to from this Aon Benefits Gateway (“Platform”). Throughout this Notice Aon may be referred to as "we", "us", "our" or "Aon".
2. Collecting Your Information
2.1 The information we collect about you may include the following:
a. basic personal details, such as your name, address contact details, date of birth, age, gender, photograph, mobile number, email address and marital status;
b. demographic details, such as information about your lifestyle, and insurance requirements;
c. health information, such as information about your health status, medical records and medical assessment outcomes;
d. insurance details, such as existing and previous insurance policy details;
e. user account information, such as password, biometric information;
f. claims details, such as information about any claims concerning your insurance policy;
g. benefits program participation and cover information, such as benefit elections, pension entitlement information, beneficiary information, benefit plan account balances or accrued benefits, date of retirement and any relevant matters impacting your benefits such as voluntary contributions, or other adjustments;
h. employment information, such as employee number, date of hire, date of termination; and
i. your marketing preferences.
2.2 You are required to provide any personal information we reasonably require (in a form acceptable to us) to meet our obligations in connection with the services we provide to our clients (i.e. your employer), including any legal and regulatory obligations. Where you fail to provide or delay in providing information we reasonably require to fulfil these obligations, we may be unable to offer the Services to you and/or we may terminate the Services provided with immediate effect.
2.3 Where you provide personal information to Aon about third party individuals (e.g. information about your spouse, civil partner, child(ren), dependants or emergency contacts), where appropriate, you should provide these individuals with a copy of this Notice beforehand or ensure they are otherwise made aware of how their information will be used by Aon.
2.4 In addition to collecting personal information from you directly, we may also collect personal information about you from other third parties, such as your employer, third party administrators, and insurers. This information may be sourced prior to and during the course of providing the Services to you.
3. Processing Your Information
3.1 We will use the information we collect about you in connection with the Services to:
a. Provide you the Services via the Platform;
b. carry out due diligence necessary for assessing and administering the Services provided to you;
c. evaluate risks relating to your prospective or existing insurance policy;
d. offer, administer and manage the Services provided to you, including providing initial and renewal quotations and client care information;
e. process your payment for the insurance premium and any mid-term adjustments;
f. investigate and settle claims or complaints in relation to insurance policies and/or the Services provided;
g. facilitate the prevention, detection and investigation of crime and the apprehension or prosecution of offenders;
h. trace debtors and recover any outstanding debt in connection with the Services provided;
i. fulfil legal and regulatory obligations and monitor compliance with the same;
j. transfer books of business to successors of the business in the event of a sale or reorganisation;
k. perform analytics for risk modelling purposes and to analyse trends;
l. conduct market research and canvass your views about the Services in order to develop and improve our products and service offerings generally; and
m. offer other products and services that may be of interest to you.
4. Legal Grounds for Processing
We rely on the following legal grounds to collect and use your personal information:
a. Legal and regulatory obligations
The collection and use of some aspects of your personal information is necessary to enable us to meet our legal and regulatory obligations, particularly for the processing activities set out in section 3 (i) of this Notice. For example, Aon is licensed and regulated by the Insurance Regulatory and Development Authority of India and is required to provide the service in accordance with relevant regulatory rules.
b. Legitimate uses
The collection and use of some aspects of your personal information is necessary for certain legitimate uses, particularly for the processing activities set out in sections 3(b), (f), (g), (h), (i), and (j) of this Notice. Where we rely on this legal basis to collect and use your personal information we shall take appropriate steps to ensure the processing does not infringe the rights and freedoms conferred to you under the applicable data privacy laws.
c. Consent
Where we offer the Services or enter into a contract with our client (i.e. your employer) to provide the Services, we will rely on your consent provided by you to our client (i.e. your employer) to collect and use your personal information where necessary to enable us to take steps to provide the Services and fulfil our obligations in the contract with our client. The collection and use of some aspects of your personal information is necessary:
- information concerning your health, specifically for the purpose of assessing risks relating to your prospective or existing insurance policy, especially for the processing activities set out in sections 3(c) and 3(f) of this Notice,
- information related to criminal convictions or alleged offences to prevent and detect fraud, other financial crime and crime generally in the insurance industry particularly for the processing activities set out in section 3 (g) of this Notice,
- where we offer other products and services that may be of interest to you as set out in section 3(m).
We may also share this information with other insurance market participants and third parties where necessary to offer, administer and manage the Services provided to you, such as insurers and insurance underwriters, reinsurers, brokers and vetting agencies.
Where we rely on your consent to collect and use your information, you are not obliged to provide your consent and you may choose to subsequently withdraw your consent at any stage once provided. However, where you refuse to provide information that we reasonably require to provide the Services, we may be unable to offer you the Services and/or we may terminate the Services provided with immediate effect.
Where you choose to receive the Services from us you agree to the collection and use of your personal information in the way we describe in this section of the Notice. You also agree that such information may be collected and used for the above purpose by the insurance underwriter named in your insurance policy documentation. You should refer to the insurer’s privacy notice on their website for further information about their privacy practices.
5. Accuracy of Your Information
We rely on the availability of accurate personal information in order to provide the Services to you and operate our business. You should therefore notify us of any changes to your personal information, particularly changes concerning your contact details, bank account details, insurance policy details or any other information that may affect the proper management and administration of your insurance policy and/or the Services provided to you.
6. Recipients of Your Information
We generally share your personal information with the following categories of recipients where necessary to offer, administer and manage the Services provided to you:
a. within Aon, we may share your personal information with other Aon entities, brands, divisions, and subsidiaries for the processing purposes outlined in this Notice;
b. insurance market participants where necessary to offer, administer and manage the Services provided to you, such as insurers and insurance underwriters, reinsurers, brokers, intermediaries and loss adjusters. The insurance underwriter is the insurer that is underwriting your insurance policy and is named in your policy documentation. You should refer to the insurer’s privacy notice on their website for further information about their privacy practices;
c. vetting and risk management agencies, such as credit reference, criminal record, fraud prevention, data validation and other professional advisory agencies, where necessary to prevent and detect fraud in the insurance industry and take steps to assess the risk in relation to prospective or existing insurance policies and/or the Services;
d. legal advisers, loss adjusters, and claims investigators, where necessary to investigate, exercise or defend legal claims, insurance claims or other claims of a similar nature;
e. medical professionals, e.g. where you provide health information in connection with a claim against your insurance policy;
f. law enforcement bodies, where necessary to facilitate the prevention or detection of crime or the apprehension or prosecution of offenders;
g. public authorities, regulators and government bodies, where necessary for us to comply with our legal and regulatory obligations;
h. third party suppliers, where we outsource our processing operations to suppliers that process personal information on our behalf. These processing operations shall remain under our control and will be carried out in accordance with our security standards and strict instructions; and
i. successors of the business, where Aon or the Services are sold to, acquired by or merged with another organisation, in whole or in part. Where personal information is shared in these circumstances it will continue to be used in accordance with this Notice.
7. Overseas Transfers of Your Information
We operate on a global and worldwide basis and we therefore reserve the right to transfer personal information about you to other countries to be processed for the purposes outlined in the Notice. In particular, we may make such transfers to offer, administer and manage the Services provided to you and improve the efficiency of our business operations. We shall endeavour to ensure that such transfers comply with all applicable data privacy laws and regulations and provide appropriate protection for the rights and freedoms conferred to individuals under such laws.
8. Retention of Your Information
We retain appropriate records of your personal information to operate our business and comply with our legal and regulatory obligations. These records are retained for predefined retention periods that may extend beyond the period for which we provide the Services to you. In most cases we shall retain your personal information for no longer than is required under the applicable laws. We have implemented appropriate measures to ensure your personal information is securely destroyed in a timely and consistent manner when no longer required.
9. Information Security
The security of your personal information is important to us and we have implemented appropriate security measures to protect the confidentiality, integrity and availability of the personal information we collect about you and ensure that such information is processed in accordance with applicable data privacy laws.
10. Your Information Rights
10.1 You have the following rights under applicable data privacy laws in respect of any personal information we collect and use about you:
a. The right to access and inspect your personal information or be provided with a permanent copy of the information being held about you.
b. The right to request the correction of your personal information or in cases where the accuracy of information is disputed, to supplement the information to give notice that you dispute its accuracy.
c. The right to request the erasure of your personal information, particularly where the continued use of the information is no longer necessary.
d. The right to object to the use of your personal information, particularly where you feel there are no longer sufficient legitimate grounds for us to continue processing the information.
e. The right to request the restriction of your personal information from further use, e.g. where the accuracy of the information is disputed and you request that the information not be used until its accuracy is confirmed.
f. The right to request that some aspects of your personal information be provided to you or a third party of your choice in electronic form to enable its reuse.
g. The right to withdraw consent at any time, whenever we have asked for your consent for processing your personal information without affecting the lawfulness of processing based on consent before its withdrawal. See section (4)(c) above for further information.
h. The right to complain to the relevant data protection regulator about our processing of your personal information.
i. The right to nominate any other individual in the event of your death or inability to exercise your rights.
10.2 It is important to note, however, that some of the rights described above in section 10.1 can only be exercised in certain circumstances. If we are unable to fulfil a request from you to exercise one of your rights under applicable data privacy laws we will write to you to explain the reason for refusal (e.g., for compliance with a legal obligation, for the establishment, exercise or defence of legal claims or legal exemptions). Where required, further information concerning these rights and their application can be obtained by contacting us.
11. Complaints
If you wish to make a complaint about the way we use your personal information you should raise this with us by contacting us in the first instance:
Aon’s Global Privacy Office
Aon plc,
200 E. Randolph,
Chicago, Illinois
60601
email: [email protected]
However, if you are not satisfied with the way we have handled your complaint you have the right to raise the matter with the relevant data protection regulator in your country.
12. Changes to this Notice
This Notice is not contractual and Aon reserves the right to reasonably amend it from time to time to ensure it continues to accurately reflect the way that we collect and use personal information about you. Any updates or changes to this Notice will be made available to you. You should periodically review this Notice to ensure you understand how we collect and use your personal information.
13. Contact Information
If you have any questions about the content of this Notice or the rights conferred to you under the applicable data privacy laws you should contact the Data Protection Officer via the Global Privacy Office at the following address:
Aon’s Global Privacy Office
Aon plc,
200 E. Randolph,
Chicago, Illinois
60601
email: [email protected]
Alternatively, please direct your query to our India Data Protection Officer at:
This Notice was last updated on 10 November 2025