- Individuals & Families
- Businesses
Travel internationally with peace of mind with Chubb insurance.
Protect your home inside out with our comprehensive home insurance.
Keep your business transportation safe and smooth.
Get your business comprehensively protected with a tailored insurance plan for each type of business.
Privacy Notice
Chubb Assurance Vietnam Limited (“Chubb”), established under the laws of Vietnam, is committed to protecting your personal data or the personal data of data subjects that you provide (collectively referred to below as “you”). This Notice explains why and how we, in our capacity as a Personal Data Controller or a Personal Data Controller and Processor, may “process”—in other words, collect, analyze, aggregate, encrypt, decrypt, edit, delete, destroy, de-identify, provide, disclose, record, store, update, access, use, share, copy, transfer, retrieve, and/or otherwise affect—your personal data (defined below). It also helps you make informed decisions before providing us with your personal data or the personal data of other individuals, including children
Personal Data
The types of personal data we may process depend on the products or services we provide to you.
Basic Personal Data, such as:
a) Personal information: surname, middle name, given name, date of birth, gender, nationality, occupation
b) Identification information: identity card number and/or personal identification number, passport number, driver's license, vehicle registration number, personal tax identification number, social insurance card number, health insurance card number, images/photographs
c) Contact information: mailing address, residential address, phone number, email address
d) Family information: marital status, family relationships, dependents
e) Digital information: information automatically collected when you use our websites and/or mobile applications, such as IP address, cookies, and login information
f) Communications information: recordings of phone calls to hotlines and customer service lines; complaints, surveys, experiences, your preferred communication channels, and related information
g) Other information: other information that we notify you about before it is provided by you or a third party that you have authorized to provide it to us.
Sensitive Personal Data, such as:
a) Financial and transaction information: payment methods, bank accounts, credit cards, debit cards, credit institution records, payment/transaction records, salary and other income, account balances
b) Insurance and private information: lifestyle and social circumstances; marital status; family and personal information; claims history; health status; medical and health records/diagnoses; genetic characteristics/genetic or inherited risks; race/ethnicity; sexual orientation; property ownership information; decisions/reports/conclusions from investigations by police/law enforcement agencies and/or courts; criminal records; fraud information; and fraud prevention agencies/organizations
c) Other information: other information that we notify you about before it is provided by you or a third party that you have authorized to provide it to us.
Purposes
The reasons we may process Personal Data depend on the products or services we provide to you.
Personal Data is provided primarily to support your interests and help us operate effectively so that we can continue to serve your interests as well as possible. Accordingly, we may process your Personal Data for the following purposes:
1. To support our legitimate business activities in providing insurance products and services under our agreement with you, including:
- Providing, performing, processing, and assessing insurance applications and claims; providing ongoing insurance services, such as administering insurance policies and issued products and services; conducting identity, credit, debt, medical, and health checks; and contacting you with information about our agreement, such as the policy term.
- Processing payment requests, such as direct debit authorizations and automatic credit card payments; assessing your financial needs; and accounting.
- Managing, investigating, verifying, reviewing, evaluating, and analyzing disputes, actions and/or legal proceedings; exercising our rights and obligations under the agreement with you and/or applicable insurance rules, such as authorizations and rights to assign claims for reimbursement.
- Exercising other rights and obligations related to performing our agreement with you.
- Responding to disclosure requirements under Vietnamese law or any foreign law, regulation, rule, or guidance that is binding on Chubb, our parent company, our parent company’s affiliates, and our affiliates (the “Group of Companies”).
- Assisting the police/law enforcement, government, or other state agencies in Vietnam or other jurisdictions.
- Complying with legally binding requests/orders from competent People’s Courts in Vietnam, the Insurance Supervisory Authority under Vietnam’s Ministry of Finance, auditors, government agencies, and relevant authorities.
- Handling matters relating to our operations, organizational strategy, and transactions (such as joint ventures, acquisitions, and insurance underwriting).
- Managing information security, the environment, and related matters, including protecting our operations, systems, and data.
- Preventing, detecting, and investigating legal violations, such as fraud, bribery, money laundering, and terrorist financing.
- Complying with other legal, financial, and governance obligations, including responding to requests/audits from government and state agencies in Vietnam and/or abroad.
- Monitoring and maintaining compliance with the policies and standards of Chubb and the Group of Companies; establishing, exercising, or defending our legal rights or those of any company in the Group of Companies.
- Conducting legitimate business activities, such as statistical analysis, research, and insurance analysis; analyzing customer databases, behavior, preferences, and usage trends; developing new products or proposals; and improving services/products.
2. Marketing and advertising (see “Direct Marketing” below):
- Surveying, targeting, and understanding your preferences, usage trends, or specific needs.
- Offering, providing, and marketing certain products/services from us, the Group of Companies, or our business partners.
In addition to Purpose 1 above, we will process Personal Data for Purpose 2 and/or any other purpose (if applicable) only after receiving your consent. If you have given consent but later wish to withdraw it, we will stop processing Personal Data for that purpose. Withdrawing consent in this case will not affect the performance of our agreement with you.
How we process data
How we collect or obtain Personal Data depends on the products or services we may provide to you.
We process Personal Data only: (i) when you voluntarily and expressly consent, having been informed of the information in this Privacy Notice; (ii) when necessary to protect the life, health, honor, dignity, rights, or legitimate interests of the data subject or others in an emergency; or to protect our or another party’s legitimate rights or interests, or the interests of the State or an organization, against violations of those interests; (iii) as required by applicable law; or (iv) to perform our contractual obligations to you.
Accordingly, we may collect Personal Data through our websites and applications when you visit or contact us; submit an insurance application, claim, or complaint; make a request or purchase; use a service; make a payment; register; follow our social media; or create an account. We may also collect Personal Data from a company in the Group of Companies, business partners, service providers, insurance intermediaries, your representatives, your employer, or other relevant third parties, including, but not limited to, the police, hospitals, regulators, government, or state agencies.
You may withdraw your consent at any time (see “Your Rights” below) for Purpose 2 and/or any other purpose (if applicable). Withdrawal of your consent will not affect the lawfulness of our processing of Personal Data before you withdrew it. Please note that if you refuse to: (i) provide us with all or some of your Personal Data; (ii) allow individuals or organizations from whom we may collect or to whom we may provide Personal Data; or (iii) allow us to process Personal Data for all or some of the purposes—or if you provide incomplete or inaccurate information—this may have unintended consequences for you. For example, we may be unable to provide all or some of our products/services, or provide them to the standards we promised or you may have requested, including meeting our obligations under agreements with you.
Data recipients
Individuals and organizations to whom we provide Personal Data, depending on the products or services we may provide to you.
Subject to applicable law, we may provide Personal Data to others for one or more purposes. Your Personal Data may be provided to:
The Group of Companies: Chubb’s parent company and its affiliates; our affiliated employees/contractors; reinsurers; claims investigation companies; intermediaries; industry associations; companies that compile claims and underwriting information for the insurance industry; fraud prevention companies; insurance companies (whether directly or through fraud prevention organizations or others named here); databases or registers (and their operators) used by the insurance industry; loss adjusters; and other individuals or organizations conducting insurance or reinsurance-related business.
Service providers: agents; consultants; subcontractors; banks; third parties providing management, telecommunications, computing, payment, banking, financial, or other services related to our operations and/or business; accountants; auditors; legal counsel and other advisers; customer service centers; research and analytics providers; and other third-party providers supporting related activities.
Other individuals/organizations: healthcare professionals; hospitals; investigators; medical and rehabilitation clinics; police; courts; emergency assistance companies; healthcare networks; surveyors and experts; repairers; credit institutions; debt collection agencies; people with a legitimate interest in your insurance policy, matters related to your insurance policy, and/or products/services you purchase from us; parties involved in any reorganization, merger, sale, joint venture, transfer, assignment, or disposal of all or any part of our business, assets, or shares (including in connection with any bankruptcy or similar proceeding); marketing service providers (if you have consented); your representatives or people you have authorized.
As required by law: individuals/organizations to whom we are required to disclose information under applicable law, or for purposes related to any code, regulation, rule, or guidance issued by the government, a regulator, or another competent authority that we or any company in the Group of Companies must comply with, or under a court order.
Information security and storage: our and the Group of Companies’ data centers and servers, where we control the processing of Personal Data. Subject to applicable law, these data centers/servers may be located in Vietnam or other countries as determined by Us from time to time; information technology system providers and management, support, and security providers; data processors; cloud computing providers; and companies that maintain, review, or develop our systems, processes, and infrastructure, including by testing or upgrading our computer networks, security, software, and data protection.
Retention and security
We have reasonable policies and procedures to protect Personal Data provided to us and take all feasible steps to safeguard it against unauthorized access, accidental deletion, misuse, alteration, destruction, or other unintended consequences. Although we make our best efforts to protect Personal Data, its security cannot be absolutely guaranteed against every threat. To the best of our ability, access is limited to the data recipients identified above for the purposes described above. Individuals and organizations with access to Personal Data are required to maintain its confidentiality and comply with the standards set out in this Privacy Notice.
We also make every effort to retain Personal Data only for as long as necessary for any of the purposes above and in accordance with applicable law.
If you request that your Personal Data be deleted or destroyed (see “Your Rights and Obligations” below), we will review and fulfill your request in accordance with the law. If we cannot delete or destroy the data for a valid reason, we will notify you.
Direct marketing
If you have voluntarily and expressly consented to this purpose in advance, we may use your Personal Data from time to time for direct marketing, such as sending you the following by text message, mail, email, and/or other methods:
The latest and/or seasonal promotions, offers, and/or discounts.
Offers for renewing and/or purchasing insurance policies, updates, newsletters, or related information.
Personalized marketing and advertising programs and/or relevant communications.
Surveys to target and understand your preferences, usage trends, or specific needs.
We believe these may benefit you in connection with your current insurance policy or certain products/services offered by us, a company in the Group of Companies, or our business partners.
Children
People under 16 years of age (“Children”) must not provide Personal Data to us without the consent of their parent/guardian. We do not knowingly request or collect Personal Data from Children.
In some cases, the collection of Children’s Personal Data may be beyond our control—for example, when Children complete online applications that they can access without adult supervision, control, or accompaniment. In such cases, we will ask whether the Child has provided their own consent and the consent of their parent/guardian to the processing of the Child’s Personal Data.
Data transfers
If you provide us with another data subject’s personal data for processing for any of the purposes above under this Notice, you represent and warrant that the collection, provision, and transfer of that personal data are based on an appropriate legal basis and comply with personal data protection laws and other relevant legal requirements, if any.
As appropriate in each case and within each party’s responsibilities under applicable law, you and we are responsible for:
Protecting personal data during its transfer and processing.
Exercising the rights of personal data subjects.
Cooperating and complying with the parties’ obligations if a violation of personal data protection requirements is discovered.
Your rights and obligations
Under applicable law, you have the following rights regarding your Personal Data:
Right to be informed: to be informed about the processing of your Personal Data.
Right to consent or refuse: to consent to or refuse the processing of your Personal Data.
Right of access: to access your Personal Data to view, edit, or request its correction.
Right to withdraw consent: to request withdrawal of your consent to the processing of your Personal Data.
Right to deletion: to delete or request deletion of your Personal Data.
Right to restrict processing: to request restriction of the processing of your Personal Data.
Right to data provision: to request that we provide you with your Personal Data.
Right to object to processing: to object to the processing of your Personal Data to prevent or restrict its disclosure or its use for advertising or marketing.
Right to complain, report, or sue: to file complaints or reports, or bring legal action, as provided by applicable law.
Right to compensation: to claim compensation as provided by applicable law if your Personal Data protection rights are violated.
Right to request protective measures: to request that a competent authority or organization, or an organization or individual involved in processing personal data, take measures to protect your personal data as provided by applicable law.
You also have the following obligations regarding your Personal Data:
Protect your own Personal Data; request that relevant organizations and individuals protect your Personal Data; and respect and protect other people’s Personal Data.
Provide complete and accurate Personal Data as required by law or contract, or when you consent to its processing.
Comply with personal data protection laws and participate in preventing and combating activities that infringe personal data rights.
When exercising your rights and obligations, you must fully comply with the following principles:
Act in accordance with the law and comply with your contractual obligations. You must exercise your rights and obligations to protect your own lawful rights and interests.
Do not obstruct or impede the exercise of the legal rights and obligations of a Personal Data Controller, a Personal Data Controller and Processor, or a Personal Data Processor.
Do not infringe the lawful rights and interests of the State or other agencies, organizations, or individuals.
Contact us
If you need to exercise any of the rights above, you can contact us:
Email: vndpo@chubb.com
Or visit our office:
Chubb Assurance Vietnam Limited
Floor 18, Vincom Building, 45A Ly Tu Trong, Sai Gon Ward, Ho Chi Minh City
This Privacy Notice may be revised from time to time. We encourage you to review this Notice periodically to stay informed about it and how we protect your Personal Data.
In the event of any difference or conflict between the English and Vietnamese versions of this Notice, the Vietnamese version will prevail.
Last updated: October 22, 2026