Privacy Policy 1 — Life & Provide

Privacy Policy

Effective Dated: 1st March 2025

Life & Provide Limited (“Life & Provide”) (“we,” “us” or “our”) takes your privacy seriously. This Privacy policy (“Privacy policy”) explains our data protection policy and describes our practices with respect to Personal Data that we collect from or about you when you use our website, applications, and services (collectively, “Services”).

1. Data controller

Life & Provide (Irish company registration number: 688587), is the controller and is responsible for the processing of your Personal Data as described in this Privacy Policy.

2. Personal Data we collect

We collect personal data relating to you (“Personal Data”) as follows:

Personal Data You Provide: We collect Personal Data if you create an account to use our Services or communicate with us as follows:

Account Information: When you create an account with us, we will collect information associated with your account, including your name, contact information, account credentials, date of birth, payment information, and transaction history, (collectively, “Account Information”);
User Data: We collect Personal Data that you provide in the input to our Services (“Data”), including your prompts and other data you upload; and
Communication Information: If you communicate with us, such as via email, we may collect Personal Data like your name, contact information, and the contents of the messages you send (“Communication Information”).

Personal Data We Receive from Your Use of the Services: When you visit, use, or interact with the Services, we receive the following information about your visit, use, or interactions (“Technical Information”):

Log Data: We collect information that your browser or device automatically sends when you use our Services. Log data includes your Internet Protocol address, browser type and settings, the date and time of your request, and how you interact with our Services;
Usage Data: We collect information about your use of the Services, such as the types of data that you view or engage with, the features you use and the actions you take, as well as your time zone, country, the dates and times of access, user agent and version, type of computer or mobile device, and your computer connection;
Device Information: We collect information about the device you use to access the Services, such as the name of the device, operating system, device identifiers, and browser you are using. Information collected may depend on the type of device you use and its settings; and
Location Information: We may determine the general area from which your device accesses our Services based on information like its IP address for security reasons and to make your product experience better, for example to protect your account by detecting unusual login activity or to provide more accurate responses. In addition, some of our Services allow you to choose to provide more precise location information from your device, such as location information from your device’s GPS.

Cookies and Similar Technologies: We use cookies and similar technologies to operate and administer our Services, and improve your experience. If you use our Services without creating an account, we may store some of the information described in this policy with cookies, for example to help maintain your preferences across browsing sessions. For details about our use of cookies, please read our Cookie Notice.

Information We Receive from Other Sources: We receive information from our trusted partners, such as security partners, to protect against fraud, abuse, and other security threats to our Services, and from marketing vendors who provide us with information about potential customers of our business services.

3. How we use Personal Data

We may use Personal Data for the following purposes:

To provide analyse, and maintain our Services, for example to respond to your questions for our Services;
To improve and develop our Services and conduct research, for example to develop new product features;
To communicate with you, including to send you information about our Services, for example about changes or improvements to the Services;
To prevent fraud, illegal activity, or misuses of our Services, and to protect the security of our systems and Services; and
To comply with legal obligations and to protect the rights, privacy, safety, or property of our users or third parties.

We may also aggregate or de-identify Personal Data so that it no longer identifies you and use this information for the purposes described above, such as to analyse the way our Services are being used, to improve and add features to them, and to conduct research. We will maintain and use de-identified information in de-identified form and not attempt to reidentify the information, unless required by law.

As noted above, we may use Data you provide us to improve our Services, for example to train the models that power the processes that help provide the Services.

4. Disclosure of Personal Data

We may disclose your Personal Data in the following circumstances:

Vendors and Service Providers: To assist us in meeting business operations needs and to perform certain services and functions, we may disclose Personal Data to vendors and service providers, including providers of hosting services, customer service vendors, cloud services, data delivery services, support and safety monitoring services, email communication software, web analytics services, payment and transaction processors, and other information technology providers. Pursuant to our instructions, these parties will access, process, or store Personal Data only in the course of performing their duties to us;
Business Transfers: If we are involved in strategic transactions, reorganisation, bankruptcy, receivership, or transition of service to another provider (collectively, a “Transaction”), your Personal Data may be disclosed in the diligence process with counterparties and others assisting with the Transaction and transferred to a successor or affiliate as part of that Transaction along with other assets;
Government Authorities or Other Third Parties: We may share your Personal Data, including information about your interaction with our Services, with government authorities, industry peers, or other third parties in compliance with the law: (i) if required to do so to comply with a legal obligation, or in the good faith belief that such action is necessary to comply with a legal obligation, (ii) to protect and defend our rights or property, (iii) if we determine, in our sole discretion, that there is a violation of our terms, policies, or the law; (iv) to detect or prevent fraud or other illegal activity; (v) to protect the safety, security, and integrity of our products, employees, users, or the public, or (vi) to protect against legal liability; and
Affiliates: We may disclose Personal Data to our affiliates, meaning an entity that controls, is controlled by, or is under common control with Life & Provide. Our affiliates may use this Personal Data in a manner consistent with this Privacy Policy.

5. Retention

The table below sets out the type of Personal Data we retain, the period for which we will retain such Personal Data, the legal reasoning for the retention of such Personal Data and finally, the manner in which such Personal Data will ultimately be retained.

    
    
    




    
    
            Data Category
            Description
            Retention Period
            Rationale / Legal Requirement
            Disposal Method
        

    
            Customer Personal Information
            Names, contact details, demographics, and other PII collected during onboarding.
            7 years after the last interaction
            To comply with regulatory standards and for audit/reference purposes.
            Secure deletion or irreversible anonymisation.
        

            Insurance Documentation
            Scanned documents, PDFs, and policy details provided by customers.
            10 years after the last activity
            To meet insurance industry record-keeping standards and legal requirements.
            Digital shredding or secure file wiping procedures.
        

            Insurance Recommendations
            AI-generated comparison reports and insurance provider recommendations.
            3 years from issuance
            To allow customers to refer back to past recommendations while ensuring outdated advice is purged.
            Secure deletion from active systems; archived data purged securely.
        

            AI Processing Logs
            Logs that detail how the AI processed customer documents, including metadata.
            1 year
            For performance monitoring, debugging, and system improvements while minimising data exposure.
            Overwriting or secure deletion methods.
        

            Customer Support Communications
            Emails, chat logs, and call recordings between customers and support staff.
            3 years
            To maintain records for dispute resolution and regulatory compliance.
            Secure deletion with audit trails maintained until destruction.
        

            Audit & System Access Logs
            Records of system usage, access logs, and security events.
            2 years
            To support internal audits, security monitoring, and compliance requirements.
            Secure deletion through automated log rotation policies.
        

Data Category	Description	Retention Period	Rationale / Legal Requirement	Disposal Method
Customer Personal Information	Names, contact details, demographics, and other PII collected during onboarding.	7 years after the last interaction	To comply with regulatory standards and for audit/reference purposes.	Secure deletion or irreversible anonymisation.
Insurance Documentation	Scanned documents, PDFs, and policy details provided by customers.	10 years after the last activity	To meet insurance industry record-keeping standards and legal requirements.	Digital shredding or secure file wiping procedures.
Insurance Recommendations	AI-generated comparison reports and insurance provider recommendations.	3 years from issuance	To allow customers to refer back to past recommendations while ensuring outdated advice is purged.	Secure deletion from active systems; archived data purged securely.
AI Processing Logs	Logs that detail how the AI processed customer documents, including metadata.	1 year	For performance monitoring, debugging, and system improvements while minimising data exposure.	Overwriting or secure deletion methods.
Customer Support Communications	Emails, chat logs, and call recordings between customers and support staff.	3 years	To maintain records for dispute resolution and regulatory compliance.	Secure deletion with audit trails maintained until destruction.
Audit & System Access Logs	Records of system usage, access logs, and security events.	2 years	To support internal audits, security monitoring, and compliance requirements.	Secure deletion through automated log rotation policies.

6. Your rights

You have the following statutory rights in relation to your Personal Data:

Access your Personal Data and information relating to how it is processed;
Delete your Personal Data from our records;
Rectify or update your Personal Data;
Transfer your Personal Data to a third party (right to data portability);
Restrict how we process your Personal Data;
Withdraw your consent—where we rely on consent as the legal basis for processing at any time; and
Lodge a complaint with the Irish Data Protection Commission (see below).

You have the following rights to object:

Object to our processing of your Personal Data for direct marketing at any time; and
Object to how we process your Personal Data when our processing is based on legitimate interests.

If you wish to exercise any of these rights please send your request to support@lifeandprovide.com .

We hope that we are able to address any questions or concerns you may have. If you have any unresolved complaints with us, you can reach out to the Irish Data Protection Commission⁠ (opens in a new window) as our lead supervisory authority. For any unresolved complaints relating to the UK you can reach out to the Information Commissioner's Office ⁠(opens in a new window).

A note about accuracy: services like our Services generate outputs. In some cases, the output may not be the most factually accurate. For this reason, you should not rely on the factual accuracy of output from our models. If you notice that the Services output contains factually inaccurate information about you and you would like to request a correction or removal of the information, you can submit these requests through support@lifeandprovide.com , and we will consider your request based on applicable law and the technical capabilities of our models.

7. Security

We implement commercially reasonable technical, administrative, and organisational measures designed to protect Personal Data from loss, misuse, and unauthorised access, disclosure, alteration, or destruction. However, no Internet or email transmission is ever fully secure or error free. Therefore, you should take special care in deciding what information you provide to the Services. In addition, we are not responsible for circumvention of any privacy settings or security measures contained on the Service, or third-party websites.

8. Legal bases for processing

    
    Table: Purposes, Data Types, and Legal Bases
    
            Purpose of Processing
            Type of Personal Data processed, depending on the processing activity
            Legal basis, depending on the process activity
        
            To provide, analyse, and maintain our Services.
            
                Information
User Data
Communication Information
Log Data
Usage Data
Device Information
Location Information
Cookies and Similar Technologies

                Where necessary to perform a contract with you, such as processing a user’s prompts to provide a response.
            
            To improve and develop our Services and conduct research.
            
                Account Information
User Data
Communication Information
Data We Receive From Other Sources
Log Data
Usage Data
Device Information
Cookies and Similar Technologies

                Where necessary for our legitimate interests and those of third parties and broader society, 
                including in developing, improving, or promoting our Services (e.g., when we train and improve our models).
            
            To communicate with you, including to send you information about our Services.
            
                Account Information
User Data
Communication Information
Data We Receive From Other Sources
Log Data
Usage Data
Device Information
Cookies and Similar Technologies

                        Where necessary to perform a contract with you, such as processing your contact
                        information to send you a technical announcement about the Services.
                    
                        Your consent when we ask for it to process your Personal Data for a specific purpose
                        (e.g., sending certain forms of marketing communications).
                    
            To prevent fraud, illegal activity, or misuses of our Services, and to protect the security of our systems and Services.
            
                Account Information
User Data
Communication Information
Data We Receive From Other Sources
Log Data
Usage Data
Device Information
Cookies and Similar Technologies

                Where necessary to comply with a legal obligation.

                        Where we are not under a specific legal obligation, where necessary for our legitimate
                        interests and those of third parties, including in protecting our Services from abuse,
                        fraud, or security risks (e.g., processing data from security partners).
                    
            To comply with legal obligations and to protect the rights, privacy, safety, or property of our users or third parties.
            
                Account Information
User Data
Communication Information
Data We Receive From Other Sources
Log Data
Usage Data
Device Information
Cookies and Similar Technologies

                        Where necessary to comply with a legal obligation, such as retaining transaction
                        information to comply with record-keeping requirements.
                    
                        Where we are not under a specific legal obligation, where necessary for our legitimate
                        interests and those of third parties and broader society, including protecting our or 
                        our affiliates’, users’, or third parties’ rights, safety, and property (e.g., analysing 
                        log data to identify fraud and abuse in our Services).

Purpose of Processing	Type of Personal Data processed, depending on the processing activity	Legal basis, depending on the process activity
To provide, analyse, and maintain our Services.	Information User Data Communication Information Log Data Usage Data Device Information Location Information Cookies and Similar Technologies	Where necessary to perform a contract with you, such as processing a user’s prompts to provide a response.
To improve and develop our Services and conduct research.	Account Information User Data Communication Information Data We Receive From Other Sources Log Data Usage Data Device Information Cookies and Similar Technologies	Where necessary for our legitimate interests and those of third parties and broader society, including in developing, improving, or promoting our Services (e.g., when we train and improve our models).
To communicate with you, including to send you information about our Services.	Account Information User Data Communication Information Data We Receive From Other Sources Log Data Usage Data Device Information Cookies and Similar Technologies	Where necessary to perform a contract with you, such as processing your contact information to send you a technical announcement about the Services. Your consent when we ask for it to process your Personal Data for a specific purpose (e.g., sending certain forms of marketing communications).
To prevent fraud, illegal activity, or misuses of our Services, and to protect the security of our systems and Services.	Account Information User Data Communication Information Data We Receive From Other Sources Log Data Usage Data Device Information Cookies and Similar Technologies	Where necessary to comply with a legal obligation. Where we are not under a specific legal obligation, where necessary for our legitimate interests and those of third parties, including in protecting our Services from abuse, fraud, or security risks (e.g., processing data from security partners).
To comply with legal obligations and to protect the rights, privacy, safety, or property of our users or third parties.	Account Information User Data Communication Information Data We Receive From Other Sources Log Data Usage Data Device Information Cookies and Similar Technologies	Where necessary to comply with a legal obligation, such as retaining transaction information to comply with record-keeping requirements. Where we are not under a specific legal obligation, where necessary for our legitimate interests and those of third parties and broader society, including protecting our or our affiliates’, users’, or third parties’ rights, safety, and property (e.g., analysing log data to identify fraud and abuse in our Services).

9. Changes to the privacy policy

We may update this Privacy Policy from time to time. When we do, we will publish an updated version and effective date on this page, unless another type of notice is required by applicable law.

10. How to contact us

If you have any questions or concerns not already addressed in this Privacy Policy you can write to us at support@lifeandsupport.com .