Privacy

ALIG is committed to protecting your personal data and ensuring transparency in how your information is collected, used, stored, and protected when you use our AI-powered insurance mobile application ("ALIG App") and related services. We are a licensed Lebanese insurance provider and we operate in compliance with Lebanese Law No. 81/2018 on Electronic Transactions and Personal Data and other applicable regulations. This Privacy Policy describes what data we collect, how we use and share it, the legal bases for processing, and your rights regarding your personal data. By using the ALIG App or our services, you acknowledge that you have read and agree to the practices described in this Privacy Policy.

1. Information We Collect

We collect personal information that you provide to us directly, information generated through your use of the ALIG App (including the Avatar Assistant), and some information from third parties or automatically through technology. The types of personal data we may collect include:

• Personal Information: Details that identify you, such as your full name, date of birth, nationality, contact information (email address, phone number), and government-issued identification numbers (e.g. national ID or driver's license number). If you are obtaining a motor insurance quote, we collect vehicle information (make, model, year, registration details) and previous insurance history. For certain products like health or life insurance, we may collect relevant medical or health information in compliance with Law No. 81/2018 and other legal requirements (for example, obtaining any required permits for processing health data).
• Device and Usage Data: Information about the device and app usage. This includes your IP address, device type, operating system, unique device identifiers, and general location information (e.g. device GPS location or network location while using the app). We also gather data on how you interact with the ALIG App and the Avatar Assistant — such as pages or screens viewed, features used, the dates, times and frequency of access, and other log information. This helps us understand usage patterns and improve performance.
• Communication Data: Content and records of your communications with us. For example, if you engage with our in-app Avatar Assistant (via chat or voice) to get insurance quotes or ask questions, we will collect the conversation content. If you fill out forms or submit information when requesting a quote, applying for a policy, or contacting customer support, we will collect the information you provide in those submissions. We may also keep records of email correspondence or phone calls with you for customer service and quality assurance purposes.
• Cookies and Similar Technologies: When you use the ALIG App or visit our website, we may use cookies, web beacons, and similar tracking technologies to automatically collect certain technical data. Cookies are small text files stored on your device that help us remember your preferences, understand how you navigate through our platform, and tailor your experience. For example, cookies and analytics tools may collect information about which app features are used most often or if you encountered any errors. You can control or disable cookies through your device or browser settings; however, be aware that disabling these technologies might affect some functionality of our services. For more details, see the Cookies and Tracking Technologies section of this Policy.
• Information from Third Parties: In some cases, we may receive additional information about you from third-party sources. For example, if you choose to log into the ALIG App through a social media or single sign-on service, or if we partner with third parties (such as other insurers, brokers, or service providers) during the quote or policy process, those third parties might provide us data such as verification of your driving record, claim history, or other relevant background information. We ensure that any third-party data is obtained lawfully and handle it according to this Privacy Policy and applicable law.

We only collect personal data that is adequate and relevant for the purposes described in this Policy. You have the choice not to provide certain personal information; however, doing so may limit our ability to offer you some ALIG services (for example, we cannot provide an insurance quote without certain necessary details). If you have questions about which data points are mandatory, please contact us at the details provided below.

2. How We Use Your Information

We use your personal data for various purposes in connection with offering and improving our insurance products and services. ALIG will only process your personal data for specific, explicit, and legitimate purposes. The main uses of your information include:

• Providing Quotes and Services: To generate insurance quotations at your request and send them to you. We use the information you provide (such as personal details, vehicle or health information, etc.) to calculate premiums and determine eligibility for coverage. If you decide to purchase an insurance policy, we will use your data to process your application, underwrite the policy, issue your insurance contract, and administer the policy (including any claims you might file in the future).
• Communicating with You: To contact you about your quotes, policies, or claims and to respond to your inquiries. For example, we use your email or phone number to send policy documents, renewal notices, claims updates, or to reply when you ask questions via the Avatar Assistant or customer support. We may also send you service-related announcements (such as important updates about the App or changes to your policy terms) as needed.
• Personalizing and Improving the App: To personalize your user experience and improve our application and services. The data about your usage and interactions helps us understand what features are useful to you, and allows us to tailor content or functionality to your needs. For instance, we might use your usage data to recommend certain insurance products or adjust the Avatar Assistant's guidance. We also analyze usage patterns and feedback to debug issues, improve the AI assistant's responses, and enhance the overall performance and security of the ALIG App.
• AI Processing and Automation: To enable the Avatar Assistant and other AI-driven features of the ALIG App. Your input (questions, information you provide) is used by our artificial intelligence systems to generate responses, provide quotes, or guide you through the insurance process. We may employ machine learning algorithms and third-party AI APIs to interpret your requests and offer instant assistance. (See "Automated Decision-Making and AI" below for more on how we use AI responsibly). Additionally, we might use automated tools to detect fraud or suspicious activities, for example analyzing patterns in claims or login locations to protect against unauthorized use.
• Processing Payments: If our services include payment of insurance premiums or claim payouts via the app, we will use your personal and financial information to facilitate those transactions. For example, we may collect credit card or bank details (either directly or via a secure third-party payment processor) when you purchase a policy, and we'll use that information to process your payment. We do not store sensitive payment details on our servers beyond what is necessary; payments are handled through PCI-DSS compliant third-party payment gateways for security.
• Legal and Regulatory Compliance: To comply with applicable laws and regulations that apply to insurance companies and data processing. This includes using personal data for verifying your identity and age, performing due diligence or anti-fraud/anti-money laundering checks as required by law, satisfying record-keeping obligations, and responding to lawful requests by government authorities or regulators (such as the Lebanese Insurance Control Commission or law enforcement). For example, if Lebanese law requires us to report certain information for taxation, sanctions screening, or insurance regulatory purposes, we will process personal data to fulfill those requirements.
• Marketing and Promotional Communications: To send you marketing communications about our products or new services if you have given us your consent or if otherwise permitted by law. This may include newsletters, offers, or recommendations that we believe could be of interest to you as an ALIG customer. You will always have the option to opt out of such marketing communications, and we will not use your data for direct marketing if you object or withdraw your consent (see Your Rights below). We do not use sensitive personal data (e.g., health data) for marketing purposes without your explicit consent.
• Anonymized Analytics and Research: We may use aggregated or anonymized data (which can no longer be linked back to you individually) for purposes of analytics, research, and product development. For instance, we might analyze general usage trends to understand how users engage with the Avatar Assistant or which insurance products are most popular. This helps us improve our offerings and business processes. These analytics do not identify you personally and are used strictly to enhance our services and internal strategies.

We will not use your personal information for any purpose that is incompatible with the original purposes for which it was collected, unless we obtain your consent or as required/allowed by law. If we need to process your data for a new purpose, we will inform you and, if necessary, seek your consent.

All quotes and policies are based on the information you provide. You are responsible for ensuring that such information is complete and accurate. ALIG reserves the right to review, modify, or cancel any quotation or policy if inaccurate information is discovered.

3. Legal Bases for Processing Personal Data

Under Lebanese law (in particular Law No. 81/2018) and principles of data protection, we must have a valid legal basis to process your personal data. Depending on the specific context, ALIG relies on one or more of the following legal bases:

• Your Consent: In certain cases, we ask for your consent to process your personal data. For example, before collecting any health-related information for insurance underwriting, or when using cookies for analytics, or when sending you promotional communications, we will obtain your prior consent as required. You have the right to withdraw consent at any time (which will not affect the legality of processing done before you withdrew consent). Where we rely on consent, we will make that clear to you at the point of data collection.
• Performance of a Contract or Pre-Contractual Steps: We process personal data when it is necessary to provide you with a service you requested or to fulfill our contract with you. This includes all processing related to giving you an insurance quote, issuing and administering your insurance policy, and handling claims. For instance, when you request a quote or buy a policy via the ALIG App, the processing of your personal information is based on the necessity to take steps at your request and to perform the insurance contract to which you are a party.
• Compliance with a Legal Obligation: We process personal data to the extent we are required to under Lebanese laws and regulations. As a regulated insurance provider, ALIG must adhere to various legal obligations — for example, verifying customer identity (Know Your Customer requirements), maintaining transaction records, reporting to supervisory authorities, or handling court orders and lawful information requests. Such processing is legally mandated, and we cannot provide our services without it.
• Legitimate Interests: We may process your information as necessary for ALIG's legitimate interests or those of a third party, provided that such processing does not override your fundamental rights and freedoms. Legitimate interests we pursue include improving and securing our platform, preventing fraud and misuse of our services, personalizing your user experience, conducting internal analytics, and communicating with our existing customers about similar services. For example, using device and usage data to detect fraud or to improve our AI assistant's effectiveness are activities that support our legitimate interest in running a safe and efficient insurance service. When we rely on this basis, we ensure that we consider and balance any potential impact on you and your rights. You have the right to object to processing based on our legitimate interests in certain cases (see Your Rights below).

In all cases, we only process personal data when allowed by Lebanese law or other applicable data protection regulations. We do not process personal data in ways that are not justified by one of the above bases unless we obtain your explicit permission or are otherwise legally permitted to do so.

4. Sharing and Disclosure of Personal Data

We value your privacy. We do not sell or rent your personal information to third parties for their own marketing or other uses. However, in the course of operating our business and providing our services, we may share your personal data with certain third parties or entities under strict conditions, as outlined below:

• Within ALIG and Authorized Personnel: Your data will be accessed only by authorized persons within our company who need it to perform their duties. This includes our customer service agents, insurance underwriters, claims processors, technical teams, and other staff on a need-to-know basis. All ALIG employees and contractors are bound by confidentiality obligations and trained on data protection to ensure your information remains secure and private.
• Service Providers and Processors: We use trusted third-party companies to support our technology infrastructure and services. These service providers act on our behalf and may process your data only for the purposes we specify. Examples include: cloud storage and hosting providers (who securely store our databases and servers), analytics and performance tools (that help us understand how the app is used), AI platform providers (that power the Avatar Assistant or other AI features of the app), payment processors (to handle premium payments or claim payouts), and IT developers or consultants assisting in maintaining our systems. When we share your information with such third parties, we ensure they are subject to strict data protection and confidentiality obligations. They are not permitted to use your data for any purpose other than delivering services to ALIG, and they must protect it in accordance with this Privacy Policy and applicable law. While ALIG carefully selects its third-party service providers and ensures they comply with confidentiality and data protection obligations, ALIG cannot be held responsible for incidents arising solely from a third-party provider's unauthorized or negligent act outside ALIG's control.
• Insurance Partners and Brokers: With your knowledge or consent, we might share relevant data with third parties who are involved in providing your insurance coverage or related services. This can include insurance intermediaries or brokers who introduced you to us or assist you, reinsurance companies (who provide risk-sharing services for insurance policies), or co-insurance partners if your policy is underwritten jointly by multiple insurers. We only share what is necessary for the performance of the insurance services and require these partners to safeguard your data. In some cases, if you request a service that we cannot directly fulfill, we may, with your explicit consent, forward your inquiry to a trusted partner (for example, if you seek a type of insurance we do not offer, we might refer you to another licensed insurer or broker).
• Regulatory and Legal Disclosures: We may disclose your personal information to government authorities, regulators, courts, or law enforcement agencies if required to do so by law or legal process. For instance, we may need to provide data to the Lebanese supervisory authorities (such as the Ministry of Economy and Trade or the Insurance Control Commission) during audits or upon request, or to respond to a subpoena, court order, or other legal obligation. Additionally, if necessary to protect our rights or the rights and safety of others, we may disclose information (for example, sharing data with law enforcement when investigating fraud or misuse of our app, or providing information to a court in the context of an insurance claim dispute). In all such cases, we will ensure the disclosure is permitted under applicable laws and is limited to the information that is required.
• Business Transfers: If ALIG is involved in a merger, acquisition, reorganization, or sale of all or part of its business or assets, your personal data may be transferred to the parties involved in the transaction as part of due diligence or the conclusion of the transaction. In such an event, we will ensure that the receiving party agrees to protect your personal data in a manner consistent with this Privacy Policy and applicable privacy laws. We will notify you of any change in data ownership or uses of your personal information, as may be required by law.

Other than the circumstances above, we will not share your personal data with any third party unless we have your clear consent to do so. For example, we will not give your personal details to a third-party partner for their own marketing purposes without your consent.

Whenever we share your information with service providers or partners, we remain responsible for its protection. We take appropriate steps (such as signing data protection agreements) to ensure that any party receiving personal data from us is obligated to keep it secure and to use it only for the intended purpose. If you have questions about third parties that may have access to your data, you can contact us for more information.

5. Cookies and Tracking Technologies

As mentioned in the Information We Collect section, ALIG may use cookies and similar tracking technologies to enhance your experience and analyze usage of our app and website:

• Purpose of Cookies: Cookies are small files stored on your browser or device which can remember certain information. We use cookies to remember your preferences and settings, so that (for example) you remain logged in or so that we can auto-fill your email when you return. Cookies also help us understand how users navigate our App — which screens are visited, how long is spent on certain features, etc. — so we can make improvements and fix issues. Additionally, cookies can enable certain features like chat functionality or showing appropriate content based on your region.
• Types of Cookies: The cookies we use may be session cookies (which are temporary and deleted when you close the app or browser) or persistent cookies (which remain for a set period or until you delete them). Some cookies are strictly necessary for the app to function (for example, to authenticate your login or keep you connected to our services). Others are functional or analytical — for instance, we might use Google Analytics or a similar tool to collect anonymous traffic data and user interactions within the app, which helps us gauge performance and usage trends. We do not use cookies to collect sensitive personal information, and any third-party analytics cookies are configured not to identify you personally.
• Third-Party Tracking: We may occasionally permit certain third-party technologies (like analytics SDKs or advertising identifiers) within our app solely to help us analyze aggregate behavior or reach people with relevant information about ALIG. For example, an analytics provider might set its own cookie or device identifier to track how often a new user opens the app. We ensure that no personally identifying data (such as your name or contact info) is shared with third parties through these tracking technologies without your consent. We do not allow third parties to use tracking data obtained through our app for their own independent purposes unrelated to ALIG services.
• Your Choices: You have control over cookies and tracking. Most web browsers and mobile devices provide settings to disable or delete cookies and to restrict or reset device identifiers. In your browser settings, you may choose to block cookies or be notified when cookies are set. On a mobile app, your device settings may allow you to limit ad tracking or reset advertising IDs. Note: If you disable cookies or tracking, some features of our app or website may not function properly. For instance, disabling cookies might require you to log in manually each time or could disable certain interactive features. We recommend keeping essential cookies enabled for the best experience, but the choice remains yours.

For more information on how to adjust your cookie preferences, please refer to your web browser's help documentation or your device's privacy settings. If you have any concerns about our use of cookies or similar technologies, feel free to contact us.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy, or as required by law and regulation. This means:

• If you become a customer (for example, you purchase a policy from us), we will keep your data for the duration of your business relationship with us and thereafter for a period required by applicable law or our legitimate business needs. Insurance companies in Lebanon may be subject to specific record-keeping requirements; for instance, we might retain policy and claims information for a number of years after a policy ends to comply with legal obligations (such as financial reporting, audits, or handling potential disputes or claims).
• If you use the ALIG App to get a quote or inquire about services but do not ultimately purchase a policy, we may retain the information you provided for a limited period in case you decide to proceed later, for our legitimate interest in understanding our business (e.g., analyzing quotes given), or as required to comply with legal obligations (for example, storing a record of a quote we provided or consent you gave). We will not keep such information longer than necessary for those purposes.
• We periodically review the personal data we hold. When your personal information is no longer needed for the purposes for which it was collected, and we are not legally required to keep it, we will either securely delete or anonymize the data. For example, we may anonymize usage data for analytical purposes and then delete any identifiable elements, or securely erase personal details from our databases if you have closed your account and no law requires us to retain them.
• In some cases, even if you request deletion, we may need to retain certain information for additional time if mandated by law. For instance, accounting or transaction records might be kept for the period required by financial regulations or tax laws, typically several years, even if you request erasure. During this time, however, your data will be blocked from routine use and only accessed for those legal purposes.
• In case of a dispute, data related to the transaction, quote, or policy may be retained for the period required to defend or establish ALIG's legal rights.

We strive not to keep data in identifiable form for longer than necessary. The exact retention periods for different categories of data can vary based on legal requirements and business needs. If you would like more information about how long we keep specific types of data, you can contact us. Rest assured, when our retention period ends, we will permanently erase or destroy the personal data or render it irreversibly anonymous.

7. International Data Transfers

ALIG primarily operates in Lebanon, but we use a hybrid data hosting model that involves servers and services both within Lebanon and in other countries. This means your personal information may be transferred to, stored in, or otherwise processed in a country other than the one in which you reside. For example:

• Some of our data servers or cloud storage providers may be located in data centers outside of Lebanon (such as in Europe or the United States). We might store certain information on cloud platforms provided by international companies for reliability and security reasons.
• When you interact with the Avatar Assistant or other AI features, the data (like your questions or form inputs) may be routed to third-party AI processing services that are hosted abroad.
• If you are using the ALIG App from outside Lebanon, your data will naturally be transmitted to our systems in Lebanon as part of providing the service.

Different countries have different data protection laws. Some may not offer the same level of privacy protection as Lebanese law or the laws in your home country. Lebanese Law No. 81/2018 does not explicitly restrict the transfer of personal data outside Lebanon; however, ALIG will take all steps reasonably necessary to ensure that your data is transferred and handled securely and in accordance with this Privacy Policy and applicable laws. These steps include:

• Contractual Safeguards: We enter into agreements with our service providers that include standard data protection clauses (where applicable) obligating them to provide an adequate level of protection for personal data, regardless of where it is processed. Our contracts with cloud providers, for instance, require them to implement robust security measures and to process data only as instructed by ALIG.
• Encryption and Security: We use encryption and secure channels to transfer personal data. Whether your data is moving within Lebanon or across borders, we protect it in transit (e.g., using HTTPS and other encryption protocols) and at rest.
• Limiting Unnecessary Transfers: We strive to keep your data on servers in Lebanon whenever feasible, especially for primary storage. We only transfer data internationally when it is necessary (for example, using a specialized service that is hosted abroad), and even then we minimize the amount of personal data involved to what is needed for the task.
• Transparency: We will inform you if a particular service or feature you use will involve transferring your data to another country in a way not covered by this general description. If in the future Lebanese law or regulations introduce specific requirements for cross-border data transfers, we will comply with those and update this Policy accordingly.

By using the ALIG App and providing personal information, you understand that your data may be transferred to other countries as described above. Nevertheless, such transfers will always be done in line with our commitment to protect your data. If you have questions about international data transfers or want to know more about the safeguards in place, please contact us using the information in the Contact Us section.

8. Data Security Measures

We take data security very seriously at ALIG. We have implemented a variety of technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption: We use encryption protocols to protect personal data during transmission and in storage. For example, any sensitive information exchanged between your device and our servers is encrypted using industry-standard SSL/TLS technology. We also encrypt personal data stored in our databases and cloud storage, especially for any sensitive fields, to add an extra layer of protection in case of any unauthorized access.
• Secure Infrastructure: Our systems are hosted in secure environments. We employ firewalls, intrusion detection systems, and access controls on our servers to safeguard data. Our cloud providers and data center partners are chosen for their strong security track records and certifications. Access to production databases is limited to authorized engineers and occurs only over secure connections.
• Access Control and Training: Within ALIG, access to personal data is restricted to employees and contractors who need the information to perform their job (principle of least privilege). Each authorized individual has unique credentials and is subject to authentication and monitoring. We conduct regular training for our staff on privacy and data protection, ensuring they understand the importance of protecting personal data and the proper procedures to follow. We also have internal policies and audits to prevent and detect misuse of data.
• Security Testing and Maintenance: We regularly update and patch our software and systems to address security vulnerabilities. ALIG may conduct periodic security assessments, vulnerability scans, and penetration tests on the ALIG App and our backend systems to identify and fix potential weaknesses. Our goal is to stay up-to-date with evolving cybersecurity threats and to continuously improve our defenses.
• Physical Security: Where personal data is stored in physical form or on on-premise servers, we implement physical security controls such as secure facilities, access badges, surveillance, and locking mechanisms to prevent unauthorized physical access to data.

While we employ strong security measures to protect your information, it is important to note that no method of transmission over the internet or method of electronic storage is 100% secure. Therefore, we cannot guarantee absolute security of your data. You share and use our services at your own risk, but rest assured we are constantly working to maintain and bolster the security of our systems.

If you have reason to believe that your interaction with us or your data might no longer be secure (for example, if you suspect that your account has been compromised), please notify us immediately so that we can take prompt measures. All data, analytics, algorithms, and AI models used in the ALIG App remain the exclusive property of ALIG. Users are granted access to the app and its services for personal use only and may not copy, reuse, or reproduce any part of the ALIG App or its content without authorization.

Data Breach Notification

In the unfortunate event of a data breach that results in unauthorized access to or loss of your personal data, ALIG will act swiftly in accordance with applicable laws. We will notify you without undue delay if your personal data has been compromised in a way that could pose a high risk to your rights or security. Additionally, we will inform relevant authorities as required under Lebanese Law No. 81/2018 and other regulations. Our notification to you will include, to the extent we know, details of what happened, the nature of data involved, the potential consequences, and the steps we are taking to mitigate the issue. We will also provide you with recommendations on protective measures you can take. ALIG maintains a breach response plan and team to ensure we handle any such incidents with urgency, transparency, and in compliance with our legal obligations.

9. Automated Decision-Making and AI Tools

One of the unique features of the ALIG App is our Avatar Assistant, which utilizes artificial intelligence to assist you. We want to be transparent about how these AI and automated systems work with your data:

• AI-Powered Avatar Assistant: When you interact with our virtual assistant (whether through text chat or voice), the assistant processes the information you provide to generate helpful answers, quotes, or guidance. This processing may involve algorithms developed by ALIG as well as third-party AI services or APIs. For example, if you ask the Avatar Assistant for an insurance quote, it will ask you a series of questions and then automatically calculate a quote based on your answers using our underwriting algorithms. Similarly, if you ask a general question about our services, an AI language processing tool may interpret your question and formulate a response. Any personal data you provide during these conversations (such as your name or details about your vehicle or health) is handled in accordance with this Privacy Policy. We monitor and limit what is sent to external AI services — typically, only the necessary portions of conversation or data needed for the AI to function are transmitted, and wherever possible we anonymize or pseudonymize that data.
• Purposes of AI Processing: We use AI tools to enhance the speed and efficiency of our services. Automated processing helps us deliver instant quotes, 24/7 customer support through the assistant, and consistent service. It also aids in fraud detection and risk assessment (for example, algorithms might flag suspicious patterns in claim submissions for further review). By using AI, we aim to improve accuracy and convenience for users. However, AI outputs are always subject to oversight. We do not rely solely on AI for decisions that have legal or significant effects on individuals without some form of human review.
• No Fully Automated Adverse Decisions Without Recourse: In general, important decisions regarding your insurance (such as policy approvals/denials, final premium determination, or claim outcomes) are not made solely by algorithms without human intervention. Our team of underwriters and agents oversees the AI-generated results. The AI might provide a recommendation or initial evaluation (for instance, an initial quote or a fraud risk score), but a qualified ALIG employee or agent may review and finalize the decision especially if it would result in denying a service or claim to you. This ensures fairness and accuracy. If you believe that a decision has been made about you solely based on automated processing (and that decision has a significant effect on you), you have the right to contact us and request human review of that decision. We will examine the situation, explain how the decision was reached, and accommodate your request for re-evaluation as appropriate.
• Transparency and Improvements: We strive to be transparent about our use of AI. We continuously test and improve our algorithms to avoid bias or error. Conversations with the Avatar Assistant may be recorded or logged for the purposes of quality assurance and training the AI (e.g., improving its responses over time), but such logs are kept secure and are accessible only to authorized personnel who oversee the AI's performance. If our AI assistant ever provides information that seems incorrect or problematic, we encourage you to let us know so we can correct it. You are always welcome to speak to a human representative if you prefer not to use the AI assistant for certain tasks.

Our goal with AI and automation is to serve you better — not to make you feel uncomfortable or powerless. We use these technologies in a balanced way, coupled with human oversight, and in line with your rights under Law 81/2018 and other applicable laws. If you have any questions or concerns about automated processing of your data, please reach out to us.

10. Your Rights Under Lebanese Law No. 81/2018

Under Lebanese Law 81/2018 (and in keeping with general data protection principles), you have several rights regarding your personal data. ALIG is committed to upholding these rights and enabling you to exercise them. Your key data protection rights include:

• Right to Access: You have the right to request access to the personal data we hold about you. This means you can ask us to confirm whether we are processing your personal information, and if so, you can request a copy of that information, along with details on how we use it and who we share it with. We will provide this information in a clear and straightforward manner. (Please note, for security, we may need to verify your identity before providing a copy of data to ensure we are giving information to the correct person.)
• Right to Rectification: If any of your personal data that we have is incorrect, outdated, or incomplete, you have the right to request that we correct or update it. For example, if your phone number or address has changed, or if we have an incorrect spelling of your name, you can ask us to rectify those details. We encourage you to keep your information up-to-date and will promptly make the requested corrections upon verification.
• Right to Erasure: You have the right to request deletion of your personal data in certain circumstances (sometimes called the "right to be forgotten"). For instance, if you no longer use our services and wish for your data to be removed, or if you believe we are processing information unlawfully, you can ask us to erase it. We will honor such requests when possible, but please note this right is not absolute — sometimes we must retain certain data for legal obligations or legitimate interests (as explained in the Data Retention section). If we must deny a deletion request, we will inform you of the reasons (for example, if the data must be retained for legal compliance).
• Right to Object to Processing: You have the right to object to certain types of processing of your data, particularly processing for direct marketing purposes. For example, you can request that we stop using your personal information to send you promotional offers. If you object to marketing, we will cease such use of your data immediately (there is always an unsubscribe option in our communications or you can adjust preferences in the app). Additionally, if we are processing your data based on a legitimate interest, you can object if you feel it impacts your rights — we will then reconsider the balance between our interests and your privacy. However, note that you cannot object to processing that is required for a contract you've entered (unless you terminate the contract) or processing we must do by law. Also, if you have previously given consent for a specific use of your data, you can withdraw that consent (see below).
• Right to Withdraw Consent: Where we process your personal data based on your consent, you have the right to withdraw that consent at any time. This will apply, for example, to email marketing — you can opt-out by clicking "unsubscribe" in any marketing email or by changing your settings in the ALIG App. Another example is if we ever ask for consent to process a health-related detail for a quote, you can later withdraw that consent and we will stop using that particular detail (though this might affect our ability to provide certain services to you). Withdrawing consent does not affect the lawfulness of processing we conducted prior to withdrawal, and it won't affect processing under other legal bases.
• Right to Data Portability: (If applicable) Although not explicitly defined in Lebanese law, as a service to our users we will honor requests for data portability to the extent feasible. This means you can request that we provide you with a copy of your personal data in a commonly used, machine-readable format (for example, a CSV or PDF summary of the information you provided to us or that we have about you), so that you can transfer it to another service provider if you wish. This typically applies to data processed by automated means and that you provided under contract or consent. If you require such portable copy, we will do our best to accommodate you.
• Right to Restriction: In certain cases, you may have the right to request that we limit the processing of your data (for example, if you contest the accuracy of your data, you can request that we restrict processing while we verify and correct it). While Lebanese law does not elaborate on this right in detail, we will, as a courtesy and in line with good practice, pause processing of your data (aside from storing it securely) if you have a valid request for restriction. We will inform you when the restriction is lifted.