Privacy Policy Last updated: 20/08/2025

Foreword

Patrick York Ireland Insurance & Reinsurance Brokers Co.
W.L.L (“we,” “us,” or “our”) is committed to
protecting the privacy and personal data of our Customers in accordance with
the Bahrain Personal Data Protection Law (PDPL). This Privacy Statement
explains how we collect, use, disclose, and protect your personal data. Patrick
York Ireland Insurance and Reinsurance Brokers Company W.L.L. operates
http://www.pybahrain.com (the “Site”).

This page informs you of our policies regarding the
collection, use and disclosure of Personal Information we receive from users of
the Site. We use your Personal Information only for providing and improving the
Site. By using the Site, you agree to the collection and use of information in
accordance with this policy.

Data Controller

M/S Patrick York Ireland Insurance & Reinsurance Co.
W.L.L, licensed and regulated by the Central Bank of Bahrain as an Insurance
and Reinsurance Broker is termed as the data controller responsible for your
personal data, as defined by the Bahrain Personal Data Protection Law.

Information Collection und Use

While using our Site, we may ask you to provide us with
certain personally identifiable information that can be used to contact or
identify you. Personally identifiable information may include, but is not
limited to your name (“Personal Information”).

Personal &
Personal Sensitive Data We Collect

We may collect the following data from you:

• Identification
  information (e.g., name, date of birth, national ID)
• Contact
  details (e.g., address, telephone number, email)
• Employment
  and financial information, including the source of funds used for the
  transactions concluded with our Company
• Your
  health status and underlying information to facilitate any
  health/medical/life insurance products
• Any other
  data you provide to us directly or through our services

Purpose of Processing

We collect and process your personal data for the following
purposes:

• To
  provide and manage our products and services
• To comply
  with legal and regulatory obligations
• To
  communicate with you regarding your account or our services
• To
  improve our services and customer experience
• For
  security and fraud prevention

Legal Basis for
Processing

We process your personal data as permitted under Section 2:
General Rules for Legitimate Processing of Personal Data of the Bahrain PDPL
Law. We process your data to achieve the following objectives, and with your
legitimate consent;

• Performance
  of a contract to which you are a party
• Compliance
  with a legal obligation
• Legitimate
  interests pursued by us, balanced against your rights and freedoms

Data Sharing and
Disclosure

We may share your personal data with:

• Insurance
  and Reinsurance Companies stationed in Bahrain or outside of Bahrain for
  the purposes of securing the most competitive pricing in your benefit.
• Government
  authorities or regulators as required by law, including the Central Bank
  of Bahrain.
• Claims
  processing partners of the insurance companies through which we have
  secured your insurance policies.

Data Retention

We shall retain your personal data only for as long as
necessary to fulfill the purposes outlined in this statement or to comply with
legal requirements, including that of the Central Bank of Bahrain’s records
retention requirements.

Your Rights

The Bahrain Personal Data Protection Law empowers and
provides the following rights to the Customers;

• To access
  your personal data at your will
• Request
  correction or deletion of inaccurate data
• Withdraw
  your consent at any time (where processing is based on consent), including
  the consent for using your information for marketing outreach
• Lodge a
  complaint with the relevant supervisory authority, if you suspect that
  your data is being unlawfully handled, or is misused

Data Security

We implement appropriate technical and organizational
measures to protect your personal data from unauthorized access, alteration,
disclosure, or destruction.

International
Transfers

If your personal data is transferred outside Bahrain, we
will ensure appropriate safeguards are in place to protect your data in
accordance with PDPL requirements.

Log Data

Like many site operators, we collect information that your
browser sends whenever you visit our Site (“Log Data”). This Log Data may
include information such as your computer’s Internet Protocol (“IP”) address,
browser type, browser version, the pages of our Site that you visit, the time
and date of your visit, the time spent on those pages and other statistics. In
addition, we may use third party services such as Google Analytics that
collect, monitor and analyze this.

Cookies

Cookies are files with small amount of data, which may
include an anonymous unique identifier. Cookies are sent to your browser from a
web site and stored on your computer’s hard drive. Like many sites, we use
“cookies” to collect information. You can instruct your browser to refuse all
cookies or to indicate when a cookie is being sent. However, if you do not
accept cookies, you may not be able to use some portions of our Site.

Changes To This Privacy Policy

This Privacy Policy is effective as of 20/08/2025 and will
remain in effect except with respect to any changes in its provisions in the
future, which will be in effect immediately after being posted on this page. We
reserve the right to update or change our Privacy Policy at any time and you
should check this Privacy Policy periodically. Your continued use of the
Service after we post any modifications to the Privacy Policy on this page will
constitute your acknowledgment of the modifications and your consent to abide
and be bound by the modified Privacy Policy.

Complaints Reporting

Any complaints related the context of this document shall be
reported directly to Mr. Rokesh Shetty by writing an email to Compliance@pybahrain.com or call 1758 7031 Ext 211. In case if

you feel that your complaint is not fairly processed, or you experience any
delays in response from our end, such complaints could be escalated to the Data
Protection Authority. We shall strive to resolve your complaints within a
timeframe of 5 working days.