Privacy Policy
Effective Date: March 10th 2026
Last Updated: March 10th 2026
Hand-in-Hand Mutual Fire Insurance Company Limited, Hand-in-Hand Mutual Life Assurance Company Limited, and/or other relevant entities within the Hand-in-Hand Group operating this website (“Hand-in-Hand”, “we”, “us”, or “our”) respect your privacy and are committed to protecting your personal data.
This Privacy Policy explains how we collect, use, disclose, store, and protect personal data when you visit hihgy.com, use our online services, submit forms, communicate with us, or otherwise interact with us through the website.
This Privacy Policy is intended to be consistent with the laws of Guyana, including the Data Protection Act 18 of 2023 and, where relevant, the Electronic Communications and Transactions Act 12 of 2023.
1. Who We Are
hihgy.com is the official website of the Hand-in-Hand Group in Guyana. For the purposes of applicable data protection law, the relevant Hand-in-Hand entity determining why and how your personal data is processed will generally be the data controller.
Contact details
Hand-in-Hand Group
- Address: 1-4 Avenue of the Republic, Georgetown, Guyana
- Tel: (592) 225-1865 / 226-0886 / 223-6252
- WhatsApp: (592) 639-4608
- Email: info@hihgy.com
2. The Personal Data We Collect
We may collect and process the following categories of personal data:
Information you provide directly
- Full name
- Postal address
- Email address
- Telephone number
- Date of birth
- National identification or other verification information, where required
- Policy, claim, trust, pension, or account-related information
- Employment or business information where relevant
- Information submitted through contact forms, quotation forms, claim forms, complaint forms, recruitment forms, or customer portal features
- Any correspondence, queries, complaints, or feedback you send to us
Information collected automatically
- IP address
- Browser type and version
- Device information
- Operating system
- Referring website
- Pages viewed and time spent on the website
- Date and time of access
- Cookie and similar technology data
Information from third parties
- Information from brokers, agents, introducers, service providers, or representatives acting on your behalf
- Information from public records, regulatory bodies, fraud prevention agencies, and law enforcement where lawful
- Information required to meet anti-money laundering, fraud prevention, risk management, and regulatory compliance obligations
3. How We Use Your Personal Data
We may use your personal data for the following purposes:
- To respond to enquiries and provide customer support
- To provide quotations, policies, products, and services
- To process applications, renewals, claims, complaints, and requests
- To administer customer accounts and portals
- To verify identity and conduct due diligence checks
- To comply with legal, regulatory, governance, audit, and reporting requirements
- To prevent, detect, and investigate fraud, money laundering, cyber threats, and other unlawful activity
- To manage and improve our website, systems, products, and services
- To carry out analytics and performance monitoring
- To communicate service updates, notices, and important information
- To send marketing communications where permitted by law or where you have consented
- To establish, exercise, or defend legal rights
4. Legal Bases for Processing
We process personal data only where we have a lawful basis to do so. Depending on the circumstances, processing may be necessary:
- for the performance of a contract or to take steps at your request before entering into a contract;
- to comply with a legal or regulatory obligation;
- for our legitimate interests, provided your rights and interests do not override those interests;
- on the basis of your consent, where consent is required; or
- for other lawful grounds recognised under applicable law.
Where we rely on consent, you may withdraw that consent at any time, subject to any processing already carried out lawfully before withdrawal.
5. Sensitive Personal Data
Some services may require us to process more sensitive categories of personal data, for example health-related information for insurance underwriting or claims administration, or information required for legal and regulatory compliance.
We will only process such data where permitted by law and where appropriate safeguards are in place.
6. Children’s Data
Our website and services are not generally directed at children unless expressly stated otherwise. Where we knowingly collect personal data relating to a child, we will do so only in accordance with applicable law and, where required, with appropriate consent or authorisation from a parent or guardian.
7. Cookies and Similar Technologies
Our website may use cookies and similar technologies to:
- enable core website functionality;
- remember preferences;
- improve website performance and security;
- understand how visitors use the site; and
- support analytics and, where applicable, marketing activities.
Where required, we will request your consent before placing non-essential cookies on your device. You may manage cookies through your browser settings and, where available, through our cookie banner or preference tool.
Please note that disabling some cookies may affect website functionality.
8. Marketing Communications
Where permitted by law, we may send you information about products, services, promotions, updates, and events that may be relevant to you.
Where consent is required for marketing, we will seek it before sending such communications. You may opt out of marketing communications at any time by:
- clicking the unsubscribe link in an email;
- contacting us directly; or
- updating your communication preferences where available.
We will continue to send service-related and legally required communications where necessary.
9. Disclosure of Personal Data
We may share your personal data, where lawful and necessary, with:
- companies within the Hand-in-Hand Group;
- insurance intermediaries, brokers, reinsurers, and business partners;
- service providers supporting our IT, hosting, analytics, communications, payment, document management, security, and administrative operations;
- professional advisers, including lawyers, auditors, and consultants;
- regulators, supervisory authorities, courts, tribunals, law enforcement, and government agencies;
- fraud prevention, anti-money laundering, and compliance service providers;
- any person authorised by you or acting on your behalf.
We require third parties processing personal data on our behalf to keep it secure, use it only for authorised purposes, and handle it in accordance with applicable law.
10. International Transfers
Your personal data may be stored or processed outside Guyana where this is necessary for our operations, service providers, group support functions, cloud hosting, reinsurance, or other legitimate business purposes.
Where personal data is transferred outside Guyana, we will take reasonable steps to ensure that appropriate safeguards are in place and that the receiving party provides an adequate level of protection in accordance with applicable law.
11. Data Security
We implement appropriate technical and organisational measures designed to protect personal data against unauthorised or unlawful processing and against accidental loss, destruction, damage, alteration, or disclosure.
These measures may include access controls, authentication procedures, encryption where appropriate, secure hosting, staff confidentiality obligations, monitoring, and internal policies and procedures.
However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.
12. Retention of Personal Data
We retain personal data only for as long as necessary for the purposes for which it was collected, including to satisfy legal, regulatory, tax, accounting, reporting, claims handling, audit, fraud prevention, and record-keeping requirements.
Retention periods may vary depending on:
- the nature of the product or service;
- the sensitivity of the data;
- the need to resolve disputes or enforce agreements; and
- applicable legal and regulatory obligations.
When personal data is no longer required, we will securely delete, destroy, anonymise, or de-identify it where appropriate.
13. Your Rights
Subject to applicable law and any relevant limitations or exemptions, you may have the right to:
- request access to your personal data;
- request correction of inaccurate or incomplete personal data;
- request erasure of personal data in certain circumstances;
- request restriction of processing in certain circumstances;
- object to certain processing;
- request portability of personal data where applicable;
- object to or seek review of certain automated decision-making or profiling activities where applicable; and
- withdraw consent where processing is based on consent.
To exercise any of these rights, please contact us using the details in section 16 below. We may need to verify your identity before responding to your request.
14. Links to Other Websites
Our website may contain links to third-party websites, applications, or services. We are not responsible for the privacy practices, content, or security of those third parties. You should review their privacy policies before submitting personal data to them.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in legal requirements, technology, website functionality, or our business practices.
Any updated version will be posted on this page with a revised effective date. Where appropriate, we may provide additional notice of material changes.
