Privacy Policy

Last updated: 8 October 2026

This Privacy Notice describes how MERICS collects and processes Personal Information when it provides transactional and advisory services (such as insurance broking, risk advisory, claims management, and other forms of insurance brokerage services) (“Services”) to our clients, including through the MERICS App.

1. Who we are

MERICS, insurance broker, Sodeco Square Center, Bloc B, 14th Floor, P.O. Box 175707 Mar Mikhael, Achrafieh, Beirut, Lebanon, is responsible for the Personal Information processed under this Privacy Notice, including through its website and application at app.merics.com (the “App”). For any question, write to admin@app.merics.com.

2. Personal Information

“Personal Information” means any information relating to an identified or identifiable natural person, including by way of example, name, identification number, contact details, or any other information that can directly or indirectly identify an individual. We may collect your Personal Information in the following ways:

We may collect Personal Information directly from you where you are our client or if you are involved in a claim that we handle on behalf of a client. In the App, this includes the information you enter to obtain a quote and take out a policy (identity and contact details, vehicle, property, travel or health information), the identity documents you upload, your payment confirmations and your messages to our team.
We may also collect Personal Information from publicly available sources, where permitted by applicable law and relevant to the Services, such as information published on social media platforms, public registers relating to property or assets, and official public records, including information about claims or convictions, for purposes such as due diligence, risk assessment and fraud prevention.
If you sign in to the App with Apple or Google, we receive from them the name and e-mail address you agree to share.

In addition, and where required for the provision of the Services and permitted by applicable law, we may collect and process certain categories of sensitive personal information, including but not limited to health or medical information, financial and banking details, employment or income information, claims or loss-related information, and identification or compliance-related documentation. Such information shall be collected and processed solely for legitimate business purposes and in accordance with applicable data protection and confidentiality obligations.

Card payments made in the App are processed by our payment providers on their own secure pages: MERICS does not receive or store your full card details.

3. How we use your Personal Information

We use your Personal Information:

to provide the Services and perform our contractual obligations toward our clients;
to conduct data analysis;
to monitor, prevent, and detect fraud and other unlawful activities;
to develop new services and to enhance, improve or modify our Services;
to operate, manage and expand our business activities;
to carry out background checks and due diligence in accordance with the applicable laws and regulations governing our business activities;
to perform administrative and operational activities in connection with the provision of our Services;
to establish, exercise or defend our legal rights or the rights of our clients or third parties; and
to comply with legal and regulatory obligations and to cooperate with regulatory and supervisory authorities.

4. Failure to provide Personal Information

Where Personal Information is required for the provision of the Services or to comply with legal or regulatory obligations, failure to provide such information may result in MERICS being unable to provide the Services, process claims, or otherwise perform its contractual obligations toward its clients.

5. Disclosure of your Personal Information

We may disclose your Personal Information to third parties where necessary for the purposes described in this Privacy Notice and in accordance with applicable laws and regulations, in the following circumstances:

to our intermediaries, professional advisers, service providers, insurers, reinsurers and business partners to the extent required to perform our contractual obligations toward our clients, including the delivery of the Services and the arrangement and administration of insurance products — for the App, this includes the insurance company underwriting your policy, our payment providers, and the providers who host and operate the App;
where disclosure is required or permitted by applicable laws and regulations, or pursuant to a lawful request by a competent authority, which may include authorities located outside your country of residence; and
in connection with any merger, acquisition, restructuring, sale of assets, or transfer of all or part of our business, to a successor or acquiring entity, including its affiliates and subsidiaries, subject to appropriate confidentiality and data protection safeguards.

6. Third-party responsibility

Where MERICS discloses Personal Information to third parties in accordance with this Privacy Notice, such third parties act as independent data controllers or as data processors on behalf of MERICS, as applicable. MERICS is not responsible for the privacy practices or policies of third parties with whom Personal Information is shared, however, where third parties process Personal Information on behalf of MERICS, MERICS shall require them, through appropriate contractual arrangements, to implement adequate confidentiality and security measures and to process Personal Information in compliance with applicable data protection laws.

7. WhatsApp Business

The App uses the WhatsApp Business Platform (Meta Cloud API) to send and receive messages. Messages exchanged on WhatsApp are also subject to the WhatsApp Privacy Policy and the Meta Privacy Policy. You can stop this channel at any time by replying STOP or by writing to admin@app.merics.com.

8. Cookies and analytics

The App only uses cookies that are strictly necessary for it to work (for example to keep you signed in). It uses no advertising or third-party analytics cookies. To understand how the App is used and to improve it, we keep our own usage statistics without cookies: the pages you open, the time spent on them, the type of device, operating system and browser, and the country derived from your IP address. Your IP address is deleted once the country has been determined, and the usage data are kept for 180 days on our servers and copied to our reporting environment hosted on Google Cloud, where they are only used to produce statistics. If you are signed in, these statistics are linked to your account. Details are set out in our Cookie Policy.

9. Security and retention

MERICS implements appropriate technical and organizational security measures designed to protect Personal Information against accidental or unlawful destruction, loss, misuse, alteration, unauthorized access, or disclosure. These measures are intended to ensure the confidentiality and availability of Personal Information and are reviewed periodically to maintain an appropriate level of security having regard to the nature of the data and the risks of processing.

MERICS will retain your Personal Information for as long as is necessary to fulfil the purposes for which it was collected, including the provision of Services to our clients. Where Personal Information is no longer required for such purposes, it may be retained for a further period of time to the extent necessary to comply with applicable legal or regulatory obligations and to commence or defend legal claims. We may retain aggregated or anonymized data which no longer identifies individuals and is therefore not considered Personal Information under this Privacy Notice, for longer periods for statistical or business purposes. How to ask for the deletion of your data is explained on our Data deletion page.

10. Your rights

Subject to the conditions and limitations set out under applicable laws and regulations, you may have the following rights in relation to your Personal Information:

the right to access your Personal Information and obtain a copy thereof;
the right to request the rectification or completion of inaccurate or incomplete Personal Information;
the right to request the erasure of your Personal Information where there is no lawful basis for its continued processing;
the right to request the restriction of processing of your Personal Information in certain circumstances;
the right to object to the processing of your Personal Information on legitimate grounds, including where processing is carried out for direct marketing purposes;
where processing is based on your consent, the right to withdraw such consent at any time, without affecting the lawfulness of processing carried out prior to such withdrawal;
where applicable and technically feasible, the right to receive your Personal Information in a structured, commonly used format or to request its transfer to another party;
the right to obtain information on the safeguards applied to transfers of your Personal Information outside Lebanon, where such transfers occur; and
the right to lodge a complaint with the competent local supervisory authority.

11. Limitation of liability

MERICS shall not be liable for any indirect, incidental, special, or consequential damages arising out of or in connection with the collection, processing, or use of Personal Information in accordance with this Privacy Notice. Clients remain responsible for ensuring that any Personal Information they provide to MERICS is accurate, complete, and up to date, and MERICS shall not be responsible for inaccuracies, errors or omissions in Personal Information provided by clients or by third parties on their behalf.

12. Changes to this Privacy Notice

MERICS may update or amend this Privacy Notice from time to time to reflect changes in legal requirements, regulatory guidance, or our data processing practices. Any material changes will be communicated through our website and, where appropriate or required by applicable laws and regulations, directly to affected clients. The updated version will be effective as of the date of publication, unless stated otherwise.

13. Contact & comments

If you have any questions or comments regarding this Privacy Notice or would like to exercise your rights as a data subject, please contact us via Contact us or by sending an email to admin@app.merics.com. We will review and respond to your request within a reasonable timeframe and in accordance with applicable laws and regulations.

MERICS — Sodeco Square Center, Bloc B, 14th Floor, P.O. Box 175707 Mar Mikhael, Achrafieh, Beirut, Lebanon — +961 (0)1 428 328